Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          TQLAsJ+/j5flPk+XNIdkq12eUznHCiJUX72PSY3d6Mw=
Subject key identifier:   A8:4E:6F:2B:52:53:0E:80:13:79:31:B6:F4:98:A7:6B:52:38:B5:AF
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       01962E2B223F9DE870F1ACA0FCD86B91AC3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          03E0
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 6-bbeNLNkmIuyu3Lo5b34863iOM.roa (hash: lZJjYseqmXABz+2OUcMEvZWapoY92B+aQI4gDW+iLHY=)
                          2: EDJJIlUMrCN3cPb4YyplYaUa4mY.roa (hash: xSeFXRQr0ff+ENa0I7t8r/hMXg9ue9s9da6FSArG9HI=)
                          3: UY4B6ai0IUqpic2uyFBbXClXwVs.roa (hash: EpiSZtVV+62huL/J924f304WF/rHjhsYoh5R56nHB5w=)
                          4: Yq2uZcc2qRRP7aZ2CUk5bhls2PI.roa (hash: agQEn6bOXbJu8VUCvK5DiwKHmR8d/UEd/+IhzGxQaIo=)
                          5: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: BtfPbUUj2ggMuFXsbIvrTZG22BjJ0MQo7v6CRtOxfL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:22:3f:9d:e8:70:f1:ac:a0:fc:d8:6b:91:ac:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=a84e6f2b52530e80137931b6f498a76b5238b5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:28:65:b1:6a:be:0b:5e:71:52:14:26:6d:
                    5c:1e:17:e5:da:76:24:c2:45:3a:e5:a0:36:40:de:
                    5c:54:05:32:41:d8:d6:01:68:c8:7d:6a:8f:dc:53:
                    e2:49:db:bd:79:76:d2:b6:c9:32:71:5b:c2:2c:92:
                    18:6d:14:ab:b0:9d:70:f5:14:7b:7f:d0:24:08:0a:
                    58:aa:84:5e:ac:d0:88:15:77:19:98:d8:ed:06:9d:
                    fd:21:64:51:17:3b:4b:e8:64:9d:64:fc:88:d7:50:
                    c3:88:13:71:22:f2:5e:2c:3f:2b:8b:29:c4:67:b2:
                    f0:f8:d0:94:a4:eb:79:0b:f6:e6:96:29:ed:f7:4c:
                    64:93:f0:4e:7f:94:11:3c:66:da:04:fc:5a:b7:08:
                    54:97:f3:c3:66:a0:ba:a4:76:a0:f7:20:4d:7a:e6:
                    5d:e7:0c:8f:78:0e:bc:07:ee:4b:59:ac:34:f5:46:
                    b3:ee:bd:86:6c:fe:32:35:4b:12:ff:ec:a0:3b:4f:
                    4f:6a:fd:c9:0e:1c:c6:00:4c:ee:ce:e4:a0:ad:7c:
                    92:e5:95:21:ce:fa:bc:c7:9d:89:cc:ab:44:50:a0:
                    d0:78:a6:7a:c6:b2:80:9a:c1:30:ce:b9:02:dd:21:
                    b7:bb:68:42:10:12:f1:fb:db:d4:32:3c:35:26:f2:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4E:6F:2B:52:53:0E:80:13:79:31:B6:F4:98:A7:6B:52:38:B5:AF
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:80:d5:30:7a:05:d8:f8:a9:dd:3e:3a:17:e7:61:bc:9f:41:
         a8:73:e0:02:92:2c:ea:6f:ae:fc:7f:66:5e:2d:2f:ee:c2:65:
         3d:74:76:44:27:81:cb:ba:b2:c9:e6:60:9c:96:12:fa:36:d1:
         63:c0:7c:d2:d3:a0:b4:42:85:1b:df:e7:9d:c2:89:a9:31:38:
         f6:44:72:b9:e5:79:83:d3:c1:db:f3:d8:2f:d8:d2:6c:07:41:
         5d:55:01:87:12:1c:dc:56:70:e4:d9:d4:43:b0:da:bc:38:15:
         00:5c:cd:29:8d:af:e0:03:35:ee:25:96:26:46:bd:b6:c0:31:
         1c:fd:3a:99:76:09:10:31:11:d0:fa:df:4b:70:1d:6e:23:e8:
         a4:2d:45:1c:1b:c3:ba:df:a1:2b:b8:ad:c1:4c:05:af:e0:3f:
         77:c1:71:cb:99:98:b0:36:14:2e:f1:23:ce:33:4b:1e:69:0e:
         cd:3c:72:0c:fb:9d:2e:dd:1b:28:8c:a5:b8:47:2b:2d:ab:b1:
         07:c0:9d:57:a7:6a:87:c8:79:3d:c5:d7:38:03:af:04:80:aa:
         ae:56:e0:93:f3:d4:14:a6:25:c9:de:8a:f1:de:6b:30:02:b7:
         d1:22:e1:eb:08:8c:b0:2e:45:f2:f2:2d:9b:01:a8:f2:a3:e9:
         0b:20:2b:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKyI/nehw8ayg/Nhrkaw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjUwNDEzMDgwMTQwWhcNMjUwNDE0MDgwMTQwWjAzMTEwLwYDVQQD
EyhhODRlNmYyYjUyNTMwZTgwMTM3OTMxYjZmNDk4YTc2YjUyMzhiNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnEoZbFqvgtecVIUJm1cHhfl2nYk
wkU65aA2QN5cVAUyQdjWAWjIfWqP3FPiSdu9eXbStskycVvCLJIYbRSrsJ1w9RR7
f9AkCApYqoRerNCIFXcZmNjtBp39IWRRFztL6GSdZPyI11DDiBNxIvJeLD8riynE
Z7Lw+NCUpOt5C/bmlint90xkk/BOf5QRPGbaBPxatwhUl/PDZqC6pHag9yBNeuZd
5wyPeA68B+5LWaw09Uaz7r2GbP4yNUsS/+ygO09Pav3JDhzGAEzuzuSgrXyS5ZUh
zvq8x52JzKtEUKDQeKZ6xrKAmsEwzrkC3SG3u2hCEBLx+9vUMjw1JvIdRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhObytSUw6AE3kxtvSYp2tSOLWvMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYDVMHoF
2Pip3T46F+dhvJ9BqHPgApIs6m+u/H9mXi0v7sJlPXR2RCeBy7qyyeZgnJYS+jbR
Y8B80tOgtEKFG9/nncKJqTE49kRyueV5g9PB2/PYL9jSbAdBXVUBhxIc3FZw5NnU
Q7DavDgVAFzNKY2v4AM17iWWJka9tsAxHP06mXYJEDER0PrfS3AdbiPopC1FHBvD
ut+hK7itwUwFr+A/d8Fxy5mYsDYULvEjzjNLHmkOzTxyDPudLt0bKIyluEcrLaux
B8CdV6dqh8h5PcXXOAOvBICqrlbgk/PUFKYlyd6K8d5rMAK30SLh6wiMsC5F8vIt
mwGo8qPpCyArQw==
-----END CERTIFICATE-----