Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          NpJbf4A5sT74V1PsvAnVXXcYSn8h/V2PsbpaZLh2NFY=
Subject key identifier:   46:BA:77:B8:BF:8E:43:AD:87:EB:9A:ED:E1:74:E2:62:93:79:C7:04
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       01962E61F9B938CF466C9E4CA3E3DEE2DFDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0B8B
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: pgnqagwr/cXHGhjS+2aTo0mLll/cLpBGEWWpgfbR+6E=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:b9:38:cf:46:6c:9e:4c:a3:e3:de:e2:df:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=46ba77b8bf8e43ad87eb9aede174e2629379c704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bf:f8:ec:3e:13:d5:90:69:64:8c:25:e6:f0:
                    79:cc:25:b5:8b:c4:fc:0c:1b:ee:6c:61:87:42:d2:
                    e4:e6:9d:bf:0f:0c:df:01:ad:1f:c0:2b:28:ca:98:
                    a4:8a:b7:72:f7:38:1b:76:ae:74:37:d0:67:19:f4:
                    2f:e9:51:45:13:de:84:6c:ad:79:ec:7a:d4:cb:44:
                    57:3b:5e:f6:ca:ef:a9:d1:58:07:17:d9:0a:bb:48:
                    f2:4d:53:9b:17:6f:aa:e1:2e:74:46:3b:19:37:03:
                    fc:ce:56:45:89:c0:d9:06:46:71:c0:73:87:70:0e:
                    7e:20:ca:fe:89:5c:19:e6:b0:b9:a3:89:96:45:1b:
                    63:96:a8:c0:70:fc:1e:51:5e:13:e9:ee:e5:0d:4c:
                    48:56:c0:69:a6:42:2d:4c:d8:f1:c0:a7:7f:d1:5b:
                    22:3e:07:aa:7b:1c:e9:dd:63:35:3b:7a:e0:87:da:
                    9f:c9:5f:f4:55:3d:0c:43:c1:c1:28:d0:26:6e:67:
                    0d:18:a4:81:80:ab:e0:ec:97:e3:c3:91:5a:c1:c7:
                    b7:61:59:aa:49:93:7c:25:c6:6c:72:81:21:f6:7e:
                    b3:80:83:54:51:27:4b:b0:3e:4d:66:10:c2:4a:6d:
                    77:a3:d5:a0:ff:59:08:ca:44:56:56:03:29:ce:e0:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:77:B8:BF:8E:43:AD:87:EB:9A:ED:E1:74:E2:62:93:79:C7:04
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:f6:a9:09:4f:e1:0f:bf:9b:29:53:f0:05:10:18:fa:64:
         53:08:ba:bc:2c:ef:fb:58:31:ef:a6:13:75:44:f0:8f:e7:31:
         f7:12:37:58:b8:45:89:67:6a:19:8a:2c:04:5a:ae:f5:9a:5c:
         30:8b:da:cf:92:b6:cb:28:ad:f3:e5:e5:79:b6:14:54:a9:92:
         ac:0a:29:cb:a9:6e:59:91:57:d0:7a:cc:7d:53:e5:1a:24:2c:
         24:36:84:41:5e:24:76:29:80:79:d4:fa:07:6c:72:ed:6c:e4:
         9f:6c:86:15:b5:7f:e5:b8:63:fd:5b:81:f3:50:dd:7f:b3:24:
         78:d1:f5:fd:a5:85:f4:54:92:e6:82:fe:4f:ee:58:b3:0f:11:
         11:e5:02:14:4d:7b:85:eb:8b:c1:ca:e9:f2:b6:78:bd:35:bf:
         98:62:51:9b:e9:e8:c8:d4:35:8d:98:22:d8:ed:70:f6:43:65:
         cc:0a:7d:08:e9:a6:be:6c:ed:c9:1f:1e:36:ad:8c:2e:9b:43:
         76:01:dc:48:a6:17:07:70:4a:b1:35:14:06:2b:52:39:b6:c4:
         b8:f3:e3:a7:85:84:76:4e:4e:d0:71:09:37:e8:83:0c:dc:d1:
         4d:6d:c6:8a:96:9d:2c:00:38:2c:63:f0:7d:a6:1b:66:9d:4c:
         86:f1:31:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfm5OM9GbJ5Mo+Pe4t/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjQzNjEzNTM1ZmZhYTczZDlhY2M1MDNjNzFhMjhmYTE3
YjM4MzkwHhcNMjUwNDEzMDkwMTM0WhcNMjUwNDE0MDkwMTM0WjAzMTEwLwYDVQQD
Eyg0NmJhNzdiOGJmOGU0M2FkODdlYjlhZWRlMTc0ZTI2MjkzNzljNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L/47D4T1ZBpZIwl5vB5zCW1i8T8
DBvubGGHQtLk5p2/DwzfAa0fwCsoypikirdy9zgbdq50N9BnGfQv6VFFE96EbK15
7HrUy0RXO172yu+p0VgHF9kKu0jyTVObF2+q4S50RjsZNwP8zlZFicDZBkZxwHOH
cA5+IMr+iVwZ5rC5o4mWRRtjlqjAcPweUV4T6e7lDUxIVsBppkItTNjxwKd/0Vsi
Pgeqexzp3WM1O3rgh9qfyV/0VT0MQ8HBKNAmbmcNGKSBgKvg7Jfjw5Fawce3YVmq
SZN8JcZscoEh9n6zgINUUSdLsD5NZhDCSm13o9Wg/1kIykRWVgMpzuAFZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa6d7i/jkOth+ua7eF04mKTeccEMB8GA1UdIwQY
MBaAFBC0NhNTX/qnPZrMUDxxoo+hezg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQt
Y2YzYzFhNzllNjM0LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQtY2YzYzFhNzllNjM0
LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvX2qQlP
4Q+/mylT8AUQGPpkUwi6vCzv+1gx76YTdUTwj+cx9xI3WLhFiWdqGYosBFqu9Zpc
MIvaz5K2yyit8+XlebYUVKmSrAopy6luWZFX0HrMfVPlGiQsJDaEQV4kdimAedT6
B2xy7Wzkn2yGFbV/5bhj/VuB81Ddf7MkeNH1/aWF9FSS5oL+T+5Ysw8REeUCFE17
heuLwcrp8rZ4vTW/mGJRm+noyNQ1jZgi2O1w9kNlzAp9COmmvmztyR8eNq2MLptD
dgHcSKYXB3BKsTUUBitSObbEuPPjp4WEdk5O0HEJN+iDDNzRTW3GipadLAA4LGPw
faYbZp1MhvExWg==
-----END CERTIFICATE-----