Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File:                     E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier:          hru6EMJq8l22PPregAVO9Q+FgfLGYP1ax4cpFLqeOFI=
Subject key identifier:   72:35:6F:5A:3F:43:A5:F1:9B:E8:4F:C3:12:4B:00:5C:2E:39:E1:AD
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       01962F06D8BE31FE124D61719ED587283CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
                          2: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
                          3: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: Hr4+uoadgfYZ0WUo+R6b7nx5yCWGAGS6SGT3AxsIDaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:be:31:fe:12:4d:61:71:9e:d5:87:28:3c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=72356f5a3f43a5f19be84fc3124b005c2e39e1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:3a:60:29:78:24:4d:47:54:f7:0c:49:1e:
                    28:b9:13:22:0f:ee:16:ec:7d:25:ed:f0:1b:6b:52:
                    ec:72:e8:9c:ed:11:a3:20:89:c9:84:2b:06:0d:ff:
                    34:00:f5:f0:9b:2c:66:ad:b9:f9:52:cc:58:29:e8:
                    6e:52:43:f8:79:5e:23:1a:ca:b0:26:cf:cb:29:f7:
                    91:c0:d9:ab:3d:cc:16:ab:c7:2a:fc:f8:72:e4:cb:
                    aa:b2:d0:73:a7:cd:67:12:12:6a:d5:47:5b:27:95:
                    4f:33:63:a2:a3:26:3a:4a:c3:8b:f2:02:b0:5a:d1:
                    6e:85:bf:f7:45:58:52:26:f7:de:db:1d:25:f4:94:
                    3c:f4:35:0b:f1:0f:24:6b:bd:94:90:59:39:17:ad:
                    d6:63:c2:9b:45:e6:6c:f6:05:ea:2f:f6:15:84:54:
                    aa:0c:26:5a:e9:3a:b5:2f:17:4b:bc:89:ae:0f:6a:
                    52:f4:eb:11:92:74:d8:26:48:35:95:24:7a:8a:26:
                    3e:96:19:5e:1f:6b:eb:0e:d2:34:8a:79:38:13:4d:
                    de:df:61:b7:12:5e:55:11:19:00:32:74:ea:1d:be:
                    5c:8a:a8:9a:57:59:7b:73:f4:4d:2f:e5:fb:b5:64:
                    3e:3a:4d:70:35:74:50:8f:22:d2:ae:8d:eb:10:80:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:6F:5A:3F:43:A5:F1:9B:E8:4F:C3:12:4B:00:5C:2E:39:E1:AD
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7a:47:97:ef:1d:4d:74:ed:da:e6:fb:8f:ab:65:c6:0e:9f:
         90:38:14:0e:f5:97:c1:51:fd:11:2c:9b:17:78:3a:b3:9e:15:
         aa:68:b2:31:df:ba:30:c2:32:c2:f2:28:2b:98:ba:95:b4:3b:
         4c:63:c0:a0:68:e0:35:16:d2:3b:03:ac:c3:dc:b9:7b:07:b5:
         46:9b:61:0b:bc:f8:f2:15:81:d2:4b:63:95:08:60:12:93:12:
         0b:d4:2d:ab:02:7c:34:cc:d8:c7:fa:87:6d:b6:42:c2:6e:c8:
         3a:6c:0a:e1:51:1a:db:9a:8e:8d:58:a4:f0:1b:53:83:0f:4c:
         5d:fc:85:0d:d0:2e:49:a7:24:d6:4e:39:10:0c:91:99:f7:f0:
         61:1d:c7:50:40:6b:25:fa:3e:b0:40:ba:5f:26:b9:05:cb:e7:
         cc:74:67:98:e8:02:f3:43:60:3b:ae:ad:fc:4a:3e:24:94:a2:
         e9:97:1b:7e:78:df:c1:33:c1:da:04:ae:3f:2c:d5:ee:2b:24:
         b8:7c:05:34:71:a6:26:93:e2:06:23:2b:a6:32:6e:1d:58:dc:
         e0:41:f3:11:ca:56:0a:e8:50:c8:1b:15:e7:10:e0:7e:eb:cb:
         e1:4c:97:79:6c:2a:c7:3a:2b:28:f3:9a:50:88:43:c3:17:55:
         92:b1:20:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBti+Mf4STWFxntWHKDzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTE5YWVmNjgzOTY5ZWI5ODJmMmRkYjIxOWI0NjUyYWYy
NmI5NmQwHhcNMjUwNDEzMTIwMTM5WhcNMjUwNDE0MTIwMTM5WjAzMTEwLwYDVQQD
Eyg3MjM1NmY1YTNmNDNhNWYxOWJlODRmYzMxMjRiMDA1YzJlMzllMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzps6YCl4JE1HVPcMSR4ouRMiD+4W
7H0l7fAba1Lscuic7RGjIInJhCsGDf80APXwmyxmrbn5UsxYKehuUkP4eV4jGsqw
Js/LKfeRwNmrPcwWq8cq/Phy5MuqstBzp81nEhJq1UdbJ5VPM2OioyY6SsOL8gKw
WtFuhb/3RVhSJvfe2x0l9JQ89DUL8Q8ka72UkFk5F63WY8KbReZs9gXqL/YVhFSq
DCZa6Tq1LxdLvImuD2pS9OsRknTYJkg1lSR6iiY+lhleH2vrDtI0ink4E03e32G3
El5VERkAMnTqHb5ciqiaV1l7c/RNL+X7tWQ+Ok1wNXRQjyLSro3rEICY4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI1b1o/Q6Xxm+hPwxJLAFwuOeGtMB8GA1UdIwQY
MBaAFBPhmu9oOWnrmC8t2yGbRlKvJrltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQt
ZmY5NjkyOGE2ZGY0LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQtZmY5NjkyOGE2ZGY0
LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXpHl+8d
TXTt2ub7j6tlxg6fkDgUDvWXwVH9ESybF3g6s54VqmiyMd+6MMIywvIoK5i6lbQ7
TGPAoGjgNRbSOwOsw9y5ewe1RpthC7z48hWB0ktjlQhgEpMSC9QtqwJ8NMzYx/qH
bbZCwm7IOmwK4VEa25qOjVik8BtTgw9MXfyFDdAuSack1k45EAyRmffwYR3HUEBr
Jfo+sEC6Xya5BcvnzHRnmOgC80NgO66t/Eo+JJSi6ZcbfnjfwTPB2gSuPyzV7isk
uHwFNHGmJpPiBiMrpjJuHVjc4EHzEcpWCuhQyBsV5xDgfuvL4UyXeWwqxzorKPOa
UIhDwxdVkrEgmg==
-----END CERTIFICATE-----