Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          E/bFyXokZ00u1mwXdgTUksExbm1NEWgYR1y8Gxi00Dg=
Subject key identifier:   CE:82:CA:6B:43:EC:0F:4D:E4:53:B3:1C:3A:A8:68:1D:14:BD:CD:49
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       01962ECFD5D642ADA02EED1F954E442421D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          150F
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (hash: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: ZSkk6IW5CpOeFmcT+koMHKxIFFtgP5iREVqQuYJbHUs=)
                          3: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (hash: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=)
                          4: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (hash: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=)
                          5: eVw30aYw8PRhfFZw4dMd0Whk59A.roa (hash: JkDjfjPCyMxcq4MYYOfAPVOc6bE+PI6e43zkk8H6tQ0=)
                          6: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (hash: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d5:d6:42:ad:a0:2e:ed:1f:95:4e:44:24:21:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=ce82ca6b43ec0f4de453b31c3aa8681d14bdcd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:74:c9:29:19:ed:f9:ea:22:94:bc:a5:bb:
                    d2:22:14:6e:1e:da:dc:9b:20:d6:a6:c7:f9:bf:36:
                    37:3b:39:3b:a5:b6:ba:59:df:d1:ac:e7:d8:8c:a0:
                    98:e6:a0:43:2b:99:8a:df:f6:5f:6c:aa:90:ac:26:
                    41:78:5c:eb:6a:45:8e:da:f3:97:2c:89:7f:0f:ba:
                    8d:5c:54:8c:e6:97:58:b0:c5:16:34:ae:53:82:e4:
                    49:ac:79:62:a8:82:95:75:1a:dc:98:8f:d1:c3:90:
                    d4:6d:31:bf:38:10:4e:95:7b:4a:e5:c1:10:2d:eb:
                    3c:06:90:e0:23:59:8b:e2:ef:48:36:90:cb:b0:31:
                    81:36:61:cd:43:de:40:56:ce:41:0c:ac:16:51:22:
                    8b:16:6d:c9:34:e3:d1:e2:92:32:73:d7:bc:d1:12:
                    65:8f:1b:74:59:7a:f1:f9:f7:4f:51:05:28:cf:64:
                    bc:f3:08:75:3b:ad:70:2c:10:6d:3a:81:0b:96:82:
                    4f:38:f7:01:d5:bf:62:36:8e:4a:6f:f7:1b:ba:a8:
                    db:a1:ba:ca:26:42:ee:ca:b7:cc:87:c7:dc:e8:3f:
                    c5:9c:97:aa:e6:90:67:a3:03:8d:4a:49:53:ae:fc:
                    ab:8c:87:c3:cd:b1:a2:a1:a1:e1:b6:35:8c:90:71:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:CA:6B:43:EC:0F:4D:E4:53:B3:1C:3A:A8:68:1D:14:BD:CD:49
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:1b:1c:c6:0a:fe:0f:18:f4:0f:e3:7e:03:b9:f2:6d:91:
         9c:d1:c9:ec:b3:eb:b8:21:d8:c4:7c:24:c5:12:b1:da:fb:e6:
         e1:d6:27:3d:26:c1:73:d3:bc:11:ab:d0:1b:e2:44:a0:d9:0d:
         26:b3:a3:1d:ae:5d:d6:44:09:39:02:39:f4:a9:17:81:d2:57:
         3e:8e:65:5e:0a:27:07:3d:d9:ed:13:f2:e5:35:67:24:4b:ee:
         94:77:53:10:e7:3c:d1:1f:61:ad:f4:17:78:f6:fd:6c:9d:f6:
         91:3f:4b:1c:61:50:64:cf:a4:99:50:e4:50:f2:21:2d:6f:0a:
         6e:cb:e4:05:0d:bb:96:c7:3e:6e:5e:da:95:23:13:a6:8b:a1:
         f4:be:da:21:91:6a:9a:93:ad:e1:fe:ce:30:4a:19:46:77:7b:
         ff:c6:7a:e1:a4:44:35:d0:89:a7:2e:9c:f2:e6:be:0c:62:fe:
         b9:7b:46:78:2f:25:2e:98:2f:92:42:88:49:b7:ee:b7:ee:c7:
         a0:e9:6e:a1:eb:f2:3e:69:a4:f9:76:0f:da:51:67:66:e5:20:
         1e:75:be:ee:f5:de:a1:94:58:4d:7b:ba:76:4b:92:76:e5:0e:
         7d:d1:09:37:f2:53:b6:76:47:36:0b:a0:e4:f2:6f:f5:90:ec:
         93:9d:7b:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9XWQq2gLu0flU5EJCHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjUwNDEzMTEwMTM0WhcNMjUwNDE0MTEwMTM0WjAzMTEwLwYDVQQD
EyhjZTgyY2E2YjQzZWMwZjRkZTQ1M2IzMWMzYWE4NjgxZDE0YmRjZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn850ySkZ7fnqIpS8pbvSIhRuHtrc
myDWpsf5vzY3Ozk7pba6Wd/RrOfYjKCY5qBDK5mK3/ZfbKqQrCZBeFzrakWO2vOX
LIl/D7qNXFSM5pdYsMUWNK5TguRJrHliqIKVdRrcmI/Rw5DUbTG/OBBOlXtK5cEQ
Les8BpDgI1mL4u9INpDLsDGBNmHNQ95AVs5BDKwWUSKLFm3JNOPR4pIyc9e80RJl
jxt0WXrx+fdPUQUoz2S88wh1O61wLBBtOoELloJPOPcB1b9iNo5Kb/cbuqjbobrK
JkLuyrfMh8fc6D/FnJeq5pBnowONSklTrvyrjIfDzbGioaHhtjWMkHFi8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6CymtD7A9N5FOzHDqoaB0Uvc1JMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbYbHMYK
/g8Y9A/jfgO58m2RnNHJ7LPruCHYxHwkxRKx2vvm4dYnPSbBc9O8EavQG+JEoNkN
JrOjHa5d1kQJOQI59KkXgdJXPo5lXgonBz3Z7RPy5TVnJEvulHdTEOc80R9hrfQX
ePb9bJ32kT9LHGFQZM+kmVDkUPIhLW8KbsvkBQ27lsc+bl7alSMTpouh9L7aIZFq
mpOt4f7OMEoZRnd7/8Z64aRENdCJpy6c8ua+DGL+uXtGeC8lLpgvkkKISbfut+7H
oOluoevyPmmk+XYP2lFnZuUgHnW+7vXeoZRYTXu6dkuSduUOfdEJN/JTtnZHNgug
5PJv9ZDsk517Ow==
-----END CERTIFICATE-----