Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File:                     EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier:          7beAXeWdPWLFMq+KQjaAJPe4SZIOZaoVU1pwcfptBdo=
Subject key identifier:   B7:38:E0:AD:D0:99:D5:76:67:28:CF:EA:85:24:A3:D9:41:7B:47:5A
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer:       /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial:       01962F3D780B9EDB47F03E4E412DE87777EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number:          0F8F
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: tfqM7uKsmZNQ2LAS1RTEdUFhEXd6iBvZzjIr6H7bYLA=)
                          2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:78:0b:9e:db:47:f0:3e:4e:41:2d:e8:77:77:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=b738e0add099d5766728cfea8524a3d9417b475a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:8c:3b:e9:3f:13:8b:36:c3:84:9f:b4:dc:
                    d3:cc:cf:4c:ef:12:d8:8d:d8:35:32:a7:58:51:99:
                    bb:0d:fa:1c:20:a5:32:61:13:18:29:3c:66:9d:32:
                    a6:86:ea:04:f3:22:71:75:4d:c8:4f:ba:5b:03:1b:
                    d4:44:56:ac:80:cd:26:4d:50:52:76:39:b4:f0:f2:
                    e6:4f:39:ae:ff:54:b0:a9:40:a8:eb:d0:5c:20:fe:
                    a8:67:39:c7:e7:74:e2:40:fa:20:48:88:58:92:95:
                    90:5b:82:0e:96:e9:6d:09:4a:4a:96:03:e4:b1:ae:
                    74:b3:06:4e:25:04:46:13:0a:fc:28:9b:db:b3:b4:
                    35:b5:68:f5:75:a0:00:2b:af:83:fc:96:fe:42:36:
                    56:fe:d6:9b:fc:6b:a3:c6:91:27:2e:52:44:40:a5:
                    74:98:f9:e4:ac:99:e1:d0:a5:4d:5e:16:85:26:c6:
                    92:8f:d2:18:d1:80:38:ed:16:71:02:c6:d0:6c:66:
                    e2:52:e3:3d:51:20:23:de:b7:2c:8b:5f:a2:97:ec:
                    dc:91:bb:4c:6b:92:c7:7f:ce:30:89:0f:86:9b:16:
                    81:e6:f8:d1:49:40:d6:2a:ec:85:d3:77:89:4b:7c:
                    88:33:2d:9f:80:25:eb:cc:44:bd:5d:ec:53:55:9e:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:38:E0:AD:D0:99:D5:76:67:28:CF:EA:85:24:A3:D9:41:7B:47:5A
            X509v3 Authority Key Identifier:
                keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:45:8e:46:59:61:84:1a:70:76:ed:6c:0f:27:a7:92:4c:8c:
         25:26:6a:3b:91:83:b9:aa:76:62:1b:34:f6:f9:26:44:7c:bf:
         62:c6:eb:08:c4:b8:fb:07:2f:96:1c:4d:53:1e:61:54:59:fd:
         e5:2c:53:2e:af:9f:ad:df:4b:87:c2:d1:2a:2a:55:33:ff:5e:
         0f:d5:b2:c2:70:6d:23:0b:08:31:e6:12:e2:fe:a1:d0:0a:44:
         ec:d6:64:ab:54:8c:2e:8f:4c:8e:15:b3:cd:3a:af:74:4b:f8:
         27:92:b5:8b:99:ba:b3:62:46:06:e8:b4:21:fd:15:a1:0f:d5:
         f3:c5:af:2b:04:01:99:e2:eb:08:f1:34:6f:a2:53:30:c9:20:
         3b:c3:25:cc:42:73:5c:05:a0:04:4e:85:5a:4a:71:b5:7d:dc:
         06:83:ef:98:97:bd:bc:20:12:22:6e:59:ce:e9:c9:b7:52:82:
         c0:4f:94:45:86:82:a8:2e:c1:04:61:b9:40:94:5b:89:69:3a:
         1c:e4:ce:1d:ed:74:ae:f7:86:79:9b:53:9e:21:75:89:d1:a4:
         8d:37:06:57:f3:bf:6c:23:90:32:c5:24:89:d7:59:8b:82:52:
         9d:eb:1b:75:31:b5:9b:76:5a:98:a5:5f:4b:e5:ed:de:4c:5e:
         d3:e9:9f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXgLnttH8D5OQS3od3fsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNjYwZjBhMDVmYzRjZjczMzIyMzA4NTJkOWQ3OGJkN2Fj
MmYyNGIwHhcNMjUwNDEzMTMwMTE5WhcNMjUwNDE0MTMwMTE5WjAzMTEwLwYDVQQD
EyhiNzM4ZTBhZGQwOTlkNTc2NjcyOGNmZWE4NTI0YTNkOTQxN2I0NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U6MO+k/E4s2w4SftNzTzM9M7xLY
jdg1MqdYUZm7DfocIKUyYRMYKTxmnTKmhuoE8yJxdU3IT7pbAxvURFasgM0mTVBS
djm08PLmTzmu/1SwqUCo69BcIP6oZznH53TiQPogSIhYkpWQW4IOlultCUpKlgPk
sa50swZOJQRGEwr8KJvbs7Q1tWj1daAAK6+D/Jb+QjZW/tab/GujxpEnLlJEQKV0
mPnkrJnh0KVNXhaFJsaSj9IY0YA47RZxAsbQbGbiUuM9USAj3rcsi1+il+zckbtM
a5LHf84wiQ+GmxaB5vjRSUDWKuyF03eJS3yIMy2fgCXrzES9XexTVZ438QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc44K3QmdV2ZyjP6oUko9lBe0daMB8GA1UdIwQY
MBaAFBFmDwoF/Ez3MyIwhS2deL16wvJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEt
N2EwNmZmMDAyNTE3LzEvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEtN2EwNmZmMDAyNTE3
LzEvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkWORllh
hBpwdu1sDyenkkyMJSZqO5GDuap2Yhs09vkmRHy/YsbrCMS4+wcvlhxNUx5hVFn9
5SxTLq+frd9Lh8LRKipVM/9eD9WywnBtIwsIMeYS4v6h0ApE7NZkq1SMLo9MjhWz
zTqvdEv4J5K1i5m6s2JGBui0If0VoQ/V88WvKwQBmeLrCPE0b6JTMMkgO8MlzEJz
XAWgBE6FWkpxtX3cBoPvmJe9vCASIm5ZzunJt1KCwE+URYaCqC7BBGG5QJRbiWk6
HOTOHe10rveGeZtTniF1idGkjTcGV/O/bCOQMsUkiddZi4JSnesbdTG1m3ZamKVf
S+Xt3kxe0+mfaA==
-----END CERTIFICATE-----