Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File:                     aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier:          DbpFvQFzhqnSTNZZSSrIhVKYNVc1VBeEhiqBfdsyzeI=
Subject key identifier:   8E:56:CC:13:19:ED:9A:8C:74:D6:84:42:C6:EC:BE:C6:23:65:61:78
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer:       /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial:       01962E2AC5C517BE19BA95C818EA95695237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number:          143D
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 5gxDURtK1rmOAdh1eWuh-NkY76k.roa (hash: QaQOgPlbLBzFETMJyWwYJQCd8vML1MyClKfr5uYQDoc=)
                          2: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: j5kQfjqDQ5f9InvvrILWEFOSv0kv9o3DYwn07Pfhuak=)
                          3: svZ0I0CIbPuXgkYBH_VdeOt4OII.roa (hash: qDnNSem+sBmAuaKOVojckKZEahJzHvEbGjkFY5x9Sqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:c5:17:be:19:ba:95:c8:18:ea:95:69:52:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=8e56cc1319ed9a8c74d68442c6ecbec623656178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:5b:2e:c7:15:a9:1f:81:53:8e:8c:f2:35:
                    83:71:9f:61:16:35:6b:53:38:e2:52:d9:67:0f:93:
                    f6:98:ea:5a:3b:86:b7:7b:47:4e:ec:b3:2f:07:a4:
                    d5:30:9d:8e:eb:3c:50:6a:02:d0:44:c6:5c:9b:d9:
                    4a:10:01:c6:8e:1b:58:d0:e2:49:3b:ca:da:da:b3:
                    23:fe:a3:f3:1f:97:09:a4:a5:a0:8b:86:bd:d8:b1:
                    4f:1a:f2:8e:11:92:d8:aa:0c:99:54:f6:f0:af:2c:
                    df:f8:1d:6f:68:36:b4:ef:61:91:91:eb:ce:ff:76:
                    b6:17:05:67:80:f0:c1:68:ad:23:80:fa:27:bf:f4:
                    da:37:23:57:ea:0d:bd:95:00:ba:65:5f:fb:ee:7a:
                    80:b2:e6:f0:f5:10:cf:d0:ee:dd:02:b9:94:ff:35:
                    f2:15:64:2d:18:97:cb:03:5f:ce:51:3d:83:a9:41:
                    88:43:6b:68:98:c2:d4:e2:12:17:28:56:f2:61:a2:
                    37:ba:38:2b:0b:cf:fe:58:57:de:f0:c8:68:b9:38:
                    e1:1a:ab:5b:d9:8d:df:d9:6c:62:a4:bd:21:41:97:
                    ac:aa:73:ce:95:5c:af:03:d3:c0:37:23:3a:ee:1d:
                    24:c7:04:5b:1d:d8:66:99:a0:b8:cf:d6:42:91:aa:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:CC:13:19:ED:9A:8C:74:D6:84:42:C6:EC:BE:C6:23:65:61:78
            X509v3 Authority Key Identifier:
                keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ad:c9:3d:99:3d:dd:c7:25:8a:11:67:87:87:b8:db:38:61:
         5a:b8:f0:5d:32:b7:4b:cb:43:61:b7:aa:3a:37:71:59:aa:c5:
         a1:ba:31:8a:9d:b3:7a:51:d2:d7:c4:c3:3a:15:a5:dd:20:98:
         d9:2b:5c:5a:c0:aa:f2:bd:2f:55:30:28:73:93:45:08:e5:a5:
         b2:a7:8e:6e:5a:e4:0b:ac:77:aa:4c:7b:73:fd:ac:0c:30:04:
         71:28:e6:f4:ab:31:e3:7f:8b:bf:cb:de:3c:7b:01:aa:4d:94:
         1e:eb:08:7a:c2:ba:29:49:98:fe:49:f0:85:cc:73:38:ab:f1:
         86:94:03:10:4d:46:87:6c:42:f4:45:bd:d7:03:55:b4:6d:f9:
         49:69:63:b9:1f:33:66:19:66:2d:4e:b4:5f:86:26:ac:5d:5d:
         39:8a:2d:8f:fe:8c:3d:6b:14:01:3e:30:9a:b9:52:96:fc:44:
         28:b0:4f:d5:05:33:23:cb:22:46:6f:80:9a:ee:85:f5:fd:cf:
         75:e9:54:5c:e0:75:29:ad:0f:ed:c5:be:2d:e7:08:b6:41:c0:
         a4:d3:16:ba:c1:5a:da:17:84:5c:73:6f:4e:bd:af:56:b9:e1:
         e9:c7:d4:22:28:75:9c:91:b1:7a:35:50:f2:54:4e:55:ff:f0:
         fc:4e:22:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsXFF74ZupXIGOqVaVI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzVmMDliM2E5MDM5NTBmM2ZjZDFiMjU1MDg2ZWRlNDg3
NmViMTEwHhcNMjUwNDEzMDgwMTE3WhcNMjUwNDE0MDgwMTE3WjAzMTEwLwYDVQQD
Eyg4ZTU2Y2MxMzE5ZWQ5YThjNzRkNjg0NDJjNmVjYmVjNjIzNjU2MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhdbLscVqR+BU46M8jWDcZ9hFjVr
UzjiUtlnD5P2mOpaO4a3e0dO7LMvB6TVMJ2O6zxQagLQRMZcm9lKEAHGjhtY0OJJ
O8ra2rMj/qPzH5cJpKWgi4a92LFPGvKOEZLYqgyZVPbwryzf+B1vaDa072GRkevO
/3a2FwVngPDBaK0jgPonv/TaNyNX6g29lQC6ZV/77nqAsubw9RDP0O7dArmU/zXy
FWQtGJfLA1/OUT2DqUGIQ2tomMLU4hIXKFbyYaI3ujgrC8/+WFfe8MhouTjhGqtb
2Y3f2WxipL0hQZesqnPOlVyvA9PANyM67h0kxwRbHdhmmaC4z9ZCkaqwkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5WzBMZ7ZqMdNaEQsbsvsYjZWF4MB8GA1UdIwQY
MBaAFGjF8Js6kDlQ8/zRslUIbt5IdusRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgt
OTQ4MDI2MzZiYWQ5LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgtOTQ4MDI2MzZiYWQ5
LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJK3JPZk9
3cclihFnh4e42zhhWrjwXTK3S8tDYbeqOjdxWarFoboxip2zelHS18TDOhWl3SCY
2StcWsCq8r0vVTAoc5NFCOWlsqeOblrkC6x3qkx7c/2sDDAEcSjm9Ksx43+Lv8ve
PHsBqk2UHusIesK6KUmY/knwhcxzOKvxhpQDEE1Gh2xC9EW91wNVtG35SWljuR8z
ZhlmLU60X4YmrF1dOYotj/6MPWsUAT4wmrlSlvxEKLBP1QUzI8siRm+Amu6F9f3P
delUXOB1Ka0P7cW+LecItkHApNMWusFa2heEXHNvTr2vVrnh6cfUIih1nJGxejVQ
8lROVf/w/E4iCw==
-----END CERTIFICATE-----