Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File:                     AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier:          A9IIxU7/57gQOEM/ErlEXSQtzQE5d6IxnrVyBfGFKGs=
Subject key identifier:   52:02:85:93:D0:B9:FB:53:3E:94:99:32:BB:D6:03:BC:30:82:9A:A2
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer:       /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial:       01962E98CD06F50345D15DF81BF6D4D3CA30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number:          11F0
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: 4sFdRaN2MUXpst+xddkzNWC4mQTRXypALxeM8FF+gQ0=)
                          2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:06:f5:03:45:d1:5d:f8:1b:f6:d4:d3:ca:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=52028593d0b9fb533e949932bbd603bc30829aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:81:ee:80:65:09:29:3f:9d:5d:55:bb:39:
                    e5:0e:08:b6:01:36:d0:a0:55:84:7d:67:69:8e:b4:
                    a3:f0:2f:f8:37:ac:e9:66:43:8f:ff:d8:8f:5f:e9:
                    26:9f:92:36:4c:02:5d:d2:2a:58:b7:a1:e1:30:a3:
                    f9:d6:5b:09:8c:c1:95:73:27:26:d5:41:a4:c9:2f:
                    85:7f:f1:ef:0c:61:84:b3:a1:1a:85:9d:2d:37:fd:
                    4c:85:2c:71:ee:2c:96:6f:e6:5c:52:9b:b5:ea:b9:
                    32:5e:73:e4:dd:d0:06:d6:57:36:1a:c8:c6:86:2e:
                    33:c0:12:9e:15:b5:bc:57:4c:35:6b:fa:3a:1a:a2:
                    b4:42:bc:c2:c2:48:73:01:7f:60:27:5a:6c:81:d8:
                    38:9f:49:52:50:00:30:09:be:eb:79:b2:d7:b2:d0:
                    f7:de:97:41:6e:1a:a4:f2:f9:98:97:f2:41:25:7b:
                    ec:37:00:31:57:c0:81:0c:d0:7d:c2:40:03:4c:b7:
                    f5:ca:61:eb:b6:e5:f6:f2:2a:2c:68:58:a2:c4:a8:
                    26:57:7d:f1:a8:4b:8e:aa:fc:cc:31:4c:12:69:1e:
                    78:94:3a:91:4e:0e:6d:69:3c:e5:dd:39:88:57:d2:
                    3a:eb:45:81:73:d7:86:d4:1a:f6:8a:a1:0d:b5:88:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:85:93:D0:B9:FB:53:3E:94:99:32:BB:D6:03:BC:30:82:9A:A2
            X509v3 Authority Key Identifier:
                keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:89:af:c8:d5:74:71:6a:af:27:8b:1f:94:b5:6e:17:2a:
         e3:0a:35:e6:10:da:f9:bf:01:c1:d8:03:50:ef:df:5a:d7:b1:
         06:a5:22:42:62:c2:c5:4a:57:26:d7:52:cf:86:82:a5:51:ea:
         3f:44:a9:cc:f7:09:38:e5:3a:86:99:37:78:66:7c:d9:9d:2d:
         af:31:28:9e:92:ed:6e:68:50:c6:c2:56:bc:69:0f:1d:a3:d4:
         79:1f:0d:7e:24:ad:05:6a:1c:dd:cf:2b:19:29:ac:30:f4:0a:
         6a:38:86:7c:7b:57:fc:20:bb:0c:80:4a:80:e8:04:f7:db:90:
         0f:59:14:5d:8e:32:54:e6:69:08:ce:8c:ea:35:18:a2:2a:61:
         96:4b:d3:9b:0e:a4:1c:76:25:93:5a:c9:e9:8a:58:d2:da:73:
         5a:60:91:76:85:d4:07:fa:05:c5:0b:8d:d3:4f:24:16:ef:45:
         86:c9:86:ba:29:54:8d:bf:41:0f:25:08:0a:c1:7d:ae:49:b4:
         0d:52:13:6a:59:24:72:30:d4:c4:cb:1d:06:b1:3c:f5:1d:8a:
         c3:be:30:f4:99:28:b7:70:e0:bd:01:67:93:ca:3a:3d:5f:6d:
         75:85:67:61:74:2e:ce:72:48:1e:a1:27:f4:ed:d1:c8:6b:9b:
         de:08:2a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumM0G9QNF0V34G/bU08owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj
NDZjZmQwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
Eyg1MjAyODU5M2QwYjlmYjUzM2U5NDk5MzJiYmQ2MDNiYzMwODI5YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/uB7oBlCSk/nV1VuznlDgi2ATbQ
oFWEfWdpjrSj8C/4N6zpZkOP/9iPX+kmn5I2TAJd0ipYt6HhMKP51lsJjMGVcycm
1UGkyS+Ff/HvDGGEs6EahZ0tN/1MhSxx7iyWb+ZcUpu16rkyXnPk3dAG1lc2GsjG
hi4zwBKeFbW8V0w1a/o6GqK0QrzCwkhzAX9gJ1psgdg4n0lSUAAwCb7rebLXstD3
3pdBbhqk8vmYl/JBJXvsNwAxV8CBDNB9wkADTLf1ymHrtuX28iosaFiixKgmV33x
qEuOqvzMMUwSaR54lDqRTg5taTzl3TmIV9I660WBc9eG1Br2iqENtYjtHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIChZPQuftTPpSZMrvWA7wwgpqiMB8GA1UdIwQY
MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt
YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0
LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRyJr8jV
dHFqryeLH5S1bhcq4wo15hDa+b8BwdgDUO/fWtexBqUiQmLCxUpXJtdSz4aCpVHq
P0SpzPcJOOU6hpk3eGZ82Z0trzEonpLtbmhQxsJWvGkPHaPUeR8NfiStBWoc3c8r
GSmsMPQKajiGfHtX/CC7DIBKgOgE99uQD1kUXY4yVOZpCM6M6jUYoiphlkvTmw6k
HHYlk1rJ6YpY0tpzWmCRdoXUB/oFxQuN008kFu9FhsmGuilUjb9BDyUICsF9rkm0
DVITalkkcjDUxMsdBrE89R2Kw74w9Jkot3DgvQFnk8o6PV9tdYVnYXQuznJIHqEn
9O3RyGub3ggqZw==
-----END CERTIFICATE-----