Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File:                     XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier:          veuZoBtaULRQLme6V3D1eeaMQ4SyJPrfcyJ/dGx0bu0=
Subject key identifier:   F6:7B:E3:5F:02:B2:44:12:B5:3A:47:5A:11:04:3B:0E:74:4A:26:51
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer:       /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial:       01962E61F5333C906689B9F705CDF2C91DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (hash: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=)
                          2: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (hash: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=)
                          3: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: KQIIsSAb++Kl2adAi2biwLMxVxBZKkS4Y2u2dhCnb/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f5:33:3c:90:66:89:b9:f7:05:cd:f2:c9:1d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=f67be35f02b24412b53a475a11043b0e744a2651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:f5:b5:fc:db:72:44:85:74:1d:4a:aa:c0:
                    d0:45:6c:65:a6:2b:6d:ad:84:ff:f0:8e:39:d6:47:
                    48:7c:66:43:01:f4:d1:53:58:05:d6:9c:0d:67:db:
                    b3:96:79:cd:08:e6:24:a5:5b:77:90:b8:df:90:52:
                    7f:91:53:e0:81:db:d5:99:bb:ca:06:30:f0:f0:ad:
                    1d:ca:4e:91:f0:8d:0a:ee:df:98:9e:84:bc:50:7e:
                    b8:c8:99:ce:84:cb:bc:4a:d7:6e:9b:e9:5b:c0:cc:
                    ce:5a:73:03:75:5c:33:ab:b6:66:24:91:f2:65:08:
                    02:ea:9f:41:aa:1c:02:ab:f5:f6:6b:d1:4d:13:38:
                    6e:ac:f7:65:29:e8:62:7e:d9:f9:ea:7d:22:cf:c0:
                    c2:ff:82:a3:6b:e0:d5:a4:81:b8:7c:53:05:04:5f:
                    4d:5f:7a:90:8a:c2:00:95:14:21:a5:85:2e:c8:e6:
                    a8:82:d6:dc:53:3e:8c:17:39:de:26:8d:3c:63:c3:
                    cf:5e:04:fd:bf:76:a5:15:db:bd:ce:55:09:75:7a:
                    20:05:36:82:70:2e:27:3a:85:25:16:1b:c0:c8:8a:
                    f9:0a:41:43:aa:91:d6:53:10:a3:32:7f:91:5d:04:
                    5e:d6:31:ba:8f:58:52:04:a5:bd:ba:fe:f5:c7:9b:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:E3:5F:02:B2:44:12:B5:3A:47:5A:11:04:3B:0E:74:4A:26:51
            X509v3 Authority Key Identifier:
                keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:52:ca:2d:a0:f2:2d:c4:b5:3a:5f:74:01:fa:3c:00:c4:cc:
         d7:a7:c9:5f:eb:1b:48:f7:7d:87:ad:0f:fe:2e:28:14:e1:be:
         d3:e7:47:ad:35:ef:96:90:c7:1f:70:5d:7b:75:a4:f1:56:a9:
         77:b5:f1:bb:aa:97:c0:ea:67:71:60:d2:1d:69:22:8b:9f:9f:
         9b:f0:7d:1a:91:9f:12:8e:61:9d:bc:f6:bf:ff:58:0f:49:fa:
         3e:cf:65:72:10:68:bf:15:14:8f:54:99:56:42:6d:8c:8b:8a:
         82:fe:6d:f7:9e:dd:e8:7a:6c:fb:68:f4:12:8c:4a:6a:38:c8:
         c4:12:79:28:25:33:4d:13:ac:af:7f:39:13:b0:f3:1f:97:11:
         a2:02:79:b4:af:d0:cc:44:70:0a:de:da:79:71:a0:51:96:ec:
         ee:0b:61:05:96:1f:57:98:c1:d9:a9:38:36:fb:2f:f3:6d:59:
         5f:83:b0:82:8e:b0:fa:32:10:3e:50:28:89:93:e7:49:91:88:
         63:dc:69:12:1f:59:b0:1d:23:da:8e:85:4e:db:1e:07:07:5a:
         3f:27:df:d5:16:85:fa:db:43:20:d9:25:b1:10:9b:22:8f:05:
         17:87:8e:37:e7:ce:2a:88:57:2c:73:93:fc:5f:b2:8b:b5:30:
         d2:e3:e5:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfUzPJBmibn3Bc3yyR3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
EyhmNjdiZTM1ZjAyYjI0NDEyYjUzYTQ3NWExMTA0M2IwZTc0NGEyNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrL1tfzbckSFdB1KqsDQRWxlpitt
rYT/8I451kdIfGZDAfTRU1gF1pwNZ9uzlnnNCOYkpVt3kLjfkFJ/kVPggdvVmbvK
BjDw8K0dyk6R8I0K7t+YnoS8UH64yJnOhMu8Stdum+lbwMzOWnMDdVwzq7ZmJJHy
ZQgC6p9BqhwCq/X2a9FNEzhurPdlKehiftn56n0iz8DC/4Kja+DVpIG4fFMFBF9N
X3qQisIAlRQhpYUuyOaogtbcUz6MFzneJo08Y8PPXgT9v3alFdu9zlUJdXogBTaC
cC4nOoUlFhvAyIr5CkFDqpHWUxCjMn+RXQRe1jG6j1hSBKW9uv71x5tOewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ7418CskQStTpHWhEEOw50SiZRMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglLKLaDy
LcS1Ol90Afo8AMTM16fJX+sbSPd9h60P/i4oFOG+0+dHrTXvlpDHH3Bde3Wk8Vap
d7Xxu6qXwOpncWDSHWkii5+fm/B9GpGfEo5hnbz2v/9YD0n6Ps9lchBovxUUj1SZ
VkJtjIuKgv5t957d6Hps+2j0EoxKajjIxBJ5KCUzTROsr385E7DzH5cRogJ5tK/Q
zERwCt7aeXGgUZbs7gthBZYfV5jB2ak4Nvsv821ZX4Owgo6w+jIQPlAoiZPnSZGI
Y9xpEh9ZsB0j2o6FTtseBwdaPyff1RaF+ttDINklsRCbIo8FF4eON+fOKohXLHOT
/F+yi7Uw0uPlqA==
-----END CERTIFICATE-----