Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
File:                     mecgmoybF2-_Yj7fPuC4IAf8LEA.mft (raw, json)
Hash identifier:          7+XrJHlQPTCVXqSCIkGMKQqp1MTMna19jw+rlRW3DW4=
Subject key identifier:   C2:95:B8:EB:C2:51:3A:28:A9:4C:F9:0A:A5:45:4A:EC:61:03:46:66
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Certificate issuer:       /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial:       01962FAB20E02E938127CBDEDFD82F88CFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: 8Yr3TcpHaEQid4NaHBnD3vpLE84.roa (hash: nwAi63b6Bc3AJUqoLYElL2URnBMmDXAT9b7jn7wDHew=)
                          2: A75GKdnytMgw_QDzJ6mKkBxysdg.roa (hash: 1rdKql06Fikt+3KiR2/2HVP/pn3DM4xmuAvKjd0OMCs=)
                          3: fiBm-H6MZf3doc0iQRwx1WfOBtU.roa (hash: lFEwHkm3foVU/vLtJDQi6VsIU7NhnRJ+voXn3vgZZsQ=)
                          4: kQbp2qzFUZPwkhJafZeDm861YjM.roa (hash: Fkm5avfRjVcfP/ZhaPCK6QXfyeZa3X+294m6m4o5WkA=)
                          5: mecgmoybF2-_Yj7fPuC4IAf8LEA.crl (hash: Y8TvWoVdsEhVTXW121ToFGOWseC5U1zJEe0nw3knQ0E=)
                          6: ow3qzF69wqcAle7bTyTRDSI-CjU.roa (hash: zPkJxRIh+4adiToqm5Gt9iWworMW5Po/0t9AKhqJJ1k=)
                          7: t1AESqjDY-KutFWdkZGisFfagCE.roa (hash: MNFsAROxqzLCXF98BXrdVFPLVe5mdJi+XK1r2Onz//o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:e0:2e:93:81:27:cb:de:df:d8:2f:88:cf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=c295b8ebc2513a28a94cf90aa5454aec61034666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:a6:70:65:c4:07:f9:6e:9d:1e:f9:d8:dd:
                    77:9d:65:85:c1:d4:ec:ea:1f:02:a7:5d:5a:26:a7:
                    63:df:e6:c1:b1:89:f9:6d:28:d4:a6:1f:69:59:c3:
                    57:ea:56:34:f1:c0:3f:91:36:0c:73:ec:e4:0d:36:
                    f7:bf:42:2d:40:59:35:b4:b0:dd:68:a2:87:90:ed:
                    9f:9e:db:9a:a4:7e:04:80:f2:92:a4:28:79:e7:e5:
                    95:57:87:63:3e:16:64:cb:dd:b4:96:df:32:53:e7:
                    0f:03:03:8a:65:40:97:51:f0:e3:ea:a5:02:71:97:
                    25:e1:b8:3f:92:21:9e:b9:92:ee:a0:1d:75:db:bd:
                    86:c7:41:d6:de:7a:83:fd:96:aa:ae:d5:0f:4c:35:
                    48:06:30:a6:48:b1:a7:84:c7:e5:6c:af:cd:6d:9b:
                    0c:ac:ed:04:a4:ed:a2:d2:63:61:ff:30:1b:e6:48:
                    b8:45:82:bf:a7:5e:fa:5e:c3:b1:73:1d:4a:18:e4:
                    88:a2:2d:88:aa:bb:1c:93:ff:a0:25:6b:c3:7d:25:
                    5a:de:db:64:6d:7c:35:fb:de:8c:88:16:af:94:2e:
                    b6:86:aa:07:12:62:3e:3d:65:99:b1:34:83:49:0a:
                    94:9c:89:03:47:48:23:42:04:6b:db:01:6b:a8:f7:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:95:B8:EB:C2:51:3A:28:A9:4C:F9:0A:A5:45:4A:EC:61:03:46:66
            X509v3 Authority Key Identifier:
                keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:44:79:1d:c1:2f:9f:7e:d6:43:1f:ac:b6:4f:8d:53:2b:
         e6:33:6d:b1:dd:c9:8c:30:55:b0:76:e4:12:eb:b4:25:7b:a5:
         41:c7:b9:97:57:74:fd:54:d4:1d:3f:a8:a1:65:a2:f0:e9:d4:
         8e:eb:c3:07:14:60:f9:80:73:05:e9:77:0c:1d:71:ff:f5:d5:
         8d:be:d0:ef:a4:cd:26:5a:90:76:e9:dc:e1:95:10:a9:3d:39:
         a5:19:09:c9:2a:52:62:ae:f1:8a:73:bb:63:02:53:25:81:27:
         c2:c4:73:f6:e9:4b:29:fc:3e:16:9e:e3:f0:59:f2:3a:df:94:
         17:79:3b:fa:30:b6:f6:37:c8:3a:cc:4e:7f:fe:ad:b8:48:e8:
         8c:ef:42:db:a2:29:53:c8:f7:e2:dd:65:33:ab:8a:5c:6b:d5:
         0d:00:ea:f8:3a:14:de:f2:46:29:94:fa:34:2e:ec:b2:ec:f6:
         00:00:a1:76:18:39:d3:4c:9b:a8:4a:98:6a:1c:5b:1a:b0:97:
         bc:40:0e:1c:1c:b4:e8:08:9a:d6:e8:e6:11:8a:9b:b2:d3:d4:
         c7:5c:83:20:32:9e:58:1c:73:0a:e3:c7:75:61:00:4c:e7:77:
         a7:22:40:4e:32:f6:76:c0:dd:b2:b3:47:df:f7:16:86:58:92:
         30:4d:54:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyDgLpOBJ8ve39gviM/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm
YzJjNDAwHhcNMjUwNDEzMTUwMTA2WhcNMjUwNDE0MTUwMTA2WjAzMTEwLwYDVQQD
EyhjMjk1YjhlYmMyNTEzYTI4YTk0Y2Y5MGFhNTQ1NGFlYzYxMDM0NjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFKmcGXEB/lunR752N13nWWFwdTs
6h8Cp11aJqdj3+bBsYn5bSjUph9pWcNX6lY08cA/kTYMc+zkDTb3v0ItQFk1tLDd
aKKHkO2fntuapH4EgPKSpCh55+WVV4djPhZky920lt8yU+cPAwOKZUCXUfDj6qUC
cZcl4bg/kiGeuZLuoB11272Gx0HW3nqD/ZaqrtUPTDVIBjCmSLGnhMflbK/NbZsM
rO0EpO2i0mNh/zAb5ki4RYK/p176XsOxcx1KGOSIoi2Iqrsck/+gJWvDfSVa3ttk
bXw1+96MiBavlC62hqoHEmI+PWWZsTSDSQqUnIkDR0gjQgRr2wFrqPcNmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKVuOvCUTooqUz5CqVFSuxhA0ZmMB8GA1UdIwQY
MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt
YjJkY2MxODYzZThiLzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi
LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPJEeR3B
L59+1kMfrLZPjVMr5jNtsd3JjDBVsHbkEuu0JXulQce5l1d0/VTUHT+ooWWi8OnU
juvDBxRg+YBzBel3DB1x//XVjb7Q76TNJlqQdunc4ZUQqT05pRkJySpSYq7xinO7
YwJTJYEnwsRz9ulLKfw+Fp7j8FnyOt+UF3k7+jC29jfIOsxOf/6tuEjojO9C26Ip
U8j34t1lM6uKXGvVDQDq+DoU3vJGKZT6NC7ssuz2AAChdhg500ybqEqYahxbGrCX
vEAOHBy06Aia1ujmEYqbstPUx1yDIDKeWBxzCuPHdWEATOd3pyJATjL2dsDdsrNH
3/cWhliSME1U7Q==
-----END CERTIFICATE-----