Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File:                     9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier:          LyW3dryOc6X+TN+HRNiTSeeX3tXeuyvhf0HEHbir9N4=
Subject key identifier:   E1:CB:24:3C:C6:B1:92:FF:AF:B4:C8:20:A5:BB:9D:CA:FC:29:7B:3D
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer:       /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial:       01962E2ABE7A9D74C9ACB2C8ECE5862E4163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
                          2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: UOThvOmBWHlP+Bt60sgmUs3bDYyhGLL4tl11hv30t/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:be:7a:9d:74:c9:ac:b2:c8:ec:e5:86:2e:41:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=e1cb243cc6b192ffafb4c820a5bb9dcafc297b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:b1:34:fd:b3:9e:5d:d2:1b:9b:b4:b2:c0:
                    7e:39:23:35:2c:1b:b5:32:8d:2f:98:2b:df:b7:9d:
                    27:9e:a1:fd:3d:e9:d1:41:28:ef:a6:b3:21:5c:6c:
                    d7:38:f4:06:a4:5e:53:01:2b:75:6e:78:e0:cf:ba:
                    56:07:26:1f:a5:83:70:6d:92:cf:06:aa:ef:d9:f8:
                    8d:6b:a1:67:3d:9b:9a:29:ca:04:29:30:e3:42:7c:
                    e9:79:c7:55:b8:9a:4c:d9:dc:1d:fb:27:34:35:45:
                    da:51:11:5e:0f:c2:9a:35:14:96:95:33:42:eb:47:
                    c9:9a:58:8f:f8:3e:0d:6f:27:51:8c:d2:27:c9:9c:
                    7d:99:c3:06:f4:1e:0d:3c:64:85:8c:ce:ae:46:14:
                    d0:fa:c3:8e:9e:21:24:3c:c8:08:3b:7d:4c:41:08:
                    0b:20:95:f6:39:45:ff:fc:35:3f:a0:ae:18:d6:ac:
                    cd:50:b9:a3:55:74:a8:2c:e0:59:fa:18:52:23:04:
                    b0:00:61:31:1e:a1:f7:f4:04:1e:a6:ab:0a:77:e9:
                    50:9a:a2:03:d4:60:59:1b:29:0e:ce:8c:dd:1f:01:
                    1b:08:c9:a1:cf:19:89:15:18:61:37:9f:08:92:42:
                    b3:eb:ee:ae:4b:9f:eb:bc:23:f7:54:99:ed:cd:ee:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CB:24:3C:C6:B1:92:FF:AF:B4:C8:20:A5:BB:9D:CA:FC:29:7B:3D
            X509v3 Authority Key Identifier:
                keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e3:ca:a6:ab:3e:c1:01:cc:55:0e:1a:46:63:fd:e8:07:f7:
         7f:01:ba:d7:b5:8b:de:21:f9:bd:d8:60:5f:d5:74:2b:48:8f:
         e3:38:3a:34:e6:ba:19:47:df:74:82:31:e0:92:2a:c5:eb:fe:
         bc:d4:0e:2f:c3:01:b3:ce:bc:f5:ee:4a:d0:9a:97:e0:ac:65:
         a2:8e:ef:ca:a9:50:fe:b7:e2:8d:e4:b4:9f:d1:8a:7c:0e:df:
         6a:b9:00:51:87:92:1b:95:64:e8:8e:b3:62:06:3e:7b:34:90:
         b3:df:ed:28:18:8e:99:5a:71:b6:00:83:68:aa:d1:b4:92:51:
         de:7d:3e:5e:7d:a8:08:f3:13:6b:c0:28:c4:8a:38:27:2a:46:
         cc:83:8e:bc:ec:15:95:d4:d6:1f:e5:bd:54:cc:62:d7:4f:4e:
         7c:f9:88:dd:6a:47:82:f8:85:eb:e9:b2:54:3f:48:9b:ae:06:
         50:b6:74:14:85:fa:e4:85:a6:15:56:a8:07:05:c5:ad:7c:fa:
         67:fb:ab:95:4d:b1:b6:38:2c:f2:22:72:ff:a5:42:6f:1c:c2:
         7a:a9:19:e5:15:0a:bd:77:17:83:27:37:d9:0e:30:76:ca:34:
         cf:e9:3b:1f:78:03:ac:bf:f2:75:bf:d9:41:11:61:a5:0b:33:
         d5:45:05:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKr56nXTJrLLI7OWGLkFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDAyNGFkZTVlNDgwMmMwYTJmNjFlNmY4MGY0ZDIyZGMx
NTQ4NTMwHhcNMjUwNDEzMDgwMTE1WhcNMjUwNDE0MDgwMTE1WjAzMTEwLwYDVQQD
EyhlMWNiMjQzY2M2YjE5MmZmYWZiNGM4MjBhNWJiOWRjYWZjMjk3YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZixNP2znl3SG5u0ssB+OSM1LBu1
Mo0vmCvft50nnqH9PenRQSjvprMhXGzXOPQGpF5TASt1bnjgz7pWByYfpYNwbZLP
Bqrv2fiNa6FnPZuaKcoEKTDjQnzpecdVuJpM2dwd+yc0NUXaURFeD8KaNRSWlTNC
60fJmliP+D4NbydRjNInyZx9mcMG9B4NPGSFjM6uRhTQ+sOOniEkPMgIO31MQQgL
IJX2OUX//DU/oK4Y1qzNULmjVXSoLOBZ+hhSIwSwAGExHqH39AQepqsKd+lQmqID
1GBZGykOzozdHwEbCMmhzxmJFRhhN58IkkKz6+6uS5/rvCP3VJntze5jQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHLJDzGsZL/r7TIIKW7ncr8KXs9MB8GA1UdIwQY
MBaAFPRAJK3l5IAsCi9h5vgPTSLcFUhTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEt
NjNjOWM4NGVjNzRmLzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEtNjNjOWM4NGVjNzRm
LzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+PKpqs+
wQHMVQ4aRmP96Af3fwG617WL3iH5vdhgX9V0K0iP4zg6NOa6GUffdIIx4JIqxev+
vNQOL8MBs8689e5K0JqX4Kxloo7vyqlQ/rfijeS0n9GKfA7farkAUYeSG5Vk6I6z
YgY+ezSQs9/tKBiOmVpxtgCDaKrRtJJR3n0+Xn2oCPMTa8AoxIo4JypGzIOOvOwV
ldTWH+W9VMxi109OfPmI3WpHgviF6+myVD9Im64GULZ0FIX65IWmFVaoBwXFrXz6
Z/urlU2xtjgs8iJy/6VCbxzCeqkZ5RUKvXcXgyc32Q4wdso0z+k7H3gDrL/ydb/Z
QRFhpQsz1UUFyQ==
-----END CERTIFICATE-----