Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File:                     pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier:          0SdzOVHhf9j+harIRStwDGgVcm78WRDAXqPk8f5B0gI=
Subject key identifier:   C2:93:8C:D1:40:F8:0C:7A:6B:F8:72:39:6C:5A:35:13:AB:27:83:DD
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer:       /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial:       01962F74DAC5A9306C6C36DA9D19FF6D81D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number:          061B
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: e4pYTgrST_OIh_0Qkxb1VUF6r3Y.roa (hash: CwIOS1Io6ZhDFcyydlZIo2WNdIO73K5UrPWTpvd7EH0=)
                          2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: qYcnVx1cgZaaMAnlIh35ECAnP6tvC++BBkfKyTeGaOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:da:c5:a9:30:6c:6c:36:da:9d:19:ff:6d:81:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=c2938cd140f80c7a6bf872396c5a3513ab2783dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:10:5a:d0:92:7c:14:db:83:34:77:63:6e:
                    6e:77:de:44:0b:5c:06:0e:a6:9d:20:9b:f8:c2:2e:
                    dd:9c:ac:91:fa:93:43:65:b3:b5:ea:4a:67:54:07:
                    59:7e:cd:87:a7:37:67:0f:0c:e4:3f:c7:f2:e2:8d:
                    1a:aa:3a:35:f0:c6:e2:dc:d1:7d:d1:d9:f6:90:85:
                    d3:27:d7:dd:87:cf:be:36:9b:e8:1d:05:03:c8:96:
                    16:ec:6b:aa:e5:0b:77:28:af:cf:3a:2d:1a:99:a5:
                    6b:fe:bb:c2:77:a0:f2:9f:39:30:40:30:01:42:8d:
                    86:01:47:15:0a:c8:d1:2c:de:0e:13:2e:e2:cf:dc:
                    35:4e:37:04:d4:39:ad:f0:e8:bf:87:99:6f:d8:1d:
                    9b:2f:b6:76:03:b3:fd:dc:e7:4b:ed:27:4b:3d:11:
                    e4:9a:50:ad:1e:88:63:4b:d9:cd:0d:44:8a:b2:d2:
                    c8:9e:6b:d9:c1:2a:61:0e:35:ed:f7:64:28:fd:8d:
                    be:2e:c3:72:9b:cf:74:42:10:a7:28:59:85:d9:44:
                    28:0d:83:57:14:62:f4:9b:da:ef:59:2e:46:7f:01:
                    52:74:70:1b:77:9a:29:19:0c:2b:13:d5:07:91:ec:
                    d8:67:2f:9e:0a:31:81:f1:49:bb:91:05:d3:89:90:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:8C:D1:40:F8:0C:7A:6B:F8:72:39:6C:5A:35:13:AB:27:83:DD
            X509v3 Authority Key Identifier:
                keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:3e:5c:71:62:0a:f2:73:8b:c4:08:30:ce:bf:0a:3e:f4:
         5c:64:f7:da:3c:bc:2d:35:8f:7c:e2:53:f1:a2:23:f4:9b:82:
         56:9c:05:e7:24:1f:5a:3c:5d:d8:9e:f2:bc:49:b5:43:8e:44:
         cd:54:9a:81:25:9b:b4:24:22:33:5a:89:1d:29:3c:8e:cb:c1:
         ca:a4:44:23:8b:3e:11:d5:88:b3:ab:f4:b2:7e:f9:e6:0b:cc:
         bc:35:f7:02:5e:f2:b9:17:01:21:b1:ea:3e:e9:d1:47:d1:ff:
         a4:91:92:22:35:04:88:65:ac:a2:83:39:78:fb:cf:ad:2b:84:
         c7:af:64:2d:56:a5:78:52:6f:10:b7:87:ab:13:c9:30:3c:e2:
         64:c8:5b:66:9c:77:35:7e:75:15:22:cc:02:53:68:78:14:72:
         0d:71:a6:34:3a:2b:25:c7:45:e0:19:6d:6b:46:7b:5b:06:ed:
         be:c2:a5:24:0a:bd:9f:df:46:14:85:68:5a:d7:66:4e:b3:41:
         fa:c6:20:bf:f0:41:9c:63:09:5d:ac:0b:d3:cd:da:5d:ae:38:
         7b:f4:de:4d:0e:0d:81:76:2c:c9:69:20:06:c4:8e:37:44:3b:
         84:47:73:26:81:be:e9:65:0f:68:24:77:80:97:ce:90:ef:7a:
         a8:f3:2f:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNrFqTBsbDbanRn/bYHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NTAwNDY2MWEwOWUyNjc1ZmMxNTk5ZDRlNDAwMjdkNzc4
YzQwNGMwHhcNMjUwNDEzMTQwMTQ5WhcNMjUwNDE0MTQwMTQ5WjAzMTEwLwYDVQQD
EyhjMjkzOGNkMTQwZjgwYzdhNmJmODcyMzk2YzVhMzUxM2FiMjc4M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnncQWtCSfBTbgzR3Y25ud95EC1wG
DqadIJv4wi7dnKyR+pNDZbO16kpnVAdZfs2HpzdnDwzkP8fy4o0aqjo18Mbi3NF9
0dn2kIXTJ9fdh8++NpvoHQUDyJYW7Guq5Qt3KK/POi0amaVr/rvCd6DynzkwQDAB
Qo2GAUcVCsjRLN4OEy7iz9w1TjcE1Dmt8Oi/h5lv2B2bL7Z2A7P93OdL7SdLPRHk
mlCtHohjS9nNDUSKstLInmvZwSphDjXt92Qo/Y2+LsNym890QhCnKFmF2UQoDYNX
FGL0m9rvWS5GfwFSdHAbd5opGQwrE9UHkezYZy+eCjGB8Um7kQXTiZDP0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKTjNFA+Ax6a/hyOWxaNROrJ4PdMB8GA1UdIwQY
MBaAFKVQBGYaCeJnX8FZnU5AAn13jEBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODIt
M2Y3OGJjM2RlM2E4LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yY2ZkZmQtMWIzYi00YWFhLWJkODItM2Y3OGJjM2RlM2E4
LzEvcFZBRVpob0o0bWRmd1ZtZFRrQUNmWGVNUUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU64+XHFi
CvJzi8QIMM6/Cj70XGT32jy8LTWPfOJT8aIj9JuCVpwF5yQfWjxd2J7yvEm1Q45E
zVSagSWbtCQiM1qJHSk8jsvByqREI4s+EdWIs6v0sn755gvMvDX3Al7yuRcBIbHq
PunRR9H/pJGSIjUEiGWsooM5ePvPrSuEx69kLValeFJvELeHqxPJMDziZMhbZpx3
NX51FSLMAlNoeBRyDXGmNDorJcdF4Blta0Z7WwbtvsKlJAq9n99GFIVoWtdmTrNB
+sYgv/BBnGMJXawL083aXa44e/TeTQ4NgXYsyWkgBsSON0Q7hEdzJoG+6WUPaCR3
gJfOkO96qPMvFA==
-----END CERTIFICATE-----