Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File:                     kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier:          6XXSevOFRwGKntA0Po/2ny/VdTFpbS6qKOuPjpWv6/w=
Subject key identifier:   E5:31:20:53:0C:68:65:C6:59:37:42:93:9F:45:21:E1:98:B9:17:BE
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer:       /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial:       01962ECFCE55C5C0394557E154361711F410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
                          2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
                          3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
                          4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: gv3fNb9hBSNuZII3p2cG1s1+R3TAg0u6kruKMO6e9Co=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ce:55:c5:c0:39:45:57:e1:54:36:17:11:f4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=e53120530c6865c6593742939f4521e198b917be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:dc:55:c0:9b:49:a6:36:97:d9:96:85:23:
                    7e:36:b4:9f:b4:bd:da:a5:f1:ad:93:dd:dc:9e:46:
                    80:0c:3d:cf:3d:83:19:2e:cd:d4:6a:32:b0:29:9b:
                    6a:40:1e:50:8f:c6:8a:93:55:40:bc:91:5b:86:ec:
                    20:a4:cc:6f:72:b8:6b:78:6b:ff:b1:20:49:eb:a6:
                    91:02:fd:16:4c:6a:81:d1:3f:b1:b9:16:95:3d:b1:
                    5d:a2:87:1a:c5:fe:82:4a:0f:03:47:5e:fb:87:c8:
                    9b:27:42:ad:11:06:8a:9e:50:e4:8f:64:ce:45:95:
                    d7:01:84:48:fa:e4:5a:0a:6d:1f:46:5a:82:97:58:
                    2e:21:3d:5f:91:cd:71:10:8d:0e:5f:44:6d:60:90:
                    ef:8c:b4:a1:45:22:68:3a:e6:21:8d:16:33:0c:b9:
                    1c:61:ce:9b:90:ad:6a:d1:a1:10:81:14:1a:15:c3:
                    8e:e8:ed:6b:2f:92:54:e2:d4:63:c5:4e:c0:68:19:
                    ee:2d:82:f9:b5:93:b1:86:83:a5:64:44:46:17:05:
                    80:b3:0a:fa:95:dc:5e:66:37:61:2f:e5:a6:39:5d:
                    77:1f:ba:62:60:3f:ed:d2:19:a8:c8:7b:53:bf:8c:
                    ac:2d:5b:af:1c:c0:43:2a:e6:f1:af:8f:cd:1d:d9:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:31:20:53:0C:68:65:C6:59:37:42:93:9F:45:21:E1:98:B9:17:BE
            X509v3 Authority Key Identifier:
                keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5b:42:9c:2d:03:73:22:46:bf:2e:5b:4b:89:5d:67:20:98:
         d3:d2:3b:bb:14:9b:a8:d2:ba:91:46:51:ba:66:23:70:23:82:
         7c:88:43:b5:51:13:ce:35:4c:d4:1e:e1:27:68:34:a7:a4:2a:
         03:24:98:5d:6c:17:3d:5c:63:9e:82:f4:85:70:24:63:88:32:
         38:4f:7c:31:40:da:4a:f6:0c:4f:55:98:6e:35:9d:6c:b9:30:
         0f:d9:77:cd:2e:19:6c:70:3f:46:eb:88:ca:ac:36:74:19:91:
         e3:65:07:8d:7f:bc:ed:56:49:8e:a6:6a:4c:cb:73:9c:72:dd:
         ec:8f:66:08:53:e2:e1:dd:cb:82:80:14:03:99:be:75:e1:73:
         0a:35:cc:ff:7e:04:93:7b:13:99:55:b6:6a:cc:35:c6:15:86:
         ce:14:d0:14:e0:8e:f4:62:a6:ec:9c:c9:c1:16:f9:a1:6c:42:
         2a:f5:17:13:ec:07:5d:80:e9:5a:50:90:85:d1:26:2f:73:5f:
         af:66:3f:f5:40:94:21:63:b0:6d:f3:6a:ba:49:b2:a6:77:53:
         69:7d:c7:10:ad:18:90:04:8b:d4:fb:ef:5c:00:4e:c4:43:d6:
         67:0d:95:bc:b9:ff:d8:35:8a:0c:a9:28:23:33:6b:15:e9:f1:
         1e:97:cc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz85VxcA5RVfhVDYXEfQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjUwNDEzMTEwMTMyWhcNMjUwNDE0MTEwMTMyWjAzMTEwLwYDVQQD
EyhlNTMxMjA1MzBjNjg2NWM2NTkzNzQyOTM5ZjQ1MjFlMTk4YjkxN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUPcVcCbSaY2l9mWhSN+NrSftL3a
pfGtk93cnkaADD3PPYMZLs3UajKwKZtqQB5Qj8aKk1VAvJFbhuwgpMxvcrhreGv/
sSBJ66aRAv0WTGqB0T+xuRaVPbFdoocaxf6CSg8DR177h8ibJ0KtEQaKnlDkj2TO
RZXXAYRI+uRaCm0fRlqCl1guIT1fkc1xEI0OX0RtYJDvjLShRSJoOuYhjRYzDLkc
Yc6bkK1q0aEQgRQaFcOO6O1rL5JU4tRjxU7AaBnuLYL5tZOxhoOlZERGFwWAswr6
ldxeZjdhL+WmOV13H7piYD/t0hmoyHtTv4ysLVuvHMBDKubxr4/NHdnF3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUxIFMMaGXGWTdCk59FIeGYuRe+MB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1tCnC0D
cyJGvy5bS4ldZyCY09I7uxSbqNK6kUZRumYjcCOCfIhDtVETzjVM1B7hJ2g0p6Qq
AySYXWwXPVxjnoL0hXAkY4gyOE98MUDaSvYMT1WYbjWdbLkwD9l3zS4ZbHA/RuuI
yqw2dBmR42UHjX+87VZJjqZqTMtznHLd7I9mCFPi4d3LgoAUA5m+deFzCjXM/34E
k3sTmVW2asw1xhWGzhTQFOCO9GKm7JzJwRb5oWxCKvUXE+wHXYDpWlCQhdEmL3Nf
r2Y/9UCUIWOwbfNqukmypndTaX3HEK0YkASL1PvvXABOxEPWZw2VvLn/2DWKDKko
IzNrFenxHpfMkg==
-----END CERTIFICATE-----