Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.mft
File:                     euYhSLMLZr0KPaOJfs-_2a9PQx4.mft (raw, json)
Hash identifier:          JxtkWk/lKSSZ/0RrmoqYxNDv6XhGcnZClGo2a0WEYJk=
Subject key identifier:   14:2B:FC:48:D3:73:64:D3:71:8D:EE:3B:69:16:70:EB:33:24:0B:C3
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Certificate issuer:       /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial:       01962F0654F88126D20D091BEBCE07B26FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: KobCP1lCEu6BPyvfUTWJy1Dv7MA.roa (hash: dGRmdn7XqWJDLHPmqkuzRLVd2EYiao62ECUcZqZUV2Y=)
                          2: euYhSLMLZr0KPaOJfs-_2a9PQx4.crl (hash: j3P7vyVgHZxyYoS6JsJP6dcP/TzZHueaB9s4tD/F0T4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:f8:81:26:d2:0d:09:1b:eb:ce:07:b2:6f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=142bfc48d37364d3718dee3b691670eb33240bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:35:2e:98:8d:60:81:96:82:27:c9:53:cd:
                    1d:e7:0e:b8:65:fa:40:bc:c5:98:84:03:fd:51:5b:
                    8b:75:57:26:13:67:95:16:d6:7a:3e:50:61:e8:af:
                    61:6d:a3:38:e2:08:18:5a:5b:6a:da:e2:02:00:e2:
                    80:ec:2f:23:c0:ec:d0:e2:fe:42:7b:ba:31:71:e6:
                    52:df:3a:27:aa:2c:e7:9a:4c:ad:8d:cc:fc:3c:9f:
                    b0:b1:5e:5b:65:f1:e8:47:10:00:3c:27:3f:c3:f9:
                    24:b9:ce:25:22:f2:bc:14:e2:ad:d8:ab:8d:08:b4:
                    1e:09:9e:0c:1f:34:d2:b1:05:8a:f1:2d:1f:cf:b6:
                    4a:f0:00:29:62:54:01:13:0f:47:66:0a:5e:f8:49:
                    27:57:ac:68:9c:26:4b:eb:6e:75:da:ec:5d:e3:41:
                    04:94:25:7b:41:f0:31:0c:b7:66:f5:92:2b:83:d2:
                    fd:64:9f:97:8d:e7:eb:2a:cc:b9:54:af:26:98:06:
                    59:98:75:81:1c:4d:e5:bd:87:79:e0:f3:d1:5e:3b:
                    2c:df:a1:4d:5b:11:1c:81:7e:ba:38:63:9a:ba:56:
                    85:2d:7d:c1:18:a0:24:d7:71:74:a2:47:42:ca:d0:
                    b9:b6:09:de:2d:24:f3:21:24:aa:55:2c:e5:ce:cb:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:FC:48:D3:73:64:D3:71:8D:EE:3B:69:16:70:EB:33:24:0B:C3
            X509v3 Authority Key Identifier:
                keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:52:5b:f5:04:ec:94:b7:dc:52:9e:88:a1:27:a8:6b:33:
         10:01:c0:7d:90:a6:78:19:00:5c:b4:64:35:97:2f:5d:63:8d:
         cc:df:aa:da:f5:e8:37:d5:98:1e:54:53:21:26:e8:e0:ea:2f:
         63:28:8c:93:e3:0c:7b:01:01:d2:7b:66:8b:21:16:d6:c1:e7:
         6f:a5:88:90:28:0d:03:24:3d:b0:62:6a:77:f6:8a:5c:ba:b3:
         ad:cb:2f:9f:b2:11:c6:fe:9c:93:2e:8f:64:9a:b8:10:9f:cd:
         b3:f9:f8:32:22:87:b2:de:42:53:e0:6c:87:e8:c6:09:49:36:
         d3:c2:90:73:02:45:40:55:3d:f6:7c:21:f4:ed:01:1e:25:95:
         da:e9:9c:f8:fc:54:4f:3b:b5:fd:07:1d:11:23:2e:d0:50:8c:
         1e:69:c6:d8:15:f8:30:dc:f5:e1:e5:bb:ec:e0:3b:54:20:54:
         62:b4:a5:1e:64:75:ed:25:8f:d8:92:cc:42:db:2e:15:de:c2:
         ed:71:a4:15:85:53:5a:78:44:6c:91:7a:eb:ab:f9:fc:9f:aa:
         8c:48:4d:a1:1a:05:1d:3b:7c:23:64:ac:51:09:61:d8:b2:81:
         85:e2:27:6f:26:f1:f5:a9:a8:d2:39:de:1a:19:26:7a:a4:bd:
         4a:49:5a:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlT4gSbSDQkb684Hsm/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZTYyMTQ4YjMwYjY2YmQwYTNkYTM4OTdlY2ZiZmQ5YWY0
ZjQzMWUwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
EygxNDJiZmM0OGQzNzM2NGQzNzE4ZGVlM2I2OTE2NzBlYjMzMjQwYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF41LpiNYIGWgifJU80d5w64ZfpA
vMWYhAP9UVuLdVcmE2eVFtZ6PlBh6K9hbaM44ggYWltq2uICAOKA7C8jwOzQ4v5C
e7oxceZS3zonqiznmkytjcz8PJ+wsV5bZfHoRxAAPCc/w/kkuc4lIvK8FOKt2KuN
CLQeCZ4MHzTSsQWK8S0fz7ZK8AApYlQBEw9HZgpe+EknV6xonCZL62512uxd40EE
lCV7QfAxDLdm9ZIrg9L9ZJ+XjefrKsy5VK8mmAZZmHWBHE3lvYd54PPRXjss36FN
WxEcgX66OGOaulaFLX3BGKAk13F0okdCytC5tgneLSTzISSqVSzlzsvkMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQr/EjTc2TTcY3uO2kWcOszJAvDMB8GA1UdIwQY
MBaAFHrmIUizC2a9Cj2jiX7Pv9mvT0MeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXVZaFNMTUxacjBLUGFPSmZzLV8yYTlQUXg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zMWYyN2EtYjU3Yi00NzgwLTg0ZDAt
MjcxYmQ3MmNkZjY5LzEvZXVZaFNMTUxacjBLUGFPSmZzLV8yYTlQUXg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zMWYyN2EtYjU3Yi00NzgwLTg0ZDAtMjcxYmQ3MmNkZjY5
LzEvZXVZaFNMTUxacjBLUGFPSmZzLV8yYTlQUXg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA5SW/UE
7JS33FKeiKEnqGszEAHAfZCmeBkAXLRkNZcvXWONzN+q2vXoN9WYHlRTISbo4Oov
YyiMk+MMewEB0ntmiyEW1sHnb6WIkCgNAyQ9sGJqd/aKXLqzrcsvn7IRxv6cky6P
ZJq4EJ/Ns/n4MiKHst5CU+Bsh+jGCUk208KQcwJFQFU99nwh9O0BHiWV2umc+PxU
Tzu1/QcdESMu0FCMHmnG2BX4MNz14eW77OA7VCBUYrSlHmR17SWP2JLMQtsuFd7C
7XGkFYVTWnhEbJF666v5/J+qjEhNoRoFHTt8I2SsUQlh2LKBheInbybx9amo0jne
GhkmeqS9SklaFA==
-----END CERTIFICATE-----