Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File:                     xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier:          REk1CC0qQeBiQz1KnCiQS3r6G0jEb+7XkvgauXFi4z8=
Subject key identifier:   5F:14:58:52:31:A7:04:41:48:A8:E7:F8:36:9B:4B:78:18:9B:78:21
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer:       /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial:       01962F0721C22917B673893CD214C4EB9BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
                          2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
                          3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: Uiw+eiFesuE0/EHHx55h/87tEOcWihCu7O7jSdekONg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:c2:29:17:b6:73:89:3c:d2:14:c4:eb:9b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=5f14585231a7044148a8e7f8369b4b78189b7821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:6d:a5:52:18:40:3f:ca:51:3a:e0:02:8d:
                    61:9c:c3:d5:17:9a:8f:44:58:f0:ef:29:cf:16:13:
                    50:ad:15:77:03:41:56:e1:0d:d6:e4:eb:b2:4d:46:
                    ed:64:8b:31:b3:6e:4b:97:06:f4:4d:83:ec:0f:43:
                    03:66:8b:49:69:e3:1a:62:86:15:af:bb:65:ce:33:
                    e1:f0:33:90:3c:2e:85:f1:fb:a2:2b:b0:38:42:a4:
                    4e:67:ec:3c:52:d6:3f:91:3d:21:21:e0:c0:99:d1:
                    33:85:f9:c6:da:e6:7f:da:0e:4c:5a:e2:68:16:8e:
                    13:09:90:97:df:07:03:3c:62:19:cc:b3:09:4d:34:
                    f2:6f:82:37:2c:6f:18:0b:06:4a:d3:eb:91:d0:c7:
                    29:d6:c4:35:b7:dd:a1:1d:1d:19:61:32:0a:ee:aa:
                    0c:6b:30:16:a2:23:0c:2a:88:cc:05:07:87:8d:9d:
                    c4:1e:10:0c:b6:07:6c:93:2e:b4:79:91:97:a1:b8:
                    ba:49:65:98:ba:7e:23:92:bd:d6:54:13:fe:be:2a:
                    0d:e6:9f:4d:54:7d:b4:73:9e:28:9b:05:ce:ab:f4:
                    20:05:c8:1a:5f:14:4b:1f:e0:3e:c9:3f:28:58:cd:
                    70:f1:9e:7e:af:76:1d:be:aa:84:45:1f:e9:a4:96:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:14:58:52:31:A7:04:41:48:A8:E7:F8:36:9B:4B:78:18:9B:78:21
            X509v3 Authority Key Identifier:
                keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8f:76:ca:aa:87:fc:b5:b2:b1:b6:76:8d:aa:34:c9:21:99:
         2e:d9:9b:32:07:d4:ea:3e:91:58:e3:fd:b4:82:d0:50:28:d5:
         fd:e6:bd:05:a5:54:66:e7:93:78:e9:0b:27:ab:7b:41:1e:7c:
         98:0c:ab:60:82:f3:89:69:35:cc:cb:4a:78:09:ae:3d:0c:6a:
         00:bb:4b:f0:5f:4f:0c:f6:2e:b3:f4:da:db:cc:ef:c6:90:43:
         99:12:d7:c2:4e:91:84:45:cd:6c:5b:b1:75:67:0d:39:3e:5f:
         08:d6:78:83:a7:8b:d5:79:db:af:c9:fe:d7:56:2b:81:bb:1e:
         07:4f:5c:e0:e9:e2:b4:a5:39:ba:6b:10:ee:f7:a2:4d:be:8f:
         72:f1:69:16:ef:ef:41:b3:9d:c1:ff:b4:19:55:ee:b9:73:ad:
         ed:2e:f5:ec:99:86:99:82:86:cb:23:73:49:ee:f3:65:7b:e2:
         2a:66:f5:09:da:b4:29:45:95:22:fc:aa:97:6d:8f:22:c7:ff:
         7f:8a:e5:03:31:ba:5e:69:d4:dc:91:49:19:49:5b:5a:fb:83:
         7f:1a:c4:af:01:1a:d0:f9:51:4c:6d:7c:1a:e2:67:54:e2:e0:
         ff:57:fd:34:cd:d9:ff:f5:bf:85:99:78:73:27:b2:bc:3c:38:
         ea:00:b9:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByHCKRe2c4k80hTE65v/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjUwNDEzMTIwMTU4WhcNMjUwNDE0MTIwMTU4WjAzMTEwLwYDVQQD
Eyg1ZjE0NTg1MjMxYTcwNDQxNDhhOGU3ZjgzNjliNGI3ODE4OWI3ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMNtpVIYQD/KUTrgAo1hnMPVF5qP
RFjw7ynPFhNQrRV3A0FW4Q3W5OuyTUbtZIsxs25Llwb0TYPsD0MDZotJaeMaYoYV
r7tlzjPh8DOQPC6F8fuiK7A4QqROZ+w8UtY/kT0hIeDAmdEzhfnG2uZ/2g5MWuJo
Fo4TCZCX3wcDPGIZzLMJTTTyb4I3LG8YCwZK0+uR0Mcp1sQ1t92hHR0ZYTIK7qoM
azAWoiMMKojMBQeHjZ3EHhAMtgdsky60eZGXobi6SWWYun4jkr3WVBP+vioN5p9N
VH20c54omwXOq/QgBcgaXxRLH+A+yT8oWM1w8Z5+r3YdvqqERR/ppJbEaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8UWFIxpwRBSKjn+DabS3gYm3ghMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY92yqqH
/LWysbZ2jao0ySGZLtmbMgfU6j6RWOP9tILQUCjV/ea9BaVUZueTeOkLJ6t7QR58
mAyrYILziWk1zMtKeAmuPQxqALtL8F9PDPYus/Ta28zvxpBDmRLXwk6RhEXNbFux
dWcNOT5fCNZ4g6eL1Xnbr8n+11YrgbseB09c4OnitKU5umsQ7veiTb6PcvFpFu/v
QbOdwf+0GVXuuXOt7S717JmGmYKGyyNzSe7zZXviKmb1Cdq0KUWVIvyql22PIsf/
f4rlAzG6XmnU3JFJGUlbWvuDfxrErwEa0PlRTG18GuJnVOLg/1f9NM3Z//W/hZl4
cyeyvDw46gC5ng==
-----END CERTIFICATE-----