Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File:                     4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier:          QukK3Yj8AP9MiIyhQUm14pysFtSfTIV+G+ZjOeixTLc=
Subject key identifier:   89:DB:22:43:D3:8E:20:88:30:85:11:52:F6:E5:2F:76:86:94:53:EB
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer:       /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial:       01962F06BA923C4E748C343504BEF35F1567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number:          0BF8
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: +XxRMMoAbtwsqwaT5BL4a7wU448KGUmVckCfAdY2uJ4=)
                          2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
                          3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:92:3c:4e:74:8c:34:35:04:be:f3:5f:15:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=89db2243d38e208830851152f6e52f76869453eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:ff:96:3b:b3:ed:a4:57:73:b9:b4:c3:4d:
                    17:b0:f1:dd:89:3b:20:aa:9a:28:e4:d1:6b:7d:79:
                    5d:84:65:0b:44:96:f0:e0:bf:bc:7a:c0:2f:08:56:
                    f1:99:30:c4:1d:c8:7d:fb:af:4d:47:50:bd:f5:77:
                    6d:3d:1f:07:0e:94:d6:eb:c8:5e:8d:83:16:c0:a2:
                    a0:61:30:e3:de:dd:8f:a5:4a:f3:ed:1d:ca:8d:8a:
                    90:65:38:28:3b:aa:a7:46:fb:37:1b:bc:02:e6:40:
                    a8:59:da:fc:01:4a:4e:62:6d:78:14:d4:1a:b6:e1:
                    53:c8:af:1b:31:39:df:16:28:46:d5:3a:03:86:70:
                    c2:09:dc:5d:a2:0f:b6:38:f3:b7:33:9d:15:32:7c:
                    e1:0d:e4:b8:86:bc:c0:89:da:c4:c2:d1:2d:12:ed:
                    98:d1:7b:e0:8c:b5:2f:d8:69:48:ed:1b:95:83:5f:
                    61:6a:6a:96:2b:88:cd:bd:8d:62:79:21:14:38:71:
                    76:b8:fe:cb:3d:d5:2f:9e:91:23:22:0c:c7:5b:06:
                    9a:d9:4e:a6:c0:6f:43:e0:b9:91:95:8f:97:23:43:
                    aa:e3:0c:da:c4:24:bd:66:cf:c3:16:5e:18:b8:86:
                    fe:b1:ac:a7:0c:43:4b:6f:b3:83:11:05:71:89:35:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:22:43:D3:8E:20:88:30:85:11:52:F6:E5:2F:76:86:94:53:EB
            X509v3 Authority Key Identifier:
                keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6f:bf:e8:1c:9b:e7:6b:0b:ee:99:5a:3b:b5:96:44:4c:6c:
         59:03:70:fe:02:f0:2a:20:75:65:74:47:2a:53:34:6a:10:0d:
         e4:97:8c:be:32:cf:4c:12:48:15:84:ac:7e:6f:40:8b:c9:78:
         b4:f2:c7:3e:68:eb:73:96:68:b2:7e:20:1d:12:2b:60:90:c1:
         c0:c7:2f:7c:01:f4:c8:3e:6e:1d:07:5b:66:69:73:0c:f0:c2:
         76:f7:0e:a2:9e:8c:75:c4:5d:22:0a:9b:70:fa:cb:c0:5d:f3:
         8b:e0:fc:db:56:7e:52:8f:a6:db:9b:72:13:fc:36:3e:09:e3:
         f8:d2:68:8b:12:da:16:06:1b:a3:5d:6a:64:3f:f5:84:4f:a4:
         0f:f0:64:2c:1e:42:2d:4a:e3:87:d9:70:72:ae:df:08:0f:43:
         81:ff:43:d9:5e:40:1f:9e:c5:45:98:e2:7e:df:4d:c5:e0:29:
         81:36:25:ab:c2:76:dd:be:63:7b:23:ef:36:0b:13:e7:7f:4c:
         15:bf:f2:33:f2:05:c3:bf:b4:08:aa:d4:56:b1:47:68:45:ca:
         23:2f:1f:29:d7:7a:69:3f:02:c4:f5:b7:9c:7e:6b:fa:7b:e1:
         3a:91:fd:7b:58:b7:c7:fe:f4:7d:31:74:56:02:d9:28:00:7a:
         bc:0d:07:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrqSPE50jDQ1BL7zXxVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
Eyg4OWRiMjI0M2QzOGUyMDg4MzA4NTExNTJmNmU1MmY3Njg2OTQ1M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wj/ljuz7aRXc7m0w00XsPHdiTsg
qpoo5NFrfXldhGULRJbw4L+8esAvCFbxmTDEHch9+69NR1C99XdtPR8HDpTW68he
jYMWwKKgYTDj3t2PpUrz7R3KjYqQZTgoO6qnRvs3G7wC5kCoWdr8AUpOYm14FNQa
tuFTyK8bMTnfFihG1ToDhnDCCdxdog+2OPO3M50VMnzhDeS4hrzAidrEwtEtEu2Y
0XvgjLUv2GlI7RuVg19hamqWK4jNvY1ieSEUOHF2uP7LPdUvnpEjIgzHWwaa2U6m
wG9D4LmRlY+XI0Oq4wzaxCS9Zs/DFl4YuIb+saynDENLb7ODEQVxiTXdHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInbIkPTjiCIMIURUvblL3aGlFPrMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2+/6Byb
52sL7plaO7WWRExsWQNw/gLwKiB1ZXRHKlM0ahAN5JeMvjLPTBJIFYSsfm9Ai8l4
tPLHPmjrc5Zosn4gHRIrYJDBwMcvfAH0yD5uHQdbZmlzDPDCdvcOop6MdcRdIgqb
cPrLwF3zi+D821Z+Uo+m25tyE/w2Pgnj+NJoixLaFgYbo11qZD/1hE+kD/BkLB5C
LUrjh9lwcq7fCA9Dgf9D2V5AH57FRZjift9NxeApgTYlq8J23b5jeyPvNgsT539M
Fb/yM/IFw7+0CKrUVrFHaEXKIy8fKdd6aT8CxPW3nH5r+nvhOpH9e1i3x/70fTF0
VgLZKAB6vA0H6A==
-----END CERTIFICATE-----