Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File:                     S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier:          t8VY1TFFzAOc5VBcr/UHkFMhCl45Ld7VXki2vBSpCqw=
Subject key identifier:   37:26:D0:4E:B1:CE:95:C5:82:4B:07:89:E9:A2:69:00:C8:17:CD:64
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer:       /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial:       01962F3D8F70D77797F2EA57BF00B9AEE7D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number:          0948
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
                          2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: PebtJVV1Q9sE03b3XbEXoK/TkqavaX96h3GfpnLBKhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:70:d7:77:97:f2:ea:57:bf:00:b9:ae:e7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=3726d04eb1ce95c5824b0789e9a26900c817cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:a1:07:d0:3a:7e:77:7f:e4:fc:0a:aa:b3:
                    d9:2b:52:f4:63:7a:4d:0c:ce:2d:c5:e0:f8:3e:22:
                    3f:cc:94:ad:21:91:84:d4:02:fe:b9:c8:5b:19:df:
                    91:de:07:4e:aa:89:75:2d:a4:40:ca:92:d0:57:c0:
                    52:c5:c7:85:f7:56:ab:7a:5b:29:ac:04:63:07:5e:
                    00:33:03:e5:6c:ef:ce:6f:e5:cf:77:84:de:8c:3e:
                    61:d0:24:4f:33:c4:fc:a6:f8:ce:7c:6a:2b:9f:a7:
                    c5:ee:db:94:ee:ee:87:ef:60:c1:b5:c8:14:85:d0:
                    60:42:16:35:8c:0c:b0:e1:0b:5e:c8:1b:7c:df:80:
                    db:83:18:18:c0:a5:6b:a1:87:b6:ee:ab:e5:c1:27:
                    74:35:ac:1e:fc:5a:85:ef:56:c8:2d:ec:91:fa:62:
                    c3:8d:70:36:e0:ba:65:34:19:7c:92:18:da:d1:58:
                    99:b8:82:7f:88:3a:a5:74:33:e9:01:aa:6a:c6:dc:
                    ec:0e:29:41:84:7c:ca:0e:4a:34:36:21:40:33:77:
                    7c:ea:13:8b:16:75:c2:a3:a7:77:a6:12:bd:fe:3b:
                    1e:2b:4a:7a:e1:ba:dd:0b:13:56:cb:72:dd:63:6e:
                    c8:1d:aa:06:aa:2f:29:17:5c:3f:a2:f4:f5:a1:d4:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:26:D0:4E:B1:CE:95:C5:82:4B:07:89:E9:A2:69:00:C8:17:CD:64
            X509v3 Authority Key Identifier:
                keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2c:d6:49:bf:86:81:e5:11:ba:91:27:57:97:7f:3b:27:4e:
         fd:44:36:a8:ac:8e:a3:cf:a5:87:0e:9e:04:41:0c:9e:d8:21:
         05:39:96:3c:e6:33:5e:cf:68:1e:2b:44:15:0f:f1:4a:36:ad:
         ad:6b:0f:dd:2e:67:3c:ac:d0:29:9b:81:3c:97:2e:99:f5:9c:
         d0:9b:9b:b0:52:9b:44:45:d6:74:ff:4f:84:46:a6:5e:03:bb:
         aa:78:16:f3:93:a4:45:d7:d4:41:11:72:b2:00:35:5a:37:9a:
         8e:51:83:01:31:66:fc:98:6b:f8:d7:47:fd:40:71:2b:22:ac:
         4e:50:8e:46:cb:e9:b7:8f:bf:1b:4e:a7:93:3f:ba:d5:af:f5:
         14:13:0c:b7:47:87:63:d5:e6:3e:7f:56:92:35:2d:87:41:8d:
         14:1b:2b:f5:be:8e:bb:10:ba:ba:da:10:cd:f5:c0:5e:c2:0d:
         4a:51:13:13:8b:f3:9b:19:f7:fd:c1:43:3b:6e:b1:c4:2d:b3:
         80:01:ce:4b:a7:75:b7:de:1a:ad:e2:bf:10:f3:03:d3:78:46:
         f4:bf:d7:92:ea:dc:1f:e6:f9:ef:3c:9a:20:00:96:79:6e:4b:
         d2:40:bb:47:c1:06:19:af:21:fa:2f:ab:c6:0d:88:c2:fb:15:
         3a:d7:63:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPY9w13eX8upXvwC5rufQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBhM2E2YzRhODU3MjUwMzc1OThiMzkxM2UyMTg2OWRi
ZGQzOGQwHhcNMjUwNDEzMTMwMTI1WhcNMjUwNDE0MTMwMTI1WjAzMTEwLwYDVQQD
EygzNzI2ZDA0ZWIxY2U5NWM1ODI0YjA3ODllOWEyNjkwMGM4MTdjZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+mhB9A6fnd/5PwKqrPZK1L0Y3pN
DM4txeD4PiI/zJStIZGE1AL+uchbGd+R3gdOqol1LaRAypLQV8BSxceF91arelsp
rARjB14AMwPlbO/Ob+XPd4TejD5h0CRPM8T8pvjOfGorn6fF7tuU7u6H72DBtcgU
hdBgQhY1jAyw4QteyBt834DbgxgYwKVroYe27qvlwSd0Nawe/FqF71bILeyR+mLD
jXA24LplNBl8khja0ViZuIJ/iDqldDPpAapqxtzsDilBhHzKDko0NiFAM3d86hOL
FnXCo6d3phK9/jseK0p64brdCxNWy3LdY27IHaoGqi8pF1w/ovT1odSVZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcm0E6xzpXFgksHiemiaQDIF81kMB8GA1UdIwQY
MBaAFEtwo6bEqFclA3WYs5E+IYadvdONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUt
NDgyNWIyOWRkNTcyLzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUtNDgyNWIyOWRkNTcy
LzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSzWSb+G
geURupEnV5d/OydO/UQ2qKyOo8+lhw6eBEEMntghBTmWPOYzXs9oHitEFQ/xSjat
rWsP3S5nPKzQKZuBPJcumfWc0JubsFKbREXWdP9PhEamXgO7qngW85OkRdfUQRFy
sgA1WjeajlGDATFm/Jhr+NdH/UBxKyKsTlCORsvpt4+/G06nkz+61a/1FBMMt0eH
Y9XmPn9WkjUth0GNFBsr9b6OuxC6utoQzfXAXsINSlETE4vzmxn3/cFDO26xxC2z
gAHOS6d1t94areK/EPMD03hG9L/XkurcH+b57zyaIACWeW5L0kC7R8EGGa8h+i+r
xg2IwvsVOtdjoQ==
-----END CERTIFICATE-----