Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
File:                     E_xd30njbWmTYwGtIr8kOkcbUkw.mft (raw, json)
Hash identifier:          1+GVgjUaHPW6MXI7Pw5cfBQuhKsScufQ507l6Uhmk/o=
Subject key identifier:   70:7D:E7:60:98:32:40:1D:C9:80:67:DF:83:6F:02:B6:87:B2:87:CF
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Certificate issuer:       /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial:       01962F74BCFEBDAF8AF67B7223421BEE0A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
Manifest number:          0BE3
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: E_xd30njbWmTYwGtIr8kOkcbUkw.crl (hash: 9JLbGddfefcyf4FYeDGrmd2gsTRYLQ2Xo28N9/1fJ7Q=)
                          2: TBlASPcR78fuynDDw3RgtcVhkrQ.roa (hash: ZgFGRZrNPcQYHDv0l0eVYG11hp9amh5nevB8oXQScOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:fe:bd:af:8a:f6:7b:72:23:42:1b:ee:0a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=707de7609832401dc98067df836f02b687b287cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:42:91:f6:1e:8e:f9:4b:0c:2d:32:c3:d4:
                    71:49:38:df:6b:91:b5:13:91:0d:3a:ae:33:81:23:
                    97:e7:0a:36:c3:de:b5:40:a0:eb:fd:e5:1a:de:9c:
                    bb:83:08:80:45:74:df:eb:c1:92:c7:fb:6e:bf:bd:
                    0d:ef:c8:74:ca:03:be:29:32:2a:1d:8a:2f:cb:1d:
                    d8:cc:24:6e:c1:27:47:a7:21:0c:7d:a2:ac:ee:7f:
                    5a:a7:bf:4a:4f:0e:c1:c0:4c:eb:2e:99:99:b9:44:
                    d3:aa:d2:fa:7f:27:99:66:a4:ee:d6:78:02:6a:d3:
                    cb:78:c0:ae:10:89:fe:e4:7c:8d:6c:93:14:1d:79:
                    81:41:6f:33:3c:30:97:b8:88:94:a1:d3:3a:e4:bc:
                    7f:78:e6:31:8f:b4:12:28:13:80:fa:35:93:e8:57:
                    b9:ec:d7:d2:91:5b:a0:1f:74:68:55:87:d5:94:b5:
                    15:2f:ec:55:9d:2b:b5:cd:db:0d:77:3a:3e:38:f8:
                    c7:86:6b:bc:a7:66:24:c5:e1:66:11:b5:2a:b3:ed:
                    b5:6a:35:5d:eb:e0:27:c1:1a:96:22:2b:be:f0:bb:
                    43:41:e9:77:38:30:90:33:ab:95:0f:1f:26:ba:c2:
                    23:ea:69:51:55:60:f2:87:45:58:22:96:8f:4e:28:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7D:E7:60:98:32:40:1D:C9:80:67:DF:83:6F:02:B6:87:B2:87:CF
            X509v3 Authority Key Identifier:
                keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:27:89:01:4a:ea:e6:22:5c:08:74:ad:50:e7:7a:5d:7f:
         c6:5f:df:f9:6a:f5:e5:db:43:7b:17:8c:6d:8f:3b:98:30:24:
         53:c6:c1:28:b7:c7:80:c2:08:37:1e:35:20:e8:98:85:52:f7:
         98:56:dc:aa:b0:2f:d6:dc:13:c4:4c:ac:4b:ce:ff:f7:4a:c8:
         b1:11:ee:74:8b:79:98:85:88:86:c8:22:69:65:27:e2:df:6b:
         e9:ce:66:eb:d7:f4:e8:4d:b6:24:be:4b:06:d4:51:ef:dd:65:
         a7:47:29:1f:a1:f5:97:68:9a:32:9f:1f:79:87:d3:0e:e9:1d:
         2f:ac:d0:80:06:a0:af:48:0e:6b:37:7f:ae:0e:c3:26:14:bf:
         67:98:13:23:4a:f8:b3:9a:bf:29:7e:65:39:51:cb:0c:15:aa:
         33:46:e5:f9:e9:d3:46:13:d3:52:1d:ec:52:ee:16:52:4a:6a:
         1b:cb:98:93:a4:ae:6f:3a:0a:cb:4c:14:f6:a7:4f:28:13:eb:
         9e:d8:fb:8a:de:93:d2:01:c8:f5:9f:72:c0:d2:ba:99:4e:36:
         10:f8:39:4d:78:99:62:c1:9e:41:9c:42:7d:65:b9:e4:be:c1:
         07:8f:bd:77:df:18:4d:3c:1e:d1:f0:96:b7:f5:51:51:66:06:
         e3:ba:fc:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLz+va+K9ntyI0Ib7goJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmM1ZGRmNDllMzZkNjk5MzYzMDFhZDIyYmYyNDNhNDcx
YjUyNGMwHhcNMjUwNDEzMTQwMTQxWhcNMjUwNDE0MTQwMTQxWjAzMTEwLwYDVQQD
Eyg3MDdkZTc2MDk4MzI0MDFkYzk4MDY3ZGY4MzZmMDJiNjg3YjI4N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybVCkfYejvlLDC0yw9RxSTjfa5G1
E5ENOq4zgSOX5wo2w961QKDr/eUa3py7gwiARXTf68GSx/tuv70N78h0ygO+KTIq
HYovyx3YzCRuwSdHpyEMfaKs7n9ap79KTw7BwEzrLpmZuUTTqtL6fyeZZqTu1ngC
atPLeMCuEIn+5HyNbJMUHXmBQW8zPDCXuIiUodM65Lx/eOYxj7QSKBOA+jWT6Fe5
7NfSkVugH3RoVYfVlLUVL+xVnSu1zdsNdzo+OPjHhmu8p2YkxeFmEbUqs+21ajVd
6+AnwRqWIiu+8LtDQel3ODCQM6uVDx8musIj6mlRVWDyh0VYIpaPTijKcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHB952CYMkAdyYBn34NvAraHsofPMB8GA1UdIwQY
MBaAFBP8Xd9J421pk2MBrSK/JDpHG1JMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yZWY4NDgtMzYxMS00MGMwLWE2YmMt
NDRhN2ExNTg4MTYyLzEvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yZWY4NDgtMzYxMS00MGMwLWE2YmMtNDRhN2ExNTg4MTYy
LzEvRV94ZDMwbmpiV21UWXdHdElyOGtPa2NiVWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJswniQFK
6uYiXAh0rVDnel1/xl/f+Wr15dtDexeMbY87mDAkU8bBKLfHgMIINx41IOiYhVL3
mFbcqrAv1twTxEysS87/90rIsRHudIt5mIWIhsgiaWUn4t9r6c5m69f06E22JL5L
BtRR791lp0cpH6H1l2iaMp8feYfTDukdL6zQgAagr0gOazd/rg7DJhS/Z5gTI0r4
s5q/KX5lOVHLDBWqM0bl+enTRhPTUh3sUu4WUkpqG8uYk6SubzoKy0wU9qdPKBPr
ntj7it6T0gHI9Z9ywNK6mU42EPg5TXiZYsGeQZxCfWW55L7BB4+9d98YTTwe0fCW
t/VRUWYG47r8CA==
-----END CERTIFICATE-----