Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File:                     ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier:          Y7A7ot5lG4Oxgk4jeudRFfmPMFTH/BWawyXte8nLy2s=
Subject key identifier:   8B:5C:00:BE:3A:03:29:10:29:4F:D2:E8:7C:B5:1B:9A:01:E9:A7:CC
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer:       /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial:       01962DF404598FB4C995900343919F14DD31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number:          0C47
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (hash: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=)
                          2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: EZ5jXiPIJTFebgSgD57WslE5251HnZsimSF02Ty1oT4=)
                          3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=)
                          4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:04:59:8f:b4:c9:95:90:03:43:91:9f:14:dd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=8b5c00be3a032910294fd2e87cb51b9a01e9a7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:21:35:07:96:8c:eb:d2:d2:cd:6c:63:9c:
                    da:b3:04:4a:2b:f0:eb:85:e3:f5:26:f2:ad:e7:fb:
                    e5:30:2c:3d:b1:c5:b8:78:e8:59:f2:67:30:6a:42:
                    f3:4b:91:e1:87:2b:2a:c0:7c:64:4e:df:2c:17:36:
                    39:6a:2c:86:cc:b6:85:88:63:51:d2:20:99:8c:bf:
                    1d:ec:e9:3c:74:b0:bf:fa:aa:e7:53:a4:bb:d3:6f:
                    3e:6e:71:0f:9f:a4:68:11:18:f7:c0:f7:32:65:aa:
                    25:c0:99:dd:07:25:21:7b:ed:e4:3c:02:f4:6a:cf:
                    79:35:cd:2e:10:78:94:92:ca:f5:ae:32:d8:9c:1b:
                    67:a4:e9:58:2d:3b:41:1a:f7:57:d5:96:d4:38:a5:
                    9d:10:ec:60:3d:dc:f5:c3:73:15:c3:29:aa:43:bd:
                    36:6c:4b:2c:3a:d7:85:cd:9e:ab:46:16:09:96:c1:
                    87:27:59:99:1b:05:27:b5:10:31:f7:07:50:c3:d8:
                    ab:13:b5:27:70:f3:f9:94:e7:0b:50:ee:45:6c:91:
                    87:d3:c4:23:e3:87:10:4b:cc:3c:6b:2f:d5:7f:fc:
                    c8:60:62:dc:31:a9:a2:e3:6a:4c:0a:bd:67:80:11:
                    46:c8:a0:08:bf:7e:ac:68:ce:41:0b:2c:2a:62:ca:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:00:BE:3A:03:29:10:29:4F:D2:E8:7C:B5:1B:9A:01:E9:A7:CC
            X509v3 Authority Key Identifier:
                keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:78:1a:32:be:3a:d0:bc:c1:03:bf:f9:da:ee:e1:11:76:
         4d:f0:fc:87:35:d5:3e:06:b2:94:0b:60:41:4d:25:17:83:63:
         f7:db:76:3e:7d:ca:f4:5b:0a:f2:c9:95:34:6b:c0:24:9e:1d:
         d8:7e:7c:92:63:51:e6:58:0e:9d:b5:8d:11:b8:87:1d:ab:04:
         24:d8:ee:94:5c:06:72:6c:17:51:ac:f4:0d:ad:61:00:2b:d0:
         24:e3:af:66:0a:85:29:8d:96:9a:a7:c1:95:bd:fc:b3:20:35:
         5d:29:49:b2:91:7f:63:91:b6:17:97:ea:da:7d:94:04:fb:b8:
         3c:ef:f5:cb:66:21:08:40:71:eb:1f:ff:6d:1a:29:8f:4c:b6:
         c9:da:3d:78:c0:6c:fc:32:57:c7:01:e3:b4:14:af:0a:a0:ef:
         aa:c0:47:ca:e6:5b:e2:fa:69:4d:f1:84:29:32:35:c9:77:a1:
         f2:21:34:5f:66:f5:ba:33:e1:0c:b0:33:e0:a7:1f:5f:81:fa:
         05:79:d8:da:7d:cb:ac:fe:8e:8c:53:cf:b5:c0:e6:35:8e:52:
         00:a3:c8:0b:76:15:3e:52:f6:3e:76:07:33:fa:79:9c:32:4d:
         50:51:ca:15:fb:a2:7f:9c:1e:c5:fd:0b:0c:c3:98:18:47:55:
         d5:b3:6b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9ARZj7TJlZADQ5GfFN0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmIwOTlhYTQzMDgxYWM4Mzk1ZWUwYjkwY2NmMWE4ODQ0
ZjhkNjQwHhcNMjUwNDEzMDcwMTI4WhcNMjUwNDE0MDcwMTI4WjAzMTEwLwYDVQQD
Eyg4YjVjMDBiZTNhMDMyOTEwMjk0ZmQyZTg3Y2I1MWI5YTAxZTlhN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G0hNQeWjOvS0s1sY5zaswRKK/Dr
heP1JvKt5/vlMCw9scW4eOhZ8mcwakLzS5HhhysqwHxkTt8sFzY5aiyGzLaFiGNR
0iCZjL8d7Ok8dLC/+qrnU6S7028+bnEPn6RoERj3wPcyZaolwJndByUhe+3kPAL0
as95Nc0uEHiUksr1rjLYnBtnpOlYLTtBGvdX1ZbUOKWdEOxgPdz1w3MVwymqQ702
bEssOteFzZ6rRhYJlsGHJ1mZGwUntRAx9wdQw9irE7UncPP5lOcLUO5FbJGH08Qj
44cQS8w8ay/Vf/zIYGLcMami42pMCr1ngBFGyKAIv36saM5BCywqYsrU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItcAL46AykQKU/S6Hy1G5oB6afMMB8GA1UdIwQY
MBaAFHj7CZqkMIGsg5XuC5DM8aiET41kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMt
MmQ4YThkOTY2OWY4LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMtMmQ4YThkOTY2OWY4
LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrh4GjK+
OtC8wQO/+dru4RF2TfD8hzXVPgaylAtgQU0lF4Nj99t2Pn3K9FsK8smVNGvAJJ4d
2H58kmNR5lgOnbWNEbiHHasEJNjulFwGcmwXUaz0Da1hACvQJOOvZgqFKY2WmqfB
lb38syA1XSlJspF/Y5G2F5fq2n2UBPu4PO/1y2YhCEBx6x//bRopj0y2ydo9eMBs
/DJXxwHjtBSvCqDvqsBHyuZb4vppTfGEKTI1yXeh8iE0X2b1ujPhDLAz4KcfX4H6
BXnY2n3LrP6OjFPPtcDmNY5SAKPIC3YVPlL2PnYHM/p5nDJNUFHKFfuif5wexf0L
DMOYGEdV1bNrOA==
-----END CERTIFICATE-----