Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File:                     5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier:          aXFPbEvy5VPCSzNNkDijrwQyYV8NjxTLXfo1X5Tc+AY=
Subject key identifier:   84:7F:CA:D0:B4:45:1D:AD:6A:DF:C3:94:CC:8F:02:D9:FC:B5:01:B4
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer:       /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial:       01962E987C2B01C6D0E6338E094084477B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: vWHdJSaKDQxzN0PVtclrdsGAZ7yzLliImQe1LiC9bXo=)
                          2: DwTC30oaWKwssRCXrBoUlk9Q5bw.roa (hash: ijzA7vHvds3BxvrPMvxvhrjeIw/3n+d/qJzXMvHrD7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7c:2b:01:c6:d0:e6:33:8e:09:40:84:47:7b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=847fcad0b4451dad6adfc394cc8f02d9fcb501b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:8b:b7:fe:12:5e:e3:1c:55:57:c0:a8:4b:
                    c6:d0:f0:3b:6b:5e:c9:75:dd:e6:df:66:03:7d:db:
                    c0:0b:cf:8b:2e:b5:91:3a:d6:fa:f2:37:fc:76:b6:
                    d4:2a:ba:8b:0f:65:17:34:2a:3e:0f:3e:d1:08:4a:
                    4f:0c:2b:fb:2d:f1:93:f0:63:49:14:ab:ea:71:c1:
                    8a:35:4e:ca:b1:2d:90:9c:38:23:f9:37:d5:a8:f0:
                    ff:94:44:79:ac:1c:f5:7a:6b:e5:c7:94:d0:5d:6d:
                    f4:e5:56:4c:d1:1b:92:b6:24:68:95:e3:2c:84:25:
                    9b:b2:9f:ec:09:b4:98:b6:bd:d5:13:e9:71:f0:fb:
                    14:c6:dd:1d:f8:e9:ec:0e:cc:0c:2e:27:86:ec:dc:
                    00:a3:8a:48:e3:41:0a:93:04:bd:de:03:7e:ba:97:
                    0f:ac:9a:e4:7d:a7:8a:1f:91:f0:89:9e:9e:34:84:
                    fa:74:41:cd:bc:ea:85:e3:4e:28:f4:d6:cf:3f:ee:
                    85:8e:e3:46:36:5a:d4:6f:4d:5f:8a:90:4f:0c:ff:
                    cc:13:07:b1:60:66:aa:42:ed:87:9a:bf:59:12:6f:
                    b4:aa:a3:d1:28:c1:b2:0f:72:64:c4:67:64:c8:12:
                    82:35:ae:44:d6:7f:60:8f:65:d4:64:ce:cb:1f:fd:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7F:CA:D0:B4:45:1D:AD:6A:DF:C3:94:CC:8F:02:D9:FC:B5:01:B4
            X509v3 Authority Key Identifier:
                keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:92:eb:c3:ab:38:4c:69:e0:95:91:28:24:37:d4:92:de:df:
         5e:71:a5:3b:07:58:bd:ee:a0:2c:b7:8f:de:e0:7a:56:d9:b8:
         0d:96:35:52:e8:74:2d:75:4f:a3:6a:7c:c3:b8:eb:e8:b9:e8:
         68:5e:1e:35:42:66:ba:c3:00:13:6d:e1:f8:ae:33:42:3f:90:
         b7:ca:84:c6:3f:f8:0d:4b:df:cc:1e:30:27:e8:14:55:8c:b9:
         40:ba:28:a5:05:2c:0d:26:e1:a9:d6:21:d9:b2:95:b2:12:0c:
         f4:c4:aa:0d:62:91:06:5c:de:8f:c5:21:44:42:a4:d5:55:a6:
         5b:11:64:df:2c:42:8d:5a:30:83:16:92:54:e4:94:01:7e:cb:
         63:67:ce:85:0e:c2:df:bd:98:60:bb:e0:5a:ff:16:9c:04:ac:
         47:c8:f9:d7:02:ac:92:43:13:f0:51:15:1e:96:e5:a0:cb:88:
         5d:88:60:ac:65:7d:75:e1:33:3d:a1:c0:7a:70:e2:27:18:52:
         20:4e:39:17:96:59:aa:d0:0a:90:ac:5c:5e:13:5a:aa:f5:92:
         1d:ef:11:a8:ee:c2:80:4f:f7:53:92:a8:3a:92:a1:f9:a7:c8:
         c3:9b:50:0d:0f:15:ae:25:77:e0:10:38:a5:95:33:66:58:74:
         23:10:fd:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHwrAcbQ5jOOCUCER3tdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjJhODY2MjAyZjRiOGNiYzMzMzgyZDZlODJkODFkODk2
NGM4MGUwHhcNMjUwNDEzMTAwMTA3WhcNMjUwNDE0MTAwMTA3WjAzMTEwLwYDVQQD
Eyg4NDdmY2FkMGI0NDUxZGFkNmFkZmMzOTRjYzhmMDJkOWZjYjUwMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9eLt/4SXuMcVVfAqEvG0PA7a17J
dd3m32YDfdvAC8+LLrWROtb68jf8drbUKrqLD2UXNCo+Dz7RCEpPDCv7LfGT8GNJ
FKvqccGKNU7KsS2QnDgj+TfVqPD/lER5rBz1emvlx5TQXW305VZM0RuStiRoleMs
hCWbsp/sCbSYtr3VE+lx8PsUxt0d+OnsDswMLieG7NwAo4pI40EKkwS93gN+upcP
rJrkfaeKH5HwiZ6eNIT6dEHNvOqF404o9NbPP+6FjuNGNlrUb01fipBPDP/MEwex
YGaqQu2Hmr9ZEm+0qqPRKMGyD3JkxGdkyBKCNa5E1n9gj2XUZM7LH/0B/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR/ytC0RR2tat/DlMyPAtn8tQG0MB8GA1UdIwQY
MBaAFOTyqGYgL0uMvDM4LW6C2B2JZMgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBLb1ppQXZTNHk4TXpndGJvTFlIWWxreUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NzkxYTEtZTY3OS00NjYzLWEyZGEt
MWE1MTNkZjA2OWZjLzEvNVBLb1ppQXZTNHk4TXpndGJvTFlIWWxreUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NzkxYTEtZTY3OS00NjYzLWEyZGEtMWE1MTNkZjA2OWZj
LzEvNVBLb1ppQXZTNHk4TXpndGJvTFlIWWxreUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5Lrw6s4
TGnglZEoJDfUkt7fXnGlOwdYve6gLLeP3uB6Vtm4DZY1Uuh0LXVPo2p8w7jr6Lno
aF4eNUJmusMAE23h+K4zQj+Qt8qExj/4DUvfzB4wJ+gUVYy5QLoopQUsDSbhqdYh
2bKVshIM9MSqDWKRBlzej8UhREKk1VWmWxFk3yxCjVowgxaSVOSUAX7LY2fOhQ7C
372YYLvgWv8WnASsR8j51wKskkMT8FEVHpbloMuIXYhgrGV9deEzPaHAenDiJxhS
IE45F5ZZqtAKkKxcXhNaqvWSHe8RqO7CgE/3U5KoOpKh+afIw5tQDQ8VriV34BA4
pZUzZlh0IxD9VQ==
-----END CERTIFICATE-----