Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File:                     87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier:          kTQPydsyHKKpya8CBF785fDkXMKa3TOR6d2OIrWPaUY=
Subject key identifier:   61:FC:DE:22:7B:2F:A6:A9:CA:BB:48:52:80:75:C2:D8:90:15:C3:FE
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer:       /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial:       01962F06C5D39DBEACE9D825A0AEE8BB6E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
                          2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
                          3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: VjDLKdF3dSx2kM/HyZKWYbHZUEd8jNe9IoqFSYYA00c=)
                          4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
                          5: KsYncnghaxDA5x4UiPyWsOmG9RM.roa (hash: UI503uf1Ey46JuitcxCO88jhsuoBiLbllr+HxyvpTkA=)
                          6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
                          7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
                          8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
                          9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:d3:9d:be:ac:e9:d8:25:a0:ae:e8:bb:6e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=61fcde227b2fa6a9cabb48528075c2d89015c3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:0b:07:2c:31:fe:52:40:3e:47:c9:55:63:
                    be:03:44:d9:b9:ef:2f:38:cb:fe:b7:37:73:65:d5:
                    ac:0d:e1:a8:10:58:f4:de:55:6a:79:c0:77:da:3c:
                    48:6a:67:ee:c1:ba:48:27:e7:11:51:ee:15:6f:0e:
                    79:55:65:4e:73:3e:12:72:c6:96:26:78:bb:46:94:
                    f3:f5:c1:d0:71:22:31:49:f0:19:b0:c3:8b:3b:af:
                    4c:f7:96:11:0e:64:a5:08:74:9f:0a:7a:00:9e:bb:
                    45:fb:a4:0c:b1:f3:f7:12:e7:95:81:f3:c0:ae:aa:
                    73:87:78:b4:15:1b:65:d6:0f:ab:e3:1c:50:87:93:
                    05:9c:8c:5e:4a:a3:0b:ed:14:27:53:d3:16:cb:e8:
                    a9:45:f0:d1:95:05:0b:93:95:34:3f:d1:9c:ad:95:
                    8e:db:e5:a4:3b:09:52:84:01:51:0d:e1:7f:9b:5b:
                    47:99:d2:97:bb:1d:1e:e0:6b:b4:b5:ec:e0:c9:03:
                    77:d9:45:8f:dc:34:27:5b:e8:bc:13:0e:51:47:dd:
                    1b:39:54:96:01:50:db:d8:d8:5c:1b:75:85:7c:d6:
                    4c:ee:cf:c4:32:09:e1:0e:02:2b:97:99:20:6a:d7:
                    dd:12:8b:e0:cd:18:ee:e9:bd:54:c0:5b:eb:d1:29:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FC:DE:22:7B:2F:A6:A9:CA:BB:48:52:80:75:C2:D8:90:15:C3:FE
            X509v3 Authority Key Identifier:
                keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:63:81:63:32:1a:9f:ae:25:11:48:3f:77:6a:db:ef:08:
         7c:57:3c:8c:75:2a:8b:16:c0:a0:92:42:57:80:dc:bf:7f:a6:
         db:19:5e:b2:64:8d:b2:74:5d:ad:32:f8:72:a4:33:d8:aa:33:
         e1:69:4d:a9:5b:7a:e7:fd:ae:11:45:cf:35:2a:ce:38:46:6e:
         b9:dd:78:05:81:91:79:a4:fc:d4:6d:77:2d:43:b4:43:ff:14:
         48:4d:95:31:17:92:ca:3e:f3:f0:bd:a6:8e:f9:33:39:f3:ca:
         47:81:93:d6:e7:f0:3f:3a:35:04:cb:a8:6a:01:11:7c:6d:f3:
         3d:e7:9a:e1:84:c2:4a:9d:2a:6a:af:e8:87:0f:46:69:43:0f:
         ff:8f:c2:2b:04:f0:3f:41:1c:bf:2c:54:6f:61:dd:cb:3f:c1:
         2d:ea:41:42:b5:be:bf:f9:cb:c4:dd:de:f1:64:ae:c5:fc:ca:
         a2:9b:02:e5:da:3b:6f:75:79:ee:f2:75:17:f4:e2:6e:76:34:
         82:fb:27:b7:fd:30:c1:ff:ea:6c:2a:6d:a9:96:56:ec:b8:04:
         83:75:92:b3:38:8d:9e:ef:8c:a9:28:01:03:4d:b7:c0:08:81:
         f6:76:b2:8c:48:44:73:65:20:95:3d:8f:92:31:43:ef:b1:ec:
         10:f5:6c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsXTnb6s6dgloK7ou24YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz
YjJjYTIwHhcNMjUwNDEzMTIwMTM1WhcNMjUwNDE0MTIwMTM1WjAzMTEwLwYDVQQD
Eyg2MWZjZGUyMjdiMmZhNmE5Y2FiYjQ4NTI4MDc1YzJkODkwMTVjM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykcLBywx/lJAPkfJVWO+A0TZue8v
OMv+tzdzZdWsDeGoEFj03lVqecB32jxIamfuwbpIJ+cRUe4Vbw55VWVOcz4ScsaW
Jni7RpTz9cHQcSIxSfAZsMOLO69M95YRDmSlCHSfCnoAnrtF+6QMsfP3EueVgfPA
rqpzh3i0FRtl1g+r4xxQh5MFnIxeSqML7RQnU9MWy+ipRfDRlQULk5U0P9GcrZWO
2+WkOwlShAFRDeF/m1tHmdKXux0e4Gu0tezgyQN32UWP3DQnW+i8Ew5RR90bOVSW
AVDb2NhcG3WFfNZM7s/EMgnhDgIrl5kgatfdEovgzRju6b1UwFvr0SkqQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH83iJ7L6apyrtIUoB1wtiQFcP+MB8GA1UdIwQY
MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct
NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1
LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjJjgWMy
Gp+uJRFIP3dq2+8IfFc8jHUqixbAoJJCV4Dcv3+m2xlesmSNsnRdrTL4cqQz2Koz
4WlNqVt65/2uEUXPNSrOOEZuud14BYGReaT81G13LUO0Q/8USE2VMReSyj7z8L2m
jvkzOfPKR4GT1ufwPzo1BMuoagERfG3zPeea4YTCSp0qaq/ohw9GaUMP/4/CKwTw
P0EcvyxUb2Hdyz/BLepBQrW+v/nLxN3e8WSuxfzKopsC5do7b3V57vJ1F/TibnY0
gvsnt/0wwf/qbCptqZZW7LgEg3WSsziNnu+MqSgBA023wAiB9nayjEhEc2UglT2P
kjFD77HsEPVsLQ==
-----END CERTIFICATE-----