Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File:                     7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier:          lhYwdlelSv4fRCnpFkuyMueh46e/3XW4HKGYTvKHlu4=
Subject key identifier:   23:C1:2F:AD:EE:49:B7:B8:02:7C:F0:7C:4F:CC:47:84:10:A0:47:0E
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer:       /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial:       01962E2AE929C978AD1C6842777AEC81DDF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: vMD/wJxPeV7fYRe5G9Z3I1rTaydckyXk2ElgWd19whU=)
                          2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
                          3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e9:29:c9:78:ad:1c:68:42:77:7a:ec:81:dd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=23c12fadee49b7b8027cf07c4fcc478410a0470e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:0e:9b:ef:15:58:1b:3d:44:4a:f9:b6:81:
                    30:88:3a:0e:06:8b:9c:c5:61:97:43:a7:ef:c1:21:
                    77:84:b4:25:7a:79:dc:14:ed:04:95:d1:18:89:ac:
                    9c:b1:b3:41:0d:7d:c8:c1:86:78:59:5a:9b:a3:53:
                    10:cd:40:f7:88:77:67:02:a2:e6:42:45:1d:0b:3c:
                    fd:42:8c:f9:9a:e0:b1:40:f6:0c:1b:34:d8:0e:b2:
                    b8:9a:55:7b:d7:c6:0e:8f:da:25:43:2a:34:60:ca:
                    cf:18:84:15:2c:f5:43:97:3c:a5:fc:2e:37:9e:e3:
                    5c:a6:f9:f4:58:08:cc:80:db:6d:c1:d8:93:ff:0f:
                    37:51:37:21:73:73:8c:57:f6:b9:74:ee:83:9f:47:
                    5c:93:20:74:b5:b7:f6:f0:45:2c:d6:41:c5:cf:e7:
                    88:3e:2e:01:32:de:ea:9c:60:8a:b2:f7:93:23:5a:
                    66:19:2a:8b:69:69:60:78:b3:a5:63:23:a8:0e:8f:
                    a8:66:3c:59:55:35:01:fd:92:23:af:24:39:8d:f8:
                    0a:25:9e:d7:c8:52:a8:55:70:e0:7f:6d:8f:e9:30:
                    42:6f:47:4e:28:ae:8e:16:da:74:d3:39:8b:97:f1:
                    c6:40:07:a9:74:41:8d:fe:00:50:3a:ff:57:de:67:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C1:2F:AD:EE:49:B7:B8:02:7C:F0:7C:4F:CC:47:84:10:A0:47:0E
            X509v3 Authority Key Identifier:
                keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:3f:22:4b:26:d1:85:a3:d4:26:e9:7a:53:be:45:75:85:
         27:a5:04:e9:f4:1e:62:67:6c:05:88:46:4c:e5:4e:d5:79:2a:
         d1:a9:73:e2:f5:46:fa:12:d6:0c:42:e6:1a:f8:b4:11:d4:3a:
         16:51:0d:97:50:51:c7:cf:c9:f3:26:2d:42:06:24:db:4d:40:
         48:a9:33:23:24:7d:76:2d:09:1e:84:2d:0f:62:42:db:e5:15:
         e4:0f:34:89:0a:59:1e:e5:c0:85:8f:b5:62:ad:d5:bd:87:f8:
         9b:e4:cf:19:14:2e:c6:4d:61:84:b2:58:01:d7:10:b5:1f:9f:
         9d:7d:d5:64:40:7f:15:8b:50:9b:5c:05:0c:de:ce:70:7f:80:
         7a:04:fa:2c:b4:d9:c5:d2:82:36:ed:22:07:77:09:ec:21:5d:
         d2:2a:08:05:26:78:6f:54:86:a2:e0:39:5f:fb:77:ee:dd:28:
         5c:12:17:76:bf:be:40:22:5b:9c:f5:a2:8b:58:ec:7b:b2:12:
         84:d2:63:47:20:87:f2:b9:07:46:2e:da:bd:7f:7d:db:5c:4f:
         f6:51:fd:ca:92:25:bd:10:0f:f9:e4:a9:ed:fe:b5:94:82:0f:
         e3:b8:21:da:87:0a:6b:04:4c:e5:fa:80:90:70:f1:70:90:38:
         df:d5:fb:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKukpyXitHGhCd3rsgd3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWIwODk5ZTM4YTk2YjU0ZmM0Y2JjZDEwZWY1MzljNTRl
ZDRkMzgwHhcNMjUwNDEzMDgwMTI2WhcNMjUwNDE0MDgwMTI2WjAzMTEwLwYDVQQD
EygyM2MxMmZhZGVlNDliN2I4MDI3Y2YwN2M0ZmNjNDc4NDEwYTA0NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMwOm+8VWBs9REr5toEwiDoOBouc
xWGXQ6fvwSF3hLQlenncFO0EldEYiaycsbNBDX3IwYZ4WVqbo1MQzUD3iHdnAqLm
QkUdCzz9Qoz5muCxQPYMGzTYDrK4mlV718YOj9olQyo0YMrPGIQVLPVDlzyl/C43
nuNcpvn0WAjMgNttwdiT/w83UTchc3OMV/a5dO6Dn0dckyB0tbf28EUs1kHFz+eI
Pi4BMt7qnGCKsveTI1pmGSqLaWlgeLOlYyOoDo+oZjxZVTUB/ZIjryQ5jfgKJZ7X
yFKoVXDgf22P6TBCb0dOKK6OFtp00zmLl/HGQAepdEGN/gBQOv9X3mc9lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPBL63uSbe4AnzwfE/MR4QQoEcOMB8GA1UdIwQY
MBaAFO4bCJnjipa1T8TLzRDvU5xU7U04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMt
YWRmNmRhYjg4Yzg0LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMtYWRmNmRhYjg4Yzg0
LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+4/Iksm
0YWj1CbpelO+RXWFJ6UE6fQeYmdsBYhGTOVO1Xkq0alz4vVG+hLWDELmGvi0EdQ6
FlENl1BRx8/J8yYtQgYk201ASKkzIyR9di0JHoQtD2JC2+UV5A80iQpZHuXAhY+1
Yq3VvYf4m+TPGRQuxk1hhLJYAdcQtR+fnX3VZEB/FYtQm1wFDN7OcH+AegT6LLTZ
xdKCNu0iB3cJ7CFd0ioIBSZ4b1SGouA5X/t37t0oXBIXdr++QCJbnPWii1jse7IS
hNJjRyCH8rkHRi7avX9921xP9lH9ypIlvRAP+eSp7f61lIIP47gh2ocKawRM5fqA
kHDxcJA439X7Hg==
-----END CERTIFICATE-----