Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          +lFhe2JuMn3tTypE5hbSPkrgzZi7xzV77k8P16Hrslc=
Subject key identifier:   DC:68:89:15:AE:4D:8D:E0:3D:B6:A0:E5:7C:C9:EB:71:B1:E9:0E:62
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       01962FAB99948645ED7934DF60936F48CABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          150C
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 1vircYxh5-jeyCHncAB4LncMdwU.roa (hash: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=)
                          2: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: 4LiZqTxX0Zr4wL3sUxJRxIEToZqhDrsTSUrQ8nWuxTs=)
                          3: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (hash: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=)
                          4: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (hash: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=)
                          5: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (hash: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=)
                          6: EpGUqveN8_iwqXtX3loQqZpefjQ.roa (hash: BK7p4b3/2gbXuD0eD7vqsFTJ+r23upun/RghpY97TiM=)
                          7: KHEz-UIy1itbvqjSN-exHkznw7M.roa (hash: mV8K8D3yuT/lnpk/k3Efi2aUQNdC5dfkApy2KMYktWo=)
                          8: NSnb3tUKAteQgCjg27tPwCtQsow.roa (hash: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=)
                          9: OBs7tOHp2Wjn-4vQjiF3T1Tvdqo.roa (hash: fvlWOqKo6QA1tHDJxdBzRG65QuYwKPujIF/1V8LwtVw=)
                          10: PW-XBbZvdPD9m9eDPj0lHnb6ghY.roa (hash: N1LlPU0OyiEGm15myNdRDTryn/I5VsBGbIp8D8OMHY4=)
                          11: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (hash: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=)
                          12: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (hash: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=)
                          13: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (hash: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=)
                          14: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (hash: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=)
                          15: XNivPuYpwzsyBWSVK0UP_mTGSTM.roa (hash: b8FsxpaUdfRYc57L8BwR77E37GuFMW2GwS9TNBfbgIo=)
                          16: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (hash: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=)
                          17: YLX2PpJC2jdo1UiXusO_3hzsXug.roa (hash: 8rbASZsr6aOYYISGy+IELA0dmKcsLlWy4ooK50nSGCM=)
                          18: _0Fsi7ExnvxZvUlBuBySlQdmmfg.roa (hash: jXEhTPkNTKh8qr7YJI+rU0aZtl6egvKgkBd6i4d7S/E=)
                          19: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (hash: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=)
                          20: btDg54MeJbXTPEtxucWKVoxBNaM.roa (hash: H3nemfeenmHgaltlyzaYjSQZrnYMiZ/c/aLfawo+I4k=)
                          21: d4YbeMmWmyXeBM8u68uKWF25nwo.roa (hash: qtZE6RS5BgKCqE6kopMvxaMLNpxuumjautrXypOIQx8=)
                          22: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (hash: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=)
                          23: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (hash: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=)
                          24: pGvZFqdJfVwAhNj34rEhjtwcqqs.roa (hash: xskFCPdKZw/j4SJCIetQoQZeZl6kQRAE9JdBqHbYOdY=)
                          25: pbTTnCLOLIjCLVBstBODbiFmGmw.roa (hash: 8YkIamAbQU3NMaTjWNl+EcrwO/p3qlC0IxQhIIQUrsg=)
                          26: z6yT1q0T7LBqZpy9PTiWdAbhrhU.roa (hash: n5dOrWVGmQ/SZ7Maa9/Hdiv5+rDt72g8LPCctbA9zS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:99:94:86:45:ed:79:34:df:60:93:6f:48:ca:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=dc688915ae4d8de03db6a0e57cc9eb71b1e90e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cb:28:9f:ea:99:6e:9c:71:c6:02:39:98:46:
                    83:4f:39:a3:c3:ff:81:57:e7:e6:e5:44:d0:0e:c5:
                    d3:99:05:fe:df:02:29:c7:cf:33:44:e9:6b:c6:74:
                    4c:3b:6f:dc:94:75:e3:07:9e:8c:21:b8:19:c3:ac:
                    14:b3:03:db:c5:31:d0:59:de:54:52:8e:ed:55:59:
                    12:cd:86:13:c0:09:3d:8f:f8:91:ea:09:db:f6:cf:
                    be:80:d1:77:5c:8c:9b:be:9e:6d:1a:d9:0a:fb:55:
                    ef:5f:61:b5:a4:26:7b:9e:36:0b:35:c8:8b:1c:85:
                    cb:ef:54:f6:36:5d:ee:5a:b0:42:34:bb:f6:ef:0c:
                    17:39:5d:c0:9a:20:c7:8b:67:9f:d8:ba:1e:06:03:
                    ec:1b:94:35:33:d7:7e:71:2a:c3:a9:a6:2a:a3:6e:
                    03:5b:45:2b:42:8e:96:b2:3f:50:b6:25:89:64:67:
                    65:4e:ab:c9:c6:93:32:4c:73:8c:18:21:ef:8b:e7:
                    3e:5b:74:ca:c8:11:35:55:c0:09:f7:57:fc:0b:fb:
                    75:7a:c6:a3:27:ee:10:87:59:76:e0:44:c4:7e:d0:
                    bd:cf:e5:6b:94:13:f2:8e:cd:3d:c7:dd:b1:96:49:
                    4e:0c:e7:d1:62:4c:c3:44:63:03:b1:48:96:9a:39:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:68:89:15:AE:4D:8D:E0:3D:B6:A0:E5:7C:C9:EB:71:B1:E9:0E:62
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:f3:0c:10:06:7f:0d:77:61:a9:c9:df:01:43:b3:f1:c9:
         d4:4b:19:f5:4c:70:28:f8:1d:f3:95:44:f7:20:dc:af:e5:2e:
         e9:a5:04:25:61:bf:c0:3b:cd:7e:92:df:8c:2d:da:d2:2b:94:
         f7:3f:0a:48:e2:fa:10:e4:bc:d4:45:f0:f5:a0:1a:fc:78:cc:
         70:cd:d3:9d:16:24:46:47:80:3f:13:ab:ae:a9:e3:3e:69:19:
         ca:44:d8:9d:6b:69:ec:84:37:99:81:1c:b7:1b:dd:a4:69:29:
         01:c0:67:4d:76:16:71:39:77:ed:ff:39:8b:ed:7b:06:16:8a:
         1d:f7:63:3c:06:1f:8a:ef:82:f9:16:fb:c4:65:9b:c6:d8:be:
         d1:da:60:c4:00:c5:95:27:c7:c8:b1:d4:96:0a:4e:01:2f:4d:
         50:12:34:e5:db:de:c4:44:8e:5c:26:b1:03:fd:c1:46:f2:3f:
         33:3c:35:d1:0b:fe:5a:a4:22:72:aa:0b:34:cd:9c:40:41:ea:
         c8:0a:10:cb:23:e0:ac:a4:0c:b4:65:03:6b:de:6d:8b:05:3e:
         5b:c6:04:f8:43:c2:a3:96:eb:06:30:ee:3e:62:64:93:df:26:
         d1:17:7a:c9:02:39:e9:fb:ec:f8:f6:a6:6f:d9:0b:41:6f:85:
         0d:6d:fb:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5mUhkXteTTfYJNvSMq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjUwNDEzMTUwMTM3WhcNMjUwNDE0MTUwMTM3WjAzMTEwLwYDVQQD
EyhkYzY4ODkxNWFlNGQ4ZGUwM2RiNmEwZTU3Y2M5ZWI3MWIxZTkwZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cson+qZbpxxxgI5mEaDTzmjw/+B
V+fm5UTQDsXTmQX+3wIpx88zROlrxnRMO2/clHXjB56MIbgZw6wUswPbxTHQWd5U
Uo7tVVkSzYYTwAk9j/iR6gnb9s++gNF3XIybvp5tGtkK+1XvX2G1pCZ7njYLNciL
HIXL71T2Nl3uWrBCNLv27wwXOV3AmiDHi2ef2LoeBgPsG5Q1M9d+cSrDqaYqo24D
W0UrQo6Wsj9QtiWJZGdlTqvJxpMyTHOMGCHvi+c+W3TKyBE1VcAJ91f8C/t1esaj
J+4Qh1l24ETEftC9z+VrlBPyjs09x92xlklODOfRYkzDRGMDsUiWmjnXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxoiRWuTY3gPbag5XzJ63Gx6Q5iMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiXzDBAG
fw13YanJ3wFDs/HJ1EsZ9UxwKPgd85VE9yDcr+Uu6aUEJWG/wDvNfpLfjC3a0iuU
9z8KSOL6EOS81EXw9aAa/HjMcM3TnRYkRkeAPxOrrqnjPmkZykTYnWtp7IQ3mYEc
txvdpGkpAcBnTXYWcTl37f85i+17BhaKHfdjPAYfiu+C+Rb7xGWbxti+0dpgxADF
lSfHyLHUlgpOAS9NUBI05dvexESOXCaxA/3BRvI/Mzw10Qv+WqQicqoLNM2cQEHq
yAoQyyPgrKQMtGUDa95tiwU+W8YE+EPCo5brBjDuPmJkk98m0Rd6yQI56fvs+Pam
b9kLQW+FDW375A==
-----END CERTIFICATE-----