Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          YccdsODWlMium+bnmAuXi9mYWY7ipxjhE1F7SspAfWE=
Subject key identifier:   26:BB:FD:05:50:9A:91:17:70:FC:C2:71:85:D2:6A:FD:46:DA:3F:EE
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       01962F06814A19A480D13EFD3BA7AE267426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          01EC
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
                          2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
                          3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: 7wXTJBwTyOZu1gcbcanzE6EHtRgbBbftKJUAFrj44mg=)
                          4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
                          5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:81:4a:19:a4:80:d1:3e:fd:3b:a7:ae:26:74:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=26bbfd05509a911770fcc27185d26afd46da3fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:29:22:37:a1:b0:29:37:e0:b8:83:3b:dd:
                    c9:05:24:ad:60:32:7d:28:dd:f6:4b:0d:36:b9:aa:
                    c2:b1:56:5f:a7:0d:ef:b2:b6:4d:b9:dc:0a:e1:b2:
                    19:75:74:41:92:50:f1:c4:eb:a3:c0:0b:ab:3f:6c:
                    be:dd:c9:16:7f:ff:bf:38:ce:48:6a:1a:c2:26:21:
                    fc:d9:65:6b:59:ce:02:0c:dd:68:38:b7:0a:ce:e5:
                    9f:bd:5f:87:0b:1f:c6:a1:d4:87:17:75:e3:b1:f7:
                    c2:15:1b:9c:f6:47:8e:43:0b:5e:a4:3c:8b:d8:55:
                    7c:88:56:7c:ad:83:c1:ca:2a:ef:84:b4:3c:b2:90:
                    34:4a:c4:c6:da:48:40:99:cd:d9:d7:bc:0c:46:f8:
                    c0:aa:ad:6c:41:d5:f9:f5:ba:71:61:b3:ef:f4:fd:
                    78:2e:e9:76:ea:ca:68:39:fe:79:cd:ca:9b:27:d3:
                    b9:22:e2:ef:51:73:5b:b4:f0:9a:2e:a6:9d:97:1d:
                    90:66:6b:f7:25:3a:ed:02:dd:13:36:25:ac:52:25:
                    dc:d7:c2:71:da:5e:fd:55:de:4e:cb:20:a7:81:af:
                    a9:26:fd:62:b0:7b:a8:79:e8:f2:40:a9:db:04:7a:
                    88:82:d8:e3:38:e0:52:bd:3c:eb:3c:09:f7:f0:78:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:FD:05:50:9A:91:17:70:FC:C2:71:85:D2:6A:FD:46:DA:3F:EE
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:99:65:43:9c:aa:71:d8:cc:6b:16:38:37:59:67:bc:67:f1:
         54:61:9d:d5:cc:bb:44:5a:f2:da:e8:66:7f:d9:56:a2:4a:f9:
         79:2e:42:db:00:b4:23:84:1d:cf:95:6b:6e:34:76:7f:f8:25:
         5f:6f:80:a9:ff:a0:de:69:d6:73:68:ff:e0:b8:65:9a:c6:0f:
         d7:1c:d9:6e:b9:15:82:5d:6e:2a:c5:ab:f9:1a:fc:2a:59:be:
         28:3d:3f:99:ed:ff:7e:78:08:06:7e:ea:19:2e:47:9e:71:81:
         e7:27:1d:70:cc:ec:22:e6:09:11:e7:0c:b5:d0:9b:11:59:b7:
         70:d9:ae:6b:84:4b:09:f6:70:b7:75:80:b7:85:8c:55:14:ca:
         31:1d:05:2d:7d:40:69:a3:e2:ea:b0:3e:e0:bd:24:73:2c:ef:
         23:1b:a2:0e:39:22:27:9c:7d:d5:9f:10:ee:f0:f8:fa:ab:49:
         6a:d8:09:ef:b8:3a:4f:76:c2:01:e4:de:96:14:45:35:35:45:
         d3:dd:05:10:6c:16:f8:a7:aa:86:30:aa:f4:db:85:14:86:30:
         78:31:6e:af:03:ee:9e:b1:e1:58:63:72:63:d8:6c:ad:19:05:
         0f:08:e1:82:c4:1c:db:6e:29:07:a1:2e:47:80:0f:02:98:a4:
         9c:3c:e2:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBoFKGaSA0T79O6euJnQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey
MTVlYWEwHhcNMjUwNDEzMTIwMTE3WhcNMjUwNDE0MTIwMTE3WjAzMTEwLwYDVQQD
EygyNmJiZmQwNTUwOWE5MTE3NzBmY2MyNzE4NWQyNmFmZDQ2ZGEzZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNEpIjehsCk34LiDO93JBSStYDJ9
KN32Sw02uarCsVZfpw3vsrZNudwK4bIZdXRBklDxxOujwAurP2y+3ckWf/+/OM5I
ahrCJiH82WVrWc4CDN1oOLcKzuWfvV+HCx/GodSHF3XjsffCFRuc9keOQwtepDyL
2FV8iFZ8rYPByirvhLQ8spA0SsTG2khAmc3Z17wMRvjAqq1sQdX59bpxYbPv9P14
Lul26spoOf55zcqbJ9O5IuLvUXNbtPCaLqadlx2QZmv3JTrtAt0TNiWsUiXc18Jx
2l79Vd5OyyCnga+pJv1isHuoeejyQKnbBHqIgtjjOOBSvTzrPAn38HivvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa7/QVQmpEXcPzCcYXSav1G2j/uMB8GA1UdIwQY
MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt
OGNlNDE3OTIzMmM4LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4
LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJllQ5yq
cdjMaxY4N1lnvGfxVGGd1cy7RFry2uhmf9lWokr5eS5C2wC0I4Qdz5VrbjR2f/gl
X2+Aqf+g3mnWc2j/4LhlmsYP1xzZbrkVgl1uKsWr+Rr8Klm+KD0/me3/fngIBn7q
GS5HnnGB5ycdcMzsIuYJEecMtdCbEVm3cNmua4RLCfZwt3WAt4WMVRTKMR0FLX1A
aaPi6rA+4L0kcyzvIxuiDjkiJ5x91Z8Q7vD4+qtJatgJ77g6T3bCAeTelhRFNTVF
090FEGwW+KeqhjCq9NuFFIYweDFurwPunrHhWGNyY9hsrRkFDwjhgsQc224pB6Eu
R4APApiknDziJA==
-----END CERTIFICATE-----