Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File:                     DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier:          To+5IlcOp4Y0R9VB934QuRYX26K4FWirCqTMWsRGpqM=
Subject key identifier:   10:5F:25:61:6E:70:16:BC:89:53:96:3C:79:17:CF:64:36:E2:98:1D
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer:       /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial:       01962E61A91CD24A33D0CF78CD065A8ED95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
                          2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: J0BXdWBnVB3P/7ve7k5wng3o5lmjbuf0p5j/HzzYhHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:1c:d2:4a:33:d0:cf:78:cd:06:5a:8e:d9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=105f25616e7016bc8953963c7917cf6436e2981d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f8:1d:2f:54:6e:fd:82:c3:a8:cc:c8:0c:67:
                    bb:e3:06:07:dd:61:2b:32:15:08:5c:cc:81:b5:3d:
                    53:4d:65:2f:3d:69:5a:0a:71:3e:4e:94:9b:5d:24:
                    38:84:11:39:3a:94:37:4d:aa:92:70:3d:61:70:b4:
                    67:52:f5:51:a5:88:b0:5e:66:1c:db:95:ce:84:c8:
                    b6:9a:70:f3:d1:47:4a:21:d2:49:04:97:18:6b:ff:
                    bc:9b:fb:b5:02:0a:c7:7c:82:da:e7:39:fa:06:e7:
                    4b:70:55:f1:5e:3d:c4:7d:16:18:2a:06:b3:28:ee:
                    54:22:55:1f:65:10:c7:21:4b:96:b4:3c:f2:07:31:
                    fe:98:4f:4e:ba:26:67:77:97:55:5f:ee:9a:b3:56:
                    a8:05:e7:4a:f5:38:30:cd:c4:cd:9f:d9:9d:93:0b:
                    c4:7e:28:a9:6b:c7:59:14:b2:dd:b0:50:33:e7:e9:
                    42:60:cd:8d:56:20:45:d4:5d:98:c0:f9:dc:67:75:
                    57:d3:b2:f8:0a:03:2e:c2:80:f3:6b:d1:43:30:6b:
                    37:43:7a:d8:33:fa:41:10:04:a4:32:6d:e3:ae:9f:
                    67:2e:c0:e8:47:8e:87:2b:2d:fc:ad:1e:b2:17:ad:
                    7d:bf:70:9b:ac:1f:fb:16:c2:d5:4d:a4:89:1d:33:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5F:25:61:6E:70:16:BC:89:53:96:3C:79:17:CF:64:36:E2:98:1D
            X509v3 Authority Key Identifier:
                keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:b6:a6:14:cc:a0:3a:c4:f5:5e:73:81:19:85:e7:92:d7:
         a1:12:f5:e3:bc:97:ca:69:2f:8c:e2:ff:62:58:e9:fb:f2:e5:
         a4:2c:71:24:80:42:6b:f6:5a:4f:98:7e:7a:95:8e:08:21:c8:
         61:5a:b8:88:49:e6:a6:45:66:dc:e9:2d:0f:92:23:83:81:e6:
         0a:68:7a:c0:2e:00:44:f2:d1:c1:48:6a:6c:19:10:b4:56:04:
         c0:16:59:70:17:7f:8d:d3:ee:fa:f8:e3:59:64:31:48:7a:e4:
         70:c9:4a:b1:e1:08:f6:d2:8f:e4:69:d6:61:c3:fc:f0:b2:39:
         fa:bc:21:48:81:eb:49:c4:bd:f3:58:84:54:df:60:7c:b5:ea:
         d4:1d:3c:09:21:d8:44:67:70:f3:c0:ec:85:b4:75:f9:5b:0d:
         36:73:7c:e6:d2:46:fb:2b:72:18:05:15:3d:5a:5a:6a:45:70:
         ee:fb:39:d9:9a:27:19:d4:cc:38:45:e0:b8:b9:00:c8:4d:16:
         13:a3:4f:39:0f:a8:b9:1d:bd:81:2c:c5:52:18:a8:07:b1:8c:
         d2:c6:40:33:7e:fe:c6:83:ef:fa:d9:3e:86:75:40:52:4e:21:
         50:4e:a5:ef:13:f3:29:4c:46:bc:2c:6e:51:ee:b4:fb:65:ca:
         7a:e6:23:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYakc0koz0M94zQZajtlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2ExZDViZGQ1MDM0NGZmNWVmODg0YTY2MGU4MmViYTgz
YmMwZGIwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
EygxMDVmMjU2MTZlNzAxNmJjODk1Mzk2M2M3OTE3Y2Y2NDM2ZTI5ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvgdL1Ru/YLDqMzIDGe74wYH3WEr
MhUIXMyBtT1TTWUvPWlaCnE+TpSbXSQ4hBE5OpQ3TaqScD1hcLRnUvVRpYiwXmYc
25XOhMi2mnDz0UdKIdJJBJcYa/+8m/u1AgrHfILa5zn6BudLcFXxXj3EfRYYKgaz
KO5UIlUfZRDHIUuWtDzyBzH+mE9OuiZnd5dVX+6as1aoBedK9TgwzcTNn9mdkwvE
fiipa8dZFLLdsFAz5+lCYM2NViBF1F2YwPncZ3VX07L4CgMuwoDza9FDMGs3Q3rY
M/pBEASkMm3jrp9nLsDoR46HKy38rR6yF619v3CbrB/7FsLVTaSJHTNnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBfJWFucBa8iVOWPHkXz2Q24pgdMB8GA1UdIwQY
MBaAFA7KHVvdUDRP9e+ISmYOguuoO8DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzct
N2M3ZjAwYTk1M2UxLzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzctN2M3ZjAwYTk1M2Ux
LzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMe2phTM
oDrE9V5zgRmF55LXoRL147yXymkvjOL/Yljp+/LlpCxxJIBCa/ZaT5h+epWOCCHI
YVq4iEnmpkVm3OktD5Ijg4HmCmh6wC4ARPLRwUhqbBkQtFYEwBZZcBd/jdPu+vjj
WWQxSHrkcMlKseEI9tKP5GnWYcP88LI5+rwhSIHrScS981iEVN9gfLXq1B08CSHY
RGdw88DshbR1+VsNNnN85tJG+ytyGAUVPVpaakVw7vs52ZonGdTMOEXguLkAyE0W
E6NPOQ+ouR29gSzFUhioB7GM0sZAM37+xoPv+tk+hnVAUk4hUE6l7xPzKUxGvCxu
Ue60+2XKeuYj9Q==
-----END CERTIFICATE-----