Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File:                     50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier:          q5goiOIWPCISwB3+u4lP1xLAzHtPLVK67XjnCFm34YI=
Subject key identifier:   21:8E:78:90:EF:17:92:8D:4E:26:12:0E:22:20:C0:C0:1F:D7:99:27
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer:       /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial:       01962F74648103DC246AA0B17A8995883E1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number:          0D00
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: a1LpqGjRogSzp7jBAoXdZGZaFa/AfMyVcCWoPX94XMU=)
                          2: nIb9hACkrzkR8YbAdKP9wDLbBJc.roa (hash: GZXAKYA4rdv87pCnOscB54KXgGj+TJ2DGRrncRH4Kpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:64:81:03:dc:24:6a:a0:b1:7a:89:95:88:3e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=218e7890ef17928d4e26120e2220c0c01fd79927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:52:f8:d9:bd:f9:7b:3a:cd:cb:82:35:39:28:
                    dd:38:dc:4c:61:63:b8:36:16:12:52:62:86:4b:21:
                    17:2b:3a:f3:37:2c:f9:e8:88:5a:cf:df:4e:35:3f:
                    24:ca:ca:9a:a5:14:0a:e1:bf:3c:ee:e1:02:00:4b:
                    c7:57:ee:a9:a6:81:15:cd:98:46:76:cb:b4:66:e6:
                    8b:d6:c8:1d:0e:bb:67:18:c8:a5:66:86:d2:c3:1e:
                    95:e1:70:21:3e:58:da:44:f8:37:0a:a2:a6:4b:00:
                    94:16:c3:14:c2:15:d0:7e:91:58:b6:2f:ea:f3:f8:
                    cf:d6:a8:e8:94:9d:da:64:14:eb:93:0f:b3:b3:24:
                    d0:fb:77:59:9d:ee:1b:0c:05:c2:45:95:23:2f:51:
                    0e:9d:1a:a8:67:c1:89:6d:5b:93:ee:af:e6:c0:65:
                    f8:62:32:8d:8b:d0:15:aa:1f:7d:bf:80:7c:2c:93:
                    cc:e9:e4:96:07:a3:6f:81:55:f9:9d:92:e6:7f:da:
                    fb:84:49:dc:79:b2:21:8b:5b:62:a6:ef:ec:e8:86:
                    d4:42:a5:08:7e:ac:88:36:09:e5:82:53:33:b6:fa:
                    96:71:ca:57:00:16:66:d5:07:eb:22:33:a2:36:66:
                    ae:eb:f8:62:9a:a0:a4:31:1c:6f:dd:68:22:9c:fa:
                    c2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8E:78:90:EF:17:92:8D:4E:26:12:0E:22:20:C0:C0:1F:D7:99:27
            X509v3 Authority Key Identifier:
                keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:99:76:fd:c2:d7:c2:3d:38:ed:b8:f2:cf:e9:ba:70:aa:f1:
         30:52:bb:89:b8:21:b2:cf:b7:82:58:2f:33:4e:91:eb:60:24:
         65:ee:d0:14:8e:38:0b:eb:7b:62:3d:e3:af:18:91:e3:cf:e5:
         87:7b:81:fc:d2:34:64:e8:02:24:de:9a:37:56:7b:d5:ec:0a:
         85:41:d6:50:a0:72:f7:9f:5b:ee:ec:99:7b:47:a4:99:d4:a7:
         fc:ff:b2:47:9e:fd:eb:dc:e0:c7:3e:71:e1:51:62:b7:6b:4a:
         1b:73:8e:e4:ce:95:f6:0b:19:f2:75:6f:d1:dc:93:8a:89:65:
         d0:c2:0e:a9:ce:93:15:d5:a7:29:7d:1f:3f:bc:18:e7:2e:a1:
         d8:34:40:07:52:5a:7f:2a:3f:05:dc:e6:49:ed:a3:c7:f5:94:
         35:ff:77:ac:be:cb:db:92:00:37:cb:68:e0:fc:0b:45:82:7a:
         68:64:eb:23:15:9d:19:ac:39:1e:ca:9c:c2:d6:88:c3:6f:78:
         c9:ac:31:85:67:4f:33:d2:95:1c:14:5b:77:28:95:55:d9:49:
         7b:03:b0:a2:ce:21:38:43:ea:78:6b:64:72:45:d9:0a:ad:d1:
         5d:ee:be:a8:42:11:4a:08:32:3e:2b:56:81:cc:99:1e:56:b5:
         55:91:f6:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGSBA9wkaqCxeomViD4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDBlZWQyOGYyZDk5NGViMmI4MzFjYjhlZmM2NDcwMzA2
ZDc0NjEwHhcNMjUwNDEzMTQwMTE5WhcNMjUwNDE0MTQwMTE5WjAzMTEwLwYDVQQD
EygyMThlNzg5MGVmMTc5MjhkNGUyNjEyMGUyMjIwYzBjMDFmZDc5OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lL42b35ezrNy4I1OSjdONxMYWO4
NhYSUmKGSyEXKzrzNyz56Ihaz99ONT8kysqapRQK4b887uECAEvHV+6ppoEVzZhG
dsu0ZuaL1sgdDrtnGMilZobSwx6V4XAhPljaRPg3CqKmSwCUFsMUwhXQfpFYti/q
8/jP1qjolJ3aZBTrkw+zsyTQ+3dZne4bDAXCRZUjL1EOnRqoZ8GJbVuT7q/mwGX4
YjKNi9AVqh99v4B8LJPM6eSWB6NvgVX5nZLmf9r7hEncebIhi1tipu/s6IbUQqUI
fqyINgnlglMztvqWccpXABZm1QfrIjOiNmau6/himqCkMRxv3WginPrCMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGOeJDvF5KNTiYSDiIgwMAf15knMB8GA1UdIwQY
MBaAFOdA7tKPLZlOsrgxy478ZHAwbXRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMt
MDk1OTVlOWNkNmMyLzEvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMtMDk1OTVlOWNkNmMy
LzEvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpl2/cLX
wj047bjyz+m6cKrxMFK7ibghss+3glgvM06R62AkZe7QFI44C+t7Yj3jrxiR48/l
h3uB/NI0ZOgCJN6aN1Z71ewKhUHWUKBy959b7uyZe0ekmdSn/P+yR57969zgxz5x
4VFit2tKG3OO5M6V9gsZ8nVv0dyTioll0MIOqc6TFdWnKX0fP7wY5y6h2DRAB1Ja
fyo/BdzmSe2jx/WUNf93rL7L25IAN8to4PwLRYJ6aGTrIxWdGaw5HsqcwtaIw294
yawxhWdPM9KVHBRbdyiVVdlJewOwos4hOEPqeGtkckXZCq3RXe6+qEIRSggyPitW
gcyZHla1VZH2DA==
-----END CERTIFICATE-----