Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File:                     NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier:          tCH7/tlPehv/eCszu7465xoGs0ibwiGmyQz9D0xkcI0=
Subject key identifier:   A5:EE:4C:0F:C6:E4:71:95:D3:18:56:C2:10:04:8B:C8:83:84:51:05
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer:       /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial:       01962DF42A99AB2431B8BD04E1B4EC270554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
                          2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: Ww8CBN/7NBeKu40szrlO4HrEhNxaagz3+ch4ee8D33g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2a:99:ab:24:31:b8:bd:04:e1:b4:ec:27:05:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=a5ee4c0fc6e47195d31856c210048bc883845105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:00:32:b7:bf:b9:6f:e8:92:04:52:37:9d:
                    46:5e:5c:c6:7d:52:42:87:77:31:f6:58:71:0c:00:
                    94:67:47:fb:9f:7a:8f:f9:fa:71:2e:69:f2:a1:1e:
                    44:36:ba:e7:e0:8a:83:62:04:93:07:47:1f:60:b4:
                    4a:90:d1:48:88:04:55:8f:98:77:e5:82:46:c4:a1:
                    54:4f:9a:9f:26:43:96:b6:ba:61:9a:9f:22:6c:eb:
                    2e:3b:00:d7:27:d0:27:9a:8d:80:11:c3:54:8e:c0:
                    73:ae:30:19:ba:12:93:82:fc:f8:5d:3b:75:c7:0d:
                    76:2b:68:55:df:47:d5:92:91:38:03:bd:b3:62:ca:
                    d0:82:00:0c:65:12:b5:8b:87:32:7c:0c:1a:9f:77:
                    46:29:22:13:8f:54:4f:b2:b2:a6:6e:8d:2c:ae:d3:
                    69:04:19:29:a3:e1:07:85:54:ad:97:48:88:d4:22:
                    1f:80:ca:11:88:16:9c:07:87:be:02:16:97:ea:3b:
                    ba:5a:0a:05:39:c4:f3:94:9b:10:93:08:e0:c0:31:
                    74:21:80:b7:af:1f:de:62:bf:74:7f:fb:95:dc:f8:
                    be:0a:3a:aa:da:f1:f8:fd:e2:88:b3:2a:45:47:50:
                    33:91:16:67:f4:81:ec:63:08:fd:90:82:ac:2c:e9:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:4C:0F:C6:E4:71:95:D3:18:56:C2:10:04:8B:C8:83:84:51:05
            X509v3 Authority Key Identifier:
                keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:0b:53:3d:7d:c1:b1:78:6b:b9:f4:77:c8:d2:e9:b7:68:
         75:c7:6d:f5:2c:97:06:32:aa:93:c8:c3:3a:a2:5f:c5:ff:ba:
         3d:02:45:c0:e8:45:db:35:1e:09:a4:de:8a:04:5f:c2:ee:b4:
         ed:2e:e0:83:35:ef:52:3f:fa:2d:15:b0:64:64:10:cb:f5:fc:
         32:eb:42:6a:d6:98:2a:47:74:58:ba:95:f8:fb:5c:44:ab:36:
         a1:5b:5c:91:ed:44:49:89:a6:41:a8:bb:52:93:52:03:72:ee:
         93:e3:1e:da:9b:e4:84:3c:83:c2:bd:d4:68:f4:f3:85:cc:c2:
         27:10:8a:f2:ae:89:4c:04:24:59:20:b2:38:0b:21:9b:b1:79:
         fa:39:22:3d:c9:63:1c:d8:bc:3a:1f:33:c1:43:b5:90:02:78:
         8f:9b:b7:19:e7:f6:d3:bd:61:e6:48:71:fb:7e:74:11:26:24:
         7b:76:c9:ca:1a:9a:e5:fc:ae:56:8c:0c:e5:3e:8b:40:1d:f9:
         a4:8c:20:51:8d:5b:47:7e:16:8b:a4:97:cf:82:e8:d3:30:51:
         23:35:d4:1e:49:c1:86:3e:24:6b:c5:e0:da:30:b1:2e:ba:36:
         b1:cf:d7:cd:4c:97:56:1c:4c:35:f9:39:07:51:ff:df:ff:b9:
         d8:52:db:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CqZqyQxuL0E4bTsJwVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjUwNDEzMDcwMTM4WhcNMjUwNDE0MDcwMTM4WjAzMTEwLwYDVQQD
EyhhNWVlNGMwZmM2ZTQ3MTk1ZDMxODU2YzIxMDA0OGJjODgzODQ1MTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt4AMre/uW/okgRSN51GXlzGfVJC
h3cx9lhxDACUZ0f7n3qP+fpxLmnyoR5ENrrn4IqDYgSTB0cfYLRKkNFIiARVj5h3
5YJGxKFUT5qfJkOWtrphmp8ibOsuOwDXJ9Anmo2AEcNUjsBzrjAZuhKTgvz4XTt1
xw12K2hV30fVkpE4A72zYsrQggAMZRK1i4cyfAwan3dGKSITj1RPsrKmbo0srtNp
BBkpo+EHhVStl0iI1CIfgMoRiBacB4e+AhaX6ju6WgoFOcTzlJsQkwjgwDF0IYC3
rx/eYr90f/uV3Pi+Cjqq2vH4/eKIsypFR1AzkRZn9IHsYwj9kIKsLOm/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXuTA/G5HGV0xhWwhAEi8iDhFEFMB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMALUz19
wbF4a7n0d8jS6bdodcdt9SyXBjKqk8jDOqJfxf+6PQJFwOhF2zUeCaTeigRfwu60
7S7ggzXvUj/6LRWwZGQQy/X8MutCataYKkd0WLqV+PtcRKs2oVtcke1ESYmmQai7
UpNSA3Luk+Me2pvkhDyDwr3UaPTzhczCJxCK8q6JTAQkWSCyOAshm7F5+jkiPclj
HNi8Oh8zwUO1kAJ4j5u3Gef2071h5khx+350ESYke3bJyhqa5fyuVowM5T6LQB35
pIwgUY1bR34Wi6SXz4Lo0zBRIzXUHknBhj4ka8Xg2jCxLro2sc/XzUyXVhxMNfk5
B1H/3/+52FLbcA==
-----END CERTIFICATE-----