Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File:                     7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier:          7Ad3BXXPn3f1cTHb77Jlvv4LunYrHYw/Z54XBurdQVw=
Subject key identifier:   A1:7F:DF:65:25:35:F1:20:0B:DA:DE:5A:96:30:CE:1D:9F:64:6A:45
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer:       /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial:       01962F06AC595B2B6A7D4F4768FE8C6E1B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number:          052E
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: Dl9c/ohORZd3Iv75iBpSdTpnUzt82Vd682S0iXh9yQU=)
                          2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ac:59:5b:2b:6a:7d:4f:47:68:fe:8c:6e:1b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=a17fdf652535f1200bdade5a9630ce1d9f646a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:e3:da:74:59:1b:4a:c9:4d:b0:91:d0:c5:
                    b6:31:34:e8:78:01:95:cb:5f:6d:e9:ff:24:30:ad:
                    5f:c9:10:91:b6:bd:ef:63:a4:35:d6:1e:6a:e4:12:
                    cb:ba:76:2f:b1:fc:e7:ba:d8:53:8c:cf:d9:82:cf:
                    e0:41:5f:6a:da:f6:a8:2f:f1:fe:6b:7b:f7:e0:e7:
                    8c:89:b3:9d:66:f7:ef:4c:de:cc:db:3e:75:3e:e3:
                    61:a4:6e:0a:53:7d:0e:de:30:cc:72:de:c2:8c:15:
                    b4:ed:c3:6e:83:56:ec:a5:ca:a6:d6:69:40:09:9b:
                    ce:54:19:c7:e4:c1:9b:f4:d3:0b:85:66:2e:94:e9:
                    fb:6e:ca:bb:48:7c:10:33:e6:4b:99:ba:59:2b:12:
                    81:d6:7d:09:f3:a0:17:89:10:c5:a6:6b:05:8f:ee:
                    bb:fb:d1:c8:f2:ce:18:ae:76:f8:51:2f:d8:8b:26:
                    4c:e3:07:0c:4b:a3:ba:02:4a:f6:a6:05:05:46:84:
                    8c:ed:c1:94:4b:23:99:90:8a:57:d9:f8:50:b0:b0:
                    e5:b4:95:8f:92:f2:7c:ae:b1:a4:a1:cf:b9:01:aa:
                    18:76:0e:d0:f9:b6:0d:c3:e3:10:d0:93:f5:39:f4:
                    70:aa:ce:5a:e5:fd:15:70:2c:b9:ce:53:9d:08:09:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7F:DF:65:25:35:F1:20:0B:DA:DE:5A:96:30:CE:1D:9F:64:6A:45
            X509v3 Authority Key Identifier:
                keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:81:d0:15:e7:ea:8d:95:54:f9:ec:2c:65:45:05:ae:21:67:
         9a:63:c1:d9:96:1e:a6:4a:6f:41:2c:41:7e:a9:cd:c5:5f:93:
         9e:a3:b9:c5:51:2f:6b:10:d8:a1:70:5b:44:5c:2d:0e:9b:57:
         1c:26:b7:bb:df:07:ad:e1:fb:9a:c1:cf:eb:06:b8:f6:4b:0f:
         07:b7:ba:df:6a:f4:85:df:d5:43:28:17:e4:4a:db:7c:60:bd:
         5d:1f:55:2a:b7:b0:31:e5:bc:59:ef:d8:18:f8:30:05:db:3c:
         e3:fb:25:19:8e:b4:b4:fe:61:31:83:a2:cc:eb:5c:00:0f:f1:
         dd:22:0b:e0:bd:87:82:64:5b:c1:f3:97:9d:d6:ae:35:fa:61:
         e9:07:6b:64:95:d4:85:8d:f5:a3:5f:47:3a:8c:3e:95:c0:8e:
         bc:38:8f:b5:f7:41:f1:77:ac:57:c2:48:4e:c6:22:26:56:a3:
         45:f9:86:d2:c3:ad:18:1c:fc:f9:b4:1a:47:51:cf:16:be:f3:
         51:67:e2:05:9c:6c:40:51:1e:88:bf:9d:8b:a2:00:fa:bb:1f:
         ec:22:57:96:47:41:34:fa:03:df:a7:c0:3e:fa:b5:5c:5a:fe:
         49:55:2b:48:75:a0:a7:e7:ce:f5:1d:cd:78:5d:2d:ff:65:a5:
         55:0f:1e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqxZWytqfU9HaP6MbhuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz
MWNmMDMwHhcNMjUwNDEzMTIwMTI4WhcNMjUwNDE0MTIwMTI4WjAzMTEwLwYDVQQD
EyhhMTdmZGY2NTI1MzVmMTIwMGJkYWRlNWE5NjMwY2UxZDlmNjQ2YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreXj2nRZG0rJTbCR0MW2MTToeAGV
y19t6f8kMK1fyRCRtr3vY6Q11h5q5BLLunYvsfznuthTjM/Zgs/gQV9q2vaoL/H+
a3v34OeMibOdZvfvTN7M2z51PuNhpG4KU30O3jDMct7CjBW07cNug1bspcqm1mlA
CZvOVBnH5MGb9NMLhWYulOn7bsq7SHwQM+ZLmbpZKxKB1n0J86AXiRDFpmsFj+67
+9HI8s4Yrnb4US/YiyZM4wcMS6O6Akr2pgUFRoSM7cGUSyOZkIpX2fhQsLDltJWP
kvJ8rrGkoc+5AaoYdg7Q+bYNw+MQ0JP1OfRwqs5a5f0VcCy5zlOdCAma/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF/32UlNfEgC9reWpYwzh2fZGpFMB8GA1UdIwQY
MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt
ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1
LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIHQFefq
jZVU+ewsZUUFriFnmmPB2ZYepkpvQSxBfqnNxV+TnqO5xVEvaxDYoXBbRFwtDptX
HCa3u98HreH7msHP6wa49ksPB7e632r0hd/VQygX5ErbfGC9XR9VKrewMeW8We/Y
GPgwBds84/slGY60tP5hMYOizOtcAA/x3SIL4L2HgmRbwfOXndauNfph6QdrZJXU
hY31o19HOow+lcCOvDiPtfdB8XesV8JITsYiJlajRfmG0sOtGBz8+bQaR1HPFr7z
UWfiBZxsQFEeiL+di6IA+rsf7CJXlkdBNPoD36fAPvq1XFr+SVUrSHWgp+fO9R3N
eF0t/2WlVQ8eow==
-----END CERTIFICATE-----