Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File:                     45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier:          r6ZsMc6XJiga9hcZqB3KJKBfQdWpJedwLHzGsKKkcPQ=
Subject key identifier:   A3:28:74:1E:0F:B7:59:1C:EF:65:92:D4:6D:24:49:F9:6D:3C:CB:1C
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer:       /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial:       01962E98DE2AF3EE651AF358709295C6C782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number:          8B
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: 3OPrPpMmvBxow84uVDK1k75+FbkiIVdowMAzxsr67Ek=)
                          2: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (hash: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=)
                          3: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:de:2a:f3:ee:65:1a:f3:58:70:92:95:c6:c7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=a328741e0fb7591cef6592d46d2449f96d3ccb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:52:5f:e0:58:6f:17:3c:15:97:8a:88:51:
                    1e:81:1f:a6:81:52:0f:67:17:f6:60:32:2c:52:a5:
                    c7:2f:e8:9f:63:f4:ac:f9:a7:1d:de:9c:ca:0c:8e:
                    ec:e8:d9:fe:28:57:cd:e4:c1:75:3d:3d:a5:b9:1f:
                    3a:3b:0d:b1:00:e4:61:18:ef:b3:19:fc:74:e6:29:
                    22:a9:56:b0:1b:05:24:cd:e8:66:fc:7c:cf:0f:66:
                    10:85:3d:d1:9e:a8:71:b6:62:8d:ac:4f:e6:fa:6f:
                    23:33:11:44:60:36:30:a5:77:c0:03:e1:44:41:eb:
                    e6:13:78:94:6d:08:88:03:8e:1c:43:02:92:24:ab:
                    9c:81:d8:0e:28:4b:7c:16:ae:45:c9:06:d9:05:56:
                    57:84:34:3f:c5:f6:52:cd:23:ea:b6:bb:46:f1:60:
                    dc:ca:a0:80:ce:4e:1d:ea:22:20:6c:1e:de:09:e8:
                    d8:50:16:c1:01:e5:d2:7b:1f:24:6c:4e:8d:c3:cf:
                    93:23:bd:b5:2b:be:46:9b:e2:3c:96:e3:e4:fc:4a:
                    d8:ef:22:3e:a1:1d:1e:ad:25:34:01:dd:c0:cb:59:
                    f2:a2:7b:bd:4f:57:d9:8a:3c:25:d1:fe:f3:24:b6:
                    43:ee:d6:8a:8b:25:73:f9:56:9c:70:12:47:d0:da:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:28:74:1E:0F:B7:59:1C:EF:65:92:D4:6D:24:49:F9:6D:3C:CB:1C
            X509v3 Authority Key Identifier:
                keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:e5:bd:a3:87:8f:c9:16:c9:82:ea:8f:4b:c7:80:8c:9a:84:
         16:9d:f4:29:c3:66:90:7c:b1:e5:65:10:2b:b9:69:e5:38:5d:
         c1:71:00:81:c4:09:45:46:57:0f:1f:f5:4e:53:fe:d8:6e:ab:
         9d:97:ad:02:18:27:c6:2c:20:5d:9d:0e:1e:2e:2b:2a:91:5b:
         33:44:9f:e5:07:1d:ce:f9:cb:4a:51:ad:e1:72:46:b7:7d:2e:
         ff:19:65:13:a5:7c:53:74:3f:8b:a2:90:43:25:2f:10:28:94:
         60:69:08:79:83:3e:3a:ce:8a:3d:73:98:a7:11:f0:4e:88:ba:
         7c:2a:b0:c6:01:25:66:fe:f4:e5:de:b5:ab:d5:98:b0:24:54:
         34:97:a6:11:99:35:78:28:ea:ea:57:13:0a:44:24:b8:3c:43:
         39:e7:3e:7f:40:20:c7:e1:23:bc:ef:22:a7:59:3f:5f:fe:07:
         9b:e6:49:13:6c:55:80:e9:18:34:72:10:4d:42:6d:9e:63:31:
         01:62:f4:0f:40:d0:1a:dd:40:d3:d2:d9:bc:f4:b7:62:5d:9b:
         f6:ac:a1:68:b3:09:f4:87:7c:4e:a1:94:c0:c3:32:63:94:52:
         8f:86:ed:d0:b4:ad:f2:15:f3:40:dd:1f:b0:0a:ca:7e:8e:c8:
         4c:18:43:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumN4q8+5lGvNYcJKVxseCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz
MTNiNTcwHhcNMjUwNDEzMTAwMTMyWhcNMjUwNDE0MTAwMTMyWjAzMTEwLwYDVQQD
EyhhMzI4NzQxZTBmYjc1OTFjZWY2NTkyZDQ2ZDI0NDlmOTZkM2NjYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz1SX+BYbxc8FZeKiFEegR+mgVIP
Zxf2YDIsUqXHL+ifY/Ss+acd3pzKDI7s6Nn+KFfN5MF1PT2luR86Ow2xAORhGO+z
Gfx05ikiqVawGwUkzehm/HzPD2YQhT3RnqhxtmKNrE/m+m8jMxFEYDYwpXfAA+FE
QevmE3iUbQiIA44cQwKSJKucgdgOKEt8Fq5FyQbZBVZXhDQ/xfZSzSPqtrtG8WDc
yqCAzk4d6iIgbB7eCejYUBbBAeXSex8kbE6Nw8+TI721K75Gm+I8luPk/ErY7yI+
oR0erSU0Ad3Ay1nyonu9T1fZijwl0f7zJLZD7taKiyVz+VaccBJH0NoRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKModB4Pt1kc72WS1G0kSfltPMscMB8GA1UdIwQY
MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt
MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3
LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOW9o4eP
yRbJguqPS8eAjJqEFp30KcNmkHyx5WUQK7lp5ThdwXEAgcQJRUZXDx/1TlP+2G6r
nZetAhgnxiwgXZ0OHi4rKpFbM0Sf5QcdzvnLSlGt4XJGt30u/xllE6V8U3Q/i6KQ
QyUvECiUYGkIeYM+Os6KPXOYpxHwToi6fCqwxgElZv705d61q9WYsCRUNJemEZk1
eCjq6lcTCkQkuDxDOec+f0Agx+EjvO8ip1k/X/4Hm+ZJE2xVgOkYNHIQTUJtnmMx
AWL0D0DQGt1A09LZvPS3Yl2b9qyhaLMJ9Id8TqGUwMMyY5RSj4bt0LSt8hXzQN0f
sArKfo7ITBhDtw==
-----END CERTIFICATE-----