Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File:                     U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier:          wocWrHiCWjZZU59aHyLpxDK9z+6jJNVkGp7KgsKEo6M=
Subject key identifier:   8F:25:57:F1:04:51:D6:A0:50:19:76:96:12:E4:08:BB:56:08:66:AA
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer:       /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial:       01962F3D4A7BD275173D34B4E22FEA32221B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number:          094D
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=)
                          2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: tYYezWvLwJmh0FpVJVWGhvWErRnTE8ud/HrXLwaGWQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4a:7b:d2:75:17:3d:34:b4:e2:2f:ea:32:22:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=8f2557f10451d6a05019769612e408bb560866aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:a9:76:f4:d6:4a:8f:cb:e3:e8:b8:26:80:
                    d6:4a:7d:cf:76:46:fe:1e:53:af:e2:0c:b0:e7:fb:
                    a3:c0:ff:ad:d3:be:af:05:2a:af:b9:bd:07:fc:84:
                    77:ce:a7:aa:e0:11:af:b8:d2:81:cc:94:a3:4a:22:
                    39:c2:e5:b8:68:cf:9b:76:65:77:1b:e7:7f:39:40:
                    45:09:92:46:e6:b2:46:ca:df:a0:f2:21:1a:bf:f0:
                    83:51:9c:69:d9:9f:93:61:79:f8:f6:a4:ab:7b:c5:
                    4d:89:a1:08:11:d5:90:f6:c3:19:9a:2f:dc:0f:08:
                    14:95:dc:e0:d0:06:28:28:21:98:f1:d2:15:82:f9:
                    24:35:f2:75:be:36:f1:eb:cf:e6:6d:6e:80:0f:f4:
                    e3:be:bc:06:e3:65:85:5d:15:61:91:07:29:ac:17:
                    e8:c6:09:23:64:e1:70:3c:b4:7d:d1:41:f8:2a:66:
                    04:0e:08:72:7a:be:3e:39:e6:1b:75:4a:20:2d:64:
                    89:c9:1f:4f:cb:49:d4:e7:67:93:00:ba:ca:0f:73:
                    a6:75:bc:12:73:1b:9f:0c:e9:5f:fc:58:94:55:9c:
                    c0:00:59:4b:f6:72:2a:5a:66:bc:3d:3a:fa:85:cf:
                    c3:8a:85:8b:fb:b9:54:5b:10:45:fa:e5:e7:f0:c3:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:25:57:F1:04:51:D6:A0:50:19:76:96:12:E4:08:BB:56:08:66:AA
            X509v3 Authority Key Identifier:
                keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:b2:65:50:c6:1f:56:3a:c9:b0:18:09:23:46:ac:e8:1d:
         06:c1:ec:97:da:12:20:18:fb:0b:7e:25:e7:a4:7d:d3:6f:a7:
         0b:f2:2b:aa:db:4a:99:9b:68:35:c6:e1:59:5e:23:46:9d:e2:
         80:58:06:88:65:84:f9:38:89:e2:de:77:06:21:69:e3:69:93:
         78:55:af:3a:b4:8c:30:2d:46:06:a0:40:82:c5:3e:28:b4:87:
         50:ac:06:5c:1b:bf:ef:8b:a7:2d:0f:62:3f:05:8a:ef:a8:a9:
         81:b2:65:74:6a:8c:02:5f:42:c0:ae:29:19:bc:69:74:3a:43:
         48:26:29:65:87:c3:bd:88:9f:3e:88:03:6f:1d:d3:a6:bb:cd:
         89:98:0f:0b:7f:10:f2:b1:b1:0b:bc:66:f3:97:85:75:9c:58:
         7f:7c:50:cc:61:fb:b0:24:69:76:14:a3:3e:e7:47:05:af:80:
         4a:c7:f4:c8:8f:62:bc:02:82:1f:b0:28:22:aa:1e:fb:92:c1:
         40:67:a2:0b:45:7e:3f:0a:bd:b3:d5:da:7b:73:e0:c7:30:b2:
         cc:d4:8c:7d:c9:5d:3f:1f:35:24:c7:32:d0:51:9d:3f:f3:0a:
         11:88:f8:ea:d5:dc:8f:9e:45:97:12:e3:70:6a:04:04:a5:e8:
         43:da:2a:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUp70nUXPTS04i/qMiIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTUwNDBhZTkyNzg2YmYxNzI3YjZiNGVjYzEwOTNiOGE3
NDAxZWIwHhcNMjUwNDEzMTMwMTA4WhcNMjUwNDE0MTMwMTA4WjAzMTEwLwYDVQQD
Eyg4ZjI1NTdmMTA0NTFkNmEwNTAxOTc2OTYxMmU0MDhiYjU2MDg2NmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnSpdvTWSo/L4+i4JoDWSn3Pdkb+
HlOv4gyw5/ujwP+t076vBSqvub0H/IR3zqeq4BGvuNKBzJSjSiI5wuW4aM+bdmV3
G+d/OUBFCZJG5rJGyt+g8iEav/CDUZxp2Z+TYXn49qSre8VNiaEIEdWQ9sMZmi/c
DwgUldzg0AYoKCGY8dIVgvkkNfJ1vjbx68/mbW6AD/TjvrwG42WFXRVhkQcprBfo
xgkjZOFwPLR90UH4KmYEDghyer4+OeYbdUogLWSJyR9Py0nU52eTALrKD3OmdbwS
cxufDOlf/FiUVZzAAFlL9nIqWma8PTr6hc/DioWL+7lUWxBF+uXn8MMZvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8lV/EEUdagUBl2lhLkCLtWCGaqMB8GA1UdIwQY
MBaAFFNVBArpJ4a/Fye2tOzBCTuKdAHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTct
MWRkNTdlM2YzZDk3LzEvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjU2NTctYzhiMi00ODU1LTgyYTctMWRkNTdlM2YzZDk3
LzEvVTFVRUN1a25ocjhYSjdhMDdNRUpPNHAwQWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmL2yZVDG
H1Y6ybAYCSNGrOgdBsHsl9oSIBj7C34l56R902+nC/IrqttKmZtoNcbhWV4jRp3i
gFgGiGWE+TiJ4t53BiFp42mTeFWvOrSMMC1GBqBAgsU+KLSHUKwGXBu/74unLQ9i
PwWK76ipgbJldGqMAl9CwK4pGbxpdDpDSCYpZYfDvYifPogDbx3TprvNiZgPC38Q
8rGxC7xm85eFdZxYf3xQzGH7sCRpdhSjPudHBa+ASsf0yI9ivAKCH7AoIqoe+5LB
QGeiC0V+Pwq9s9Xae3PgxzCyzNSMfcldPx81JMcy0FGdP/MKEYj46tXcj55FlxLj
cGoEBKXoQ9oq1w==
-----END CERTIFICATE-----