Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File:                     In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier:          bd1ZOKyUhShXMHC8X4z5Frx6A8AkAu8T6w9npp91moI=
Subject key identifier:   3C:33:22:0A:28:8D:90:12:A7:02:95:9E:DF:E9:D9:B7:C0:36:C1:0C
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer:       /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial:       01962ECFA321956F72633E3BC34348FCC9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: HXQPyoQpyJO79qwKW1JLlWfVh1i5ptqNabh0OllVr4c=)
                          2: zDiyPljIfQJSHZqDPkKU2sChvrg.roa (hash: y+GAtv4wxCnxVitUPOmEF1JPji3zVCOq+ijeYGfAYfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a3:21:95:6f:72:63:3e:3b:c3:43:48:fc:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=3c33220a288d9012a702959edfe9d9b7c036c10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:fc:41:f8:c2:7f:aa:37:6a:b7:b7:ee:bd:
                    a2:62:29:b8:95:d7:5e:fb:88:2a:f5:66:fb:e6:13:
                    6d:dd:6a:62:4a:55:52:31:e6:59:b8:2e:d9:39:9c:
                    38:68:8f:4a:3f:25:2a:98:de:c9:8e:52:90:b6:16:
                    3b:75:52:0b:b2:ac:86:e0:60:9b:af:32:0d:7e:6f:
                    1b:90:ef:cf:1f:4a:f6:1d:19:84:b6:7e:96:30:67:
                    da:2f:b8:35:b4:70:1b:67:b5:a0:5c:4e:92:a6:63:
                    50:41:8e:d4:04:4e:b6:5d:80:14:c7:1e:72:f4:d5:
                    54:1e:45:37:32:c5:1a:fe:22:ba:ca:40:3b:c4:76:
                    3b:75:3b:53:aa:1d:99:30:15:55:50:79:85:c2:36:
                    75:9e:2f:61:99:7c:19:0a:72:45:ee:07:06:11:c5:
                    11:62:d6:5a:f6:df:07:3b:8c:9e:bf:df:cb:7a:c0:
                    9d:77:c4:ae:e6:d4:ff:ad:56:06:97:a5:7c:07:68:
                    31:c3:4e:2a:1f:11:fa:b0:53:cd:b8:56:a2:4e:36:
                    6b:c2:9d:b3:a8:06:e3:66:9d:7b:25:3e:9b:ce:4b:
                    36:64:af:79:b2:73:ad:fc:cb:af:0d:f6:9b:4b:d8:
                    08:e7:fb:51:77:04:60:dc:28:a8:7d:fb:f3:a7:ab:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:33:22:0A:28:8D:90:12:A7:02:95:9E:DF:E9:D9:B7:C0:36:C1:0C
            X509v3 Authority Key Identifier:
                keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f4:8b:25:93:fc:cb:76:a6:a3:48:1b:8c:50:f9:43:c4:67:
         71:03:45:8c:fd:2f:e1:fc:71:0b:bb:23:21:96:ab:fd:4e:8d:
         bb:1f:b2:bb:39:83:3d:09:a9:f7:9d:4d:75:53:55:1a:b3:b2:
         cc:7b:6f:79:e1:c9:b7:45:ac:30:0b:26:5c:5a:57:0c:bd:fd:
         52:75:5f:3f:a4:9a:78:54:e6:ef:13:1d:c7:7f:ea:49:e6:65:
         2f:cd:39:ed:f6:98:5f:10:12:0f:c2:58:f5:8a:8c:58:ee:ba:
         28:9e:8e:1a:a6:ab:38:91:cb:3d:7f:0c:c3:4f:e8:d3:06:13:
         f3:a3:ac:d2:b5:7c:19:eb:79:df:8f:c9:d9:c7:e3:3f:f0:3b:
         1e:32:1e:4c:cb:f0:cf:bd:0b:e5:1c:3a:54:58:5c:6b:d7:39:
         db:0c:cf:9f:19:43:02:e3:4b:d8:45:90:1c:36:ae:22:44:61:
         bb:ee:a2:c2:6c:ac:ba:2c:79:9e:fa:36:e7:ce:ca:b6:2e:98:
         87:db:7c:be:e5:9b:c7:e1:3a:53:99:85:f1:55:35:21:b2:4f:
         9f:4f:46:23:5b:d8:67:a4:ba:81:d2:de:72:42:5e:2f:de:06:
         3d:2e:a8:2b:d8:0f:9b:39:99:0d:54:a1:d5:c1:0b:05:a4:9c:
         9a:f6:ed:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6MhlW9yYz47w0NI/Mn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyN2U5NTgxYTY5YWNmODExOTMyMGUxMzc5ODU3YTUxM2Jk
MjM4ZGIwHhcNMjUwNDEzMTEwMTIxWhcNMjUwNDE0MTEwMTIxWjAzMTEwLwYDVQQD
EygzYzMzMjIwYTI4OGQ5MDEyYTcwMjk1OWVkZmU5ZDliN2MwMzZjMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlv8QfjCf6o3are37r2iYim4ldde
+4gq9Wb75hNt3WpiSlVSMeZZuC7ZOZw4aI9KPyUqmN7JjlKQthY7dVILsqyG4GCb
rzINfm8bkO/PH0r2HRmEtn6WMGfaL7g1tHAbZ7WgXE6SpmNQQY7UBE62XYAUxx5y
9NVUHkU3MsUa/iK6ykA7xHY7dTtTqh2ZMBVVUHmFwjZ1ni9hmXwZCnJF7gcGEcUR
YtZa9t8HO4yev9/LesCdd8Su5tT/rVYGl6V8B2gxw04qHxH6sFPNuFaiTjZrwp2z
qAbjZp17JT6bzks2ZK95snOt/MuvDfabS9gI5/tRdwRg3Cioffvzp6sFrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwzIgoojZASpwKVnt/p2bfANsEMMB8GA1UdIwQY
MBaAFCJ+lYGmms+BGTIOE3mFelE70jjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2It
ZDlkZjQ1ZGJiYWRmLzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2ItZDlkZjQ1ZGJiYWRm
LzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/SLJZP8
y3amo0gbjFD5Q8RncQNFjP0v4fxxC7sjIZar/U6Nux+yuzmDPQmp951NdVNVGrOy
zHtveeHJt0WsMAsmXFpXDL39UnVfP6SaeFTm7xMdx3/qSeZlL8057faYXxASD8JY
9YqMWO66KJ6OGqarOJHLPX8Mw0/o0wYT86Os0rV8Get534/J2cfjP/A7HjIeTMvw
z70L5Rw6VFhca9c52wzPnxlDAuNL2EWQHDauIkRhu+6iwmysuix5nvo2587Kti6Y
h9t8vuWbx+E6U5mF8VU1IbJPn09GI1vYZ6S6gdLeckJeL94GPS6oK9gPmzmZDVSh
1cELBaScmvbtaw==
-----END CERTIFICATE-----