Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File:                     eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier:          NlnVBRYobtLDD0VYVrwigrwVKAeEvqY8DF87lb6AAII=
Subject key identifier:   BD:CC:C7:CF:28:B4:E8:77:8D:43:ED:A5:54:B2:CB:AE:2A:DC:4E:2C
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer:       /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial:       01962E99156AF14CC0A7F7EF612ACE207828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
                          2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: 3YMdOd7egITCswpklrawZaD39EKEQtXgcAe78kGweF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:15:6a:f1:4c:c0:a7:f7:ef:61:2a:ce:20:78:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=bdccc7cf28b4e8778d43eda554b2cbae2adc4e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:03:15:3f:b4:6b:db:c9:5e:ea:69:a6:71:
                    a9:9d:01:2b:b2:06:fc:d6:f5:69:bd:80:00:5e:15:
                    9d:be:b6:8a:97:e9:09:4f:ae:6a:1e:d3:e0:64:d9:
                    38:0d:c9:ee:f6:78:a0:d6:51:b2:e3:12:7e:56:63:
                    e0:a2:61:3c:cc:c1:d9:d4:cf:ca:b4:fb:29:f5:5a:
                    60:95:ff:7a:c0:5a:cb:cd:0f:a6:d7:72:5f:52:84:
                    4f:0e:18:7a:3f:56:b1:66:3b:86:5f:e9:a4:c9:23:
                    81:32:97:92:09:b8:ba:0a:bd:b9:6c:16:51:05:66:
                    93:d6:62:d6:5f:26:27:69:95:83:ea:1a:f4:e5:b0:
                    cf:6f:97:32:a3:ba:9a:d9:9f:50:43:31:6b:fd:df:
                    34:a9:d4:75:ea:45:44:5b:e4:24:76:30:37:4c:d7:
                    30:9d:74:ed:a3:d0:8a:bd:0f:aa:cb:95:97:a3:d1:
                    4c:a4:ba:fd:61:2f:e4:95:c2:46:56:54:e4:22:34:
                    13:6c:84:e4:19:ec:b0:49:36:bd:21:fe:d9:57:fe:
                    d5:9e:17:8c:81:cb:e9:1b:52:c7:27:fa:7c:b4:2a:
                    47:be:e3:b6:53:ad:15:6b:09:dc:d4:a0:8b:f6:d7:
                    2c:f4:f0:9e:8c:66:7e:a0:76:d3:84:02:39:0a:7f:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CC:C7:CF:28:B4:E8:77:8D:43:ED:A5:54:B2:CB:AE:2A:DC:4E:2C
            X509v3 Authority Key Identifier:
                keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:64:88:d9:08:dd:43:4e:0f:e1:84:47:6f:bd:4a:16:b8:
         36:e0:0c:01:b4:2d:4a:33:6c:b9:fc:55:89:f7:55:42:10:b7:
         a2:1e:a4:2b:46:b0:1a:f1:86:5c:b9:9e:3e:16:61:97:17:f3:
         df:86:b5:8b:86:e8:cd:aa:f8:58:d7:75:b2:6f:80:b8:2a:89:
         c5:d2:45:dc:86:6c:54:17:4d:3e:0b:f9:19:56:62:fc:c0:5a:
         bd:e9:07:20:16:4e:ee:de:64:1f:50:55:e5:c6:81:1f:8a:07:
         86:dd:5c:ab:62:49:6d:32:8e:ab:fb:52:76:b4:bd:45:30:7d:
         8a:46:f2:34:aa:5a:b5:2e:69:8f:0e:20:dc:15:e8:90:c9:a7:
         23:64:33:d8:1c:b2:a2:09:54:3b:03:49:09:a9:68:43:42:75:
         fd:c7:54:71:08:c1:ed:55:f6:19:5a:ad:85:a4:17:06:19:22:
         56:bf:db:66:3e:22:fc:89:fc:f1:51:b8:59:d7:e8:8a:73:4e:
         01:55:58:0d:01:a5:56:7b:6f:c9:52:3e:f2:fd:9b:cd:fb:d3:
         c2:74:d5:57:54:da:e1:28:3f:a4:c3:9f:bc:0b:05:9b:d2:98:
         a0:a2:e4:0e:1c:92:4a:5f:1b:bb:60:c8:2d:4b:e4:13:3f:78:
         e9:50:a8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRVq8UzAp/fvYSrOIHgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl
MmE5MWYwHhcNMjUwNDEzMTAwMTQ2WhcNMjUwNDE0MTAwMTQ2WjAzMTEwLwYDVQQD
EyhiZGNjYzdjZjI4YjRlODc3OGQ0M2VkYTU1NGIyY2JhZTJhZGM0ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmgDFT+0a9vJXupppnGpnQErsgb8
1vVpvYAAXhWdvraKl+kJT65qHtPgZNk4Dcnu9nig1lGy4xJ+VmPgomE8zMHZ1M/K
tPsp9Vpglf96wFrLzQ+m13JfUoRPDhh6P1axZjuGX+mkySOBMpeSCbi6Cr25bBZR
BWaT1mLWXyYnaZWD6hr05bDPb5cyo7qa2Z9QQzFr/d80qdR16kVEW+QkdjA3TNcw
nXTto9CKvQ+qy5WXo9FMpLr9YS/klcJGVlTkIjQTbITkGeywSTa9If7ZV/7VnheM
gcvpG1LHJ/p8tCpHvuO2U60Vawnc1KCL9tcs9PCejGZ+oHbThAI5Cn848QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3Mx88otOh3jUPtpVSyy64q3E4sMB8GA1UdIwQY
MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt
NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm
LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdFkiNkI
3UNOD+GER2+9Sha4NuAMAbQtSjNsufxVifdVQhC3oh6kK0awGvGGXLmePhZhlxfz
34a1i4bozar4WNd1sm+AuCqJxdJF3IZsVBdNPgv5GVZi/MBavekHIBZO7t5kH1BV
5caBH4oHht1cq2JJbTKOq/tSdrS9RTB9ikbyNKpatS5pjw4g3BXokMmnI2Qz2Byy
oglUOwNJCaloQ0J1/cdUcQjB7VX2GVqthaQXBhkiVr/bZj4i/In88VG4WdfoinNO
AVVYDQGlVntvyVI+8v2bzfvTwnTVV1Ta4Sg/pMOfvAsFm9KYoKLkDhySSl8bu2DI
LUvkEz946VCoUw==
-----END CERTIFICATE-----