Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
File:                     RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json)
Hash identifier:          63ltPHu9A1+b+n8nVcHQm0HfRtL8fI73EI/Qup+eYRw=
Subject key identifier:   AE:79:5E:0B:79:65:7C:52:0A:6F:C6:42:9B:A8:F9:23:B9:46:72:1B
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       01962E2ABDD43154BE08835687FFD9ED631D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
Manifest number:          04F5
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=)
                          2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=)
                          3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=)
                          4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: HnSjZ+6YDuK2PKsBeMm9e6IYOVaNAHyh8MEGPex+i38=)
                          5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=)
                          6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=)
                          7: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=)
                          8: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=)
                          9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=)
                          10: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bd:d4:31:54:be:08:83:56:87:ff:d9:ed:63:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=ae795e0b79657c520a6fc6429ba8f923b946721b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:be:6e:33:81:bf:a2:61:05:0f:26:4c:8e:
                    a1:06:88:0b:ab:8e:dd:05:3d:6c:3c:00:a5:c8:d7:
                    ea:20:1c:f4:b9:91:84:45:05:a0:d0:74:06:b0:63:
                    54:76:cb:44:b7:76:ef:cf:7d:57:67:37:23:b8:1b:
                    95:9b:eb:84:db:56:f9:53:19:b3:e7:f0:b1:0c:0a:
                    7c:09:77:bb:da:c9:c6:ec:c2:ea:23:ec:4a:b3:4a:
                    5e:3d:d7:51:52:65:49:41:6b:fa:9d:f4:32:bf:15:
                    14:45:7c:f2:a2:37:f4:38:f4:c8:3f:44:63:58:79:
                    38:66:a8:62:2d:32:6c:ff:42:0e:03:7a:9b:34:98:
                    3a:71:0b:52:c6:be:13:7d:d4:27:81:6e:f6:4a:63:
                    20:2f:ff:01:06:df:55:60:4d:a1:f6:e6:59:de:2b:
                    d0:81:b4:18:e0:c3:82:5d:08:a6:de:b1:1d:c2:fd:
                    a9:15:bc:2e:15:c7:3b:01:4c:da:89:b8:85:a3:52:
                    7a:1c:48:3a:0c:27:fa:0e:c0:7e:1f:db:62:f7:2f:
                    c7:d2:ee:01:b5:48:31:b1:88:36:06:18:27:e0:f4:
                    a7:fe:03:64:61:2a:b8:55:25:2c:bd:1e:58:bf:0d:
                    57:b9:ed:fd:a7:59:79:f4:af:e9:fa:96:29:c6:f4:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:79:5E:0B:79:65:7C:52:0A:6F:C6:42:9B:A8:F9:23:B9:46:72:1B
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7c:79:72:93:53:4e:0b:bb:69:7a:87:1a:a5:de:ba:85:1c:
         75:2f:5a:02:6c:4c:1e:0f:76:dc:8a:d8:da:1c:bb:1c:6f:ca:
         5c:06:7e:b5:f4:9b:11:87:41:e2:d1:5f:5d:94:a5:99:09:b4:
         3d:3e:76:32:01:f2:ad:e2:67:09:c4:14:07:05:b9:ca:ba:99:
         e2:2e:7f:13:b0:b1:a8:d7:5d:14:2e:a3:5f:09:44:ce:59:8b:
         7d:cb:d2:71:b8:a0:1b:e3:8e:20:7d:89:44:5c:e0:97:79:cc:
         3d:a3:ac:b4:82:88:5c:7b:6b:b5:81:44:27:1a:e2:aa:de:5e:
         a3:48:f7:ea:1c:d5:d7:57:e4:b2:2d:27:7e:35:33:64:7c:4a:
         7a:a0:ba:53:8e:60:b0:f2:b6:36:a9:49:2f:bf:67:d9:34:30:
         63:d2:4d:b3:4a:eb:86:18:f1:1e:66:ed:e0:1e:d8:dd:98:8b:
         cd:e5:5a:44:9b:cd:fb:5a:e4:5e:d8:92:ac:7d:fa:c0:73:cb:
         7d:1f:ff:bf:c3:e2:18:ae:e3:b0:94:0a:03:6e:1f:4e:d9:80:
         9d:a1:40:99:7b:67:ca:a2:1d:19:16:d5:2a:47:2a:89:9d:b1:
         80:53:f2:a3:57:76:4c:e1:97:a7:ba:f4:3f:7f:8f:7f:e8:47:
         5c:af:92:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKr3UMVS+CINWh//Z7WMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjUwNDEzMDgwMTE0WhcNMjUwNDE0MDgwMTE0WjAzMTEwLwYDVQQD
EyhhZTc5NWUwYjc5NjU3YzUyMGE2ZmM2NDI5YmE4ZjkyM2I5NDY3MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mu+bjOBv6JhBQ8mTI6hBogLq47d
BT1sPAClyNfqIBz0uZGERQWg0HQGsGNUdstEt3bvz31XZzcjuBuVm+uE21b5Uxmz
5/CxDAp8CXe72snG7MLqI+xKs0pePddRUmVJQWv6nfQyvxUURXzyojf0OPTIP0Rj
WHk4ZqhiLTJs/0IOA3qbNJg6cQtSxr4TfdQngW72SmMgL/8BBt9VYE2h9uZZ3ivQ
gbQY4MOCXQim3rEdwv2pFbwuFcc7AUzaibiFo1J6HEg6DCf6DsB+H9ti9y/H0u4B
tUgxsYg2Bhgn4PSn/gNkYSq4VSUsvR5Yvw1Xue39p1l59K/p+pYpxvTCkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK55Xgt5ZXxSCm/GQpuo+SO5RnIbMB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnx5cpNT
Tgu7aXqHGqXeuoUcdS9aAmxMHg923IrY2hy7HG/KXAZ+tfSbEYdB4tFfXZSlmQm0
PT52MgHyreJnCcQUBwW5yrqZ4i5/E7CxqNddFC6jXwlEzlmLfcvScbigG+OOIH2J
RFzgl3nMPaOstIKIXHtrtYFEJxriqt5eo0j36hzV11fksi0nfjUzZHxKeqC6U45g
sPK2NqlJL79n2TQwY9JNs0rrhhjxHmbt4B7Y3ZiLzeVaRJvN+1rkXtiSrH36wHPL
fR//v8PiGK7jsJQKA24fTtmAnaFAmXtnyqIdGRbVKkcqiZ2xgFPyo1d2TOGXp7r0
P3+Pf+hHXK+SHw==
-----END CERTIFICATE-----