Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
File:                     ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json)
Hash identifier:          NdcQnG0O9Kv2dpQMHv6dohUU3injdj7SGg55lgwKEfw=
Subject key identifier:   AD:5C:19:7C:EA:71:EC:62:96:B4:D2:76:56:B4:96:FB:DF:2E:7F:1F
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Certificate issuer:       /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial:       01962FAB5AA13E0CE1775664B7B325D02871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: Gumma7CSH0QJDyYLGYO8JVucFbw.roa (hash: AHbFRK4oddEvM9hnH4lxRaSLOWlIxIkwfpWyReC2ymY=)
                          2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: C6y1BGJhIqUDhcv3omFkHGW4u7j/8xGArygpruPzrho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5a:a1:3e:0c:e1:77:56:64:b7:b3:25:d0:28:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=ad5c197cea71ec6296b4d27656b496fbdf2e7f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:88:5f:38:ce:23:4d:73:61:fd:27:52:97:
                    39:88:34:91:a0:fa:c7:b7:7f:23:9e:8e:45:cb:3a:
                    a0:0b:24:b5:35:2a:a6:0b:5c:99:93:af:6c:09:5a:
                    0d:5e:ba:0d:cc:e0:2e:b8:5f:41:44:d0:f1:f8:66:
                    3c:bd:4d:62:52:74:34:eb:05:dd:0c:47:b8:82:7c:
                    9a:d9:f6:e5:5f:43:90:67:06:5c:51:4f:8e:65:cb:
                    ed:c1:ac:7b:d0:9b:bc:7f:ef:2e:6e:80:6a:69:63:
                    ed:fb:e8:b5:29:3e:f9:3e:e2:8e:27:fd:00:a5:d0:
                    81:8e:d8:3a:d8:1b:81:ce:3b:20:e4:3c:14:10:7a:
                    31:9e:01:05:36:bd:65:33:30:a5:bc:ed:cc:92:7c:
                    ea:38:b1:63:8b:5a:a3:4e:ca:55:e0:cd:58:27:2d:
                    94:51:5d:88:80:65:95:ea:50:4c:70:01:3f:26:72:
                    35:66:de:37:57:bc:e0:e2:4a:87:5b:09:93:88:88:
                    09:b2:b7:d9:fd:53:d8:d3:fa:50:82:7a:34:e7:6a:
                    37:d4:c8:b7:de:22:e0:53:4d:14:b2:7d:c9:39:92:
                    a6:3c:26:a0:c0:7d:ad:be:f3:1d:aa:43:db:bd:cd:
                    6f:9b:b2:5d:e2:03:71:68:84:5a:9f:65:7a:3f:e8:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5C:19:7C:EA:71:EC:62:96:B4:D2:76:56:B4:96:FB:DF:2E:7F:1F
            X509v3 Authority Key Identifier:
                keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:1e:dc:12:0c:d9:47:39:d1:84:29:4d:8c:b7:01:52:7b:
         ed:61:4d:ab:d0:11:14:24:36:65:c5:8d:ff:83:17:77:3d:32:
         fd:3c:02:f0:b7:8d:f4:5b:c0:d9:18:dd:ed:17:98:a4:13:c5:
         09:40:86:23:36:be:e6:a0:3c:0f:e1:9e:5c:aa:9a:ac:83:f2:
         61:88:80:dc:0a:25:1c:4b:75:a1:2f:8b:cd:a3:7e:d6:be:4f:
         bd:8e:49:2d:a6:7f:eb:32:ef:cf:80:b8:bc:66:0f:fa:60:4d:
         4f:73:20:d4:b0:81:26:23:9c:7d:74:4d:61:a0:02:bb:80:e9:
         43:9c:9c:17:43:2e:2c:8a:c7:7f:2a:2e:c5:6a:99:fc:36:96:
         e9:fc:78:18:7c:63:41:f2:f4:e8:61:e0:ad:48:d4:01:c8:9a:
         40:57:ce:ef:df:30:91:38:63:e1:1b:81:97:39:72:ac:f9:a3:
         b3:56:d3:a9:97:a5:9c:b6:51:01:a6:63:0f:5a:22:95:1d:e4:
         95:dd:14:d4:66:41:95:26:22:a8:d2:7d:46:23:1f:f7:41:aa:
         cf:45:f8:88:cb:40:47:3c:00:c7:0f:69:80:9d:18:14:a3:8c:
         cd:7a:67:ed:39:e5:ff:39:de:76:f7:05:e8:e0:3e:01:5e:32:
         58:87:51:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1qhPgzhd1Zkt7Ml0ChxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWY1MzEwODA1ZWM3NTYxYTFhMjJmOWM4OTBjOTczMWZi
NmRlYmYwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
EyhhZDVjMTk3Y2VhNzFlYzYyOTZiNGQyNzY1NmI0OTZmYmRmMmU3ZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTmIXzjOI01zYf0nUpc5iDSRoPrH
t38jno5FyzqgCyS1NSqmC1yZk69sCVoNXroNzOAuuF9BRNDx+GY8vU1iUnQ06wXd
DEe4gnya2fblX0OQZwZcUU+OZcvtwax70Ju8f+8uboBqaWPt++i1KT75PuKOJ/0A
pdCBjtg62BuBzjsg5DwUEHoxngEFNr1lMzClvO3MknzqOLFji1qjTspV4M1YJy2U
UV2IgGWV6lBMcAE/JnI1Zt43V7zg4kqHWwmTiIgJsrfZ/VPY0/pQgno052o31Mi3
3iLgU00Usn3JOZKmPCagwH2tvvMdqkPbvc1vm7Jd4gNxaIRan2V6P+jjLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1cGXzqcexilrTSdla0lvvfLn8fMB8GA1UdIwQY
MBaAFIWvUxCAXsdWGhoi+ciQyXMftt6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTct
NzUyODM1MGQ0YzEzLzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTctNzUyODM1MGQ0YzEz
LzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6ge3BIM
2Uc50YQpTYy3AVJ77WFNq9ARFCQ2ZcWN/4MXdz0y/TwC8LeN9FvA2Rjd7ReYpBPF
CUCGIza+5qA8D+GeXKqarIPyYYiA3AolHEt1oS+LzaN+1r5PvY5JLaZ/6zLvz4C4
vGYP+mBNT3Mg1LCBJiOcfXRNYaACu4DpQ5ycF0MuLIrHfyouxWqZ/DaW6fx4GHxj
QfL06GHgrUjUAciaQFfO798wkThj4RuBlzlyrPmjs1bTqZelnLZRAaZjD1oilR3k
ld0U1GZBlSYiqNJ9RiMf90Gqz0X4iMtARzwAxw9pgJ0YFKOMzXpn7Tnl/znedvcF
6OA+AV4yWIdRAg==
-----END CERTIFICATE-----