Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File:                     iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier:          EvTjEa+futQVLY6LPj+jog/AMA+ebqnhF5ZL5Y7+vQU=
Subject key identifier:   E7:D0:18:63:0B:A6:3E:38:57:02:1E:E4:77:A8:F8:E6:97:F4:24:7A
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer:       /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial:       01962ECF5073CEBA29F0304CED9F8ED60850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
                          2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: 0vrFEPYsd3GATJeT4Z0zSqhnfwPwcSv7qO2fk6Rp26A=)
                          3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:50:73:ce:ba:29:f0:30:4c:ed:9f:8e:d6:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=e7d018630ba63e3857021ee477a8f8e697f4247a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:b9:e2:31:0f:59:cb:f3:5c:b8:41:54:d3:
                    ec:f5:85:20:62:15:1b:02:c0:8b:63:bf:06:51:76:
                    7b:28:a1:e9:ec:12:98:2b:16:47:3c:47:97:4f:6c:
                    38:e9:4a:02:2e:d8:56:c8:d9:d4:b1:0e:55:45:38:
                    b9:29:d2:cf:e3:6b:90:16:d1:c4:9d:56:e3:f6:ba:
                    8c:c8:9b:de:be:b9:5e:a5:59:12:ec:82:33:d5:47:
                    70:be:9f:a8:1c:65:80:fe:57:69:ce:73:3e:47:65:
                    31:ce:17:74:32:fe:bc:b6:58:09:96:e6:b9:d7:86:
                    db:45:48:95:cf:d9:cd:5b:1e:0b:1d:64:21:7b:0c:
                    11:30:73:46:93:89:1d:1c:19:d7:a3:51:4c:7f:1f:
                    00:7e:b4:8c:84:f9:b4:04:34:7c:6d:6e:5b:4c:ae:
                    8b:0d:a3:89:26:d4:3a:a6:46:e6:cf:91:af:e7:d4:
                    36:ee:e6:58:f0:89:dc:1c:31:f5:d7:0c:c2:ce:0b:
                    ad:5d:8e:74:b8:45:7d:47:ab:d5:4f:8f:ff:8b:20:
                    1e:af:75:8f:a3:c5:c3:2b:90:98:01:e9:99:c0:96:
                    45:60:1e:87:87:ba:5f:d8:d7:fb:00:60:13:73:53:
                    78:55:1d:73:1e:b1:3e:03:54:51:52:1f:cd:95:04:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:18:63:0B:A6:3E:38:57:02:1E:E4:77:A8:F8:E6:97:F4:24:7A
            X509v3 Authority Key Identifier:
                keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:85:59:d4:ad:8e:43:54:8b:7a:6d:fa:80:83:84:51:e8:a0:
         e3:26:a0:77:26:f2:d7:f0:ca:8a:d2:15:77:3d:1c:02:75:72:
         9d:d6:05:66:09:0b:71:69:2b:10:b0:26:08:ae:a9:31:de:5e:
         13:97:82:d1:a6:58:aa:ff:03:3a:1d:95:77:05:b4:6f:9e:7f:
         22:a2:17:68:80:16:b3:2b:d2:41:8c:70:a2:1d:61:78:f9:d9:
         25:fe:de:1e:aa:4a:58:a9:34:07:05:81:5a:dc:f2:0b:f1:7b:
         61:20:bb:1c:9f:58:26:c2:a6:a3:75:aa:9c:73:1f:11:75:5b:
         04:91:23:4b:ef:c0:b2:e1:f6:f3:59:6e:34:1c:6c:89:aa:83:
         c5:37:05:95:37:a6:6b:a5:86:1a:08:6f:f9:d3:7b:97:9d:2f:
         10:46:ee:21:33:c3:95:07:f0:41:9f:06:85:8b:dc:a0:5a:59:
         55:f9:d1:73:2c:aa:41:01:20:e2:a3:aa:b2:de:a6:39:c2:5c:
         25:18:86:8c:8d:9f:ca:7b:ce:c7:b2:b7:8e:27:71:64:27:47:
         97:e3:ea:73:22:d8:07:5a:4e:a7:d8:ef:a7:77:78:14:ad:43:
         c9:be:38:1e:54:0a:b5:45:8a:59:eb:aa:ef:0c:66:75:5b:3a:
         99:ce:a1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1Bzzrop8DBM7Z+O1ghQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjZmNDc2ZDYwODYyNWFkMWZlMDZlNTJiOTc0YTlmNjZm
MDE0MWEwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
EyhlN2QwMTg2MzBiYTYzZTM4NTcwMjFlZTQ3N2E4ZjhlNjk3ZjQyNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBi54jEPWcvzXLhBVNPs9YUgYhUb
AsCLY78GUXZ7KKHp7BKYKxZHPEeXT2w46UoCLthWyNnUsQ5VRTi5KdLP42uQFtHE
nVbj9rqMyJvevrlepVkS7IIz1Udwvp+oHGWA/ldpznM+R2Uxzhd0Mv68tlgJlua5
14bbRUiVz9nNWx4LHWQhewwRMHNGk4kdHBnXo1FMfx8AfrSMhPm0BDR8bW5bTK6L
DaOJJtQ6pkbmz5Gv59Q27uZY8IncHDH11wzCzgutXY50uEV9R6vVT4//iyAer3WP
o8XDK5CYAemZwJZFYB6Hh7pf2Nf7AGATc1N4VR1zHrE+A1RRUh/NlQS4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfQGGMLpj44VwIe5Heo+OaX9CR6MB8GA1UdIwQY
MBaAFIom9HbWCGJa0f4G5SuXSp9m8BQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It
ZDg0NmQxMDZiNWY3LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3
LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYVZ1K2O
Q1SLem36gIOEUeig4yagdyby1/DKitIVdz0cAnVyndYFZgkLcWkrELAmCK6pMd5e
E5eC0aZYqv8DOh2VdwW0b55/IqIXaIAWsyvSQYxwoh1hePnZJf7eHqpKWKk0BwWB
WtzyC/F7YSC7HJ9YJsKmo3WqnHMfEXVbBJEjS+/AsuH281luNBxsiaqDxTcFlTem
a6WGGghv+dN7l50vEEbuITPDlQfwQZ8GhYvcoFpZVfnRcyyqQQEg4qOqst6mOcJc
JRiGjI2fynvOx7K3jidxZCdHl+PqcyLYB1pOp9jvp3d4FK1Dyb44HlQKtUWKWeuq
7wxmdVs6mc6hyw==
-----END CERTIFICATE-----