Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File:                     8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier:          1cGvJGrFU3gjaqf70P3HlqT/DZVcmeegmMR1AO3nUno=
Subject key identifier:   E4:67:34:13:B8:B8:BE:D7:E1:0D:84:B8:FD:AE:BD:37:75:07:83:75
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer:       /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial:       01962DF3AD5F813429EEA19BAF2D00A5BB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: xRYeXz/0iMdtJEX+d6/tLApVycJDVWZNfC2WurBRJrg=)
                          2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ad:5f:81:34:29:ee:a1:9b:af:2d:00:a5:bb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=e4673413b8b8bed7e10d84b8fdaebd3775078375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:d6:c9:89:a6:78:36:b7:f8:0a:a0:8d:a7:
                    e8:e9:cb:f6:60:dc:0d:fb:ee:ac:b2:e7:05:a8:60:
                    e9:d0:c1:49:fb:35:45:f0:cf:fb:ea:01:b4:cc:ce:
                    6e:d3:50:d0:7f:b9:a1:71:7d:fd:42:f4:88:2d:5b:
                    0e:4d:f1:5c:04:cb:0d:ad:e4:93:f9:5a:74:2b:c0:
                    e2:73:1f:bc:1d:c6:c5:46:91:e0:a7:89:c6:fc:8b:
                    e5:8e:c5:99:62:52:af:12:6c:7a:d3:d7:e8:92:41:
                    df:5b:ab:a0:85:48:65:61:28:42:6b:2f:82:2b:6a:
                    e1:ba:64:19:83:95:7c:22:b8:d5:4c:b8:93:2e:8a:
                    48:90:c1:81:27:98:a5:38:07:87:9b:62:6b:a8:0b:
                    b7:5e:91:02:57:6a:46:40:9e:f7:47:54:0c:a0:0f:
                    e2:88:79:68:29:82:7f:e6:7e:51:fb:17:d6:8c:29:
                    c1:a3:69:27:a8:81:2d:bc:09:6a:1d:28:2e:5e:56:
                    b3:ca:ef:05:61:80:3e:14:25:c7:c4:e7:9a:1d:62:
                    f8:57:9f:fd:9d:d3:04:d6:1f:a7:c8:19:b2:c0:78:
                    d1:a7:8d:94:1b:b1:88:d9:0a:c9:cb:c0:aa:09:e7:
                    45:e0:b9:c9:92:d2:a9:e3:25:28:52:9b:a7:85:99:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:34:13:B8:B8:BE:D7:E1:0D:84:B8:FD:AE:BD:37:75:07:83:75
            X509v3 Authority Key Identifier:
                keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:0d:aa:66:e0:9c:5e:c2:ad:52:f3:93:53:58:f1:ca:30:
         e0:94:12:f2:5b:fc:d7:47:9d:b4:ad:88:94:c0:72:e0:7a:a0:
         72:a8:e1:d3:c4:97:f0:cc:06:63:a5:0f:f1:97:97:90:1b:4a:
         96:7b:f9:aa:6a:21:46:1e:66:48:3f:f8:15:13:24:6b:5f:72:
         ef:09:e6:95:d9:22:e9:0f:e5:8e:84:4c:82:4c:21:8b:61:00:
         59:cd:b8:7f:78:91:6f:91:0d:9c:41:05:d4:84:ab:84:fb:ad:
         72:63:d5:89:d7:0b:86:b5:34:5d:46:d9:a5:f7:b7:53:71:a5:
         d8:9d:47:d3:5b:e9:15:b2:b3:dd:51:e4:f6:83:c4:4e:84:7f:
         60:09:27:d9:a5:e5:fe:81:86:15:f7:02:7e:19:f5:c7:db:a6:
         8d:e1:d9:d4:2b:88:7a:cf:b2:96:a8:4c:1e:da:a6:31:87:e8:
         30:0a:84:7e:2f:60:41:38:46:40:03:de:f7:61:5d:a7:a9:50:
         78:17:56:c7:12:98:02:47:67:dc:90:b6:39:49:0b:3a:ae:f4:
         77:0c:e2:34:e5:69:38:d5:7b:0a:3b:10:0c:c7:b7:43:c3:3a:
         12:09:56:9b:73:dc:71:bd:25:a2:bf:89:47:81:b2:03:8c:99:
         f4:c9:75:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt861fgTQp7qGbry0ApbucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk
NTM2MDYwHhcNMjUwNDEzMDcwMTA2WhcNMjUwNDE0MDcwMTA2WjAzMTEwLwYDVQQD
EyhlNDY3MzQxM2I4YjhiZWQ3ZTEwZDg0YjhmZGFlYmQzNzc1MDc4Mzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslzWyYmmeDa3+Aqgjafo6cv2YNwN
++6ssucFqGDp0MFJ+zVF8M/76gG0zM5u01DQf7mhcX39QvSILVsOTfFcBMsNreST
+Vp0K8Dicx+8HcbFRpHgp4nG/IvljsWZYlKvEmx609fokkHfW6ughUhlYShCay+C
K2rhumQZg5V8IrjVTLiTLopIkMGBJ5ilOAeHm2JrqAu3XpECV2pGQJ73R1QMoA/i
iHloKYJ/5n5R+xfWjCnBo2knqIEtvAlqHSguXlazyu8FYYA+FCXHxOeaHWL4V5/9
ndME1h+nyBmywHjRp42UG7GI2QrJy8CqCedF4LnJktKp4yUoUpunhZm5TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORnNBO4uL7X4Q2EuP2uvTd1B4N1MB8GA1UdIwQY
MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct
NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh
LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjsNqmbg
nF7CrVLzk1NY8cow4JQS8lv810edtK2IlMBy4Hqgcqjh08SX8MwGY6UP8ZeXkBtK
lnv5qmohRh5mSD/4FRMka19y7wnmldki6Q/ljoRMgkwhi2EAWc24f3iRb5ENnEEF
1ISrhPutcmPVidcLhrU0XUbZpfe3U3Gl2J1H01vpFbKz3VHk9oPEToR/YAkn2aXl
/oGGFfcCfhn1x9umjeHZ1CuIes+ylqhMHtqmMYfoMAqEfi9gQThGQAPe92Fdp6lQ
eBdWxxKYAkdn3JC2OUkLOq70dwziNOVpONV7CjsQDMe3Q8M6EglWm3Pccb0lor+J
R4GyA4yZ9Ml1yQ==
-----END CERTIFICATE-----