Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          Wcr0KziTdlxuXfR8PR6vZEHrJtXFtBxSPMkKcTakqo0=
Subject key identifier:   7D:CB:E7:2C:DB:13:81:68:E5:5B:CA:E4:89:74:F0:80:3F:23:E4:05
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       01962DF42FA9803C26EE692FDA2F8FB0695D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: s2ucnaZj6bUlHfWrRaLkvooDPBTvNS7bYrZc+Y59Lno=)
                          2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2f:a9:80:3c:26:ee:69:2f:da:2f:8f:b0:69:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=7dcbe72cdb138168e55bcae48974f0803f23e405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:57:ee:94:1e:ae:53:dd:7b:d3:79:75:32:
                    0a:ad:ec:96:61:d4:00:00:e5:f6:09:3b:cf:c8:e4:
                    4d:cf:52:7b:fc:2c:a9:05:32:7c:df:77:d9:f0:34:
                    0a:59:12:b1:aa:70:af:32:8a:40:0d:07:8e:89:63:
                    b0:0a:93:75:85:df:fc:5e:ba:e0:b2:21:6c:c7:93:
                    cf:2f:ea:13:0c:fa:ef:79:f1:2d:95:d8:e4:76:6c:
                    b7:33:f1:e0:e4:ca:2d:2b:f9:6d:aa:bd:d7:76:38:
                    8c:57:e5:04:01:92:ef:75:91:32:88:54:69:7e:33:
                    ce:3a:dd:80:76:7d:b9:59:2c:99:9d:d4:9b:19:38:
                    ad:3b:59:a9:a0:f9:c1:22:e5:c7:c9:3a:2d:ea:50:
                    0c:e8:29:27:d9:f9:10:f8:a7:d6:da:14:e8:79:4f:
                    fc:49:c4:c7:65:75:98:98:22:dd:b9:45:46:96:17:
                    df:44:c9:5b:d2:d3:4c:32:99:97:dd:e1:05:fb:f1:
                    c7:cd:c1:4a:be:51:c7:9a:a1:b0:89:a9:6b:bf:43:
                    9b:0a:77:bf:f7:85:ee:45:5c:4a:a8:49:f0:65:cb:
                    c5:9f:04:f8:fb:16:9b:82:16:bb:0e:bd:e0:0e:f5:
                    ac:90:59:0f:64:c8:db:28:e0:b9:46:bb:60:72:53:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CB:E7:2C:DB:13:81:68:E5:5B:CA:E4:89:74:F0:80:3F:23:E4:05
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d8:c9:ff:3e:b1:b5:59:f0:34:10:a0:29:51:e5:9f:30:03:
         fb:07:98:a2:25:f3:c3:d8:9d:72:9c:8c:c4:92:d0:6a:ec:b7:
         bc:c0:65:d3:40:c3:9c:b9:9e:7f:05:cd:57:cc:05:c9:9c:ed:
         f8:43:bd:b7:90:94:53:46:36:85:50:18:57:66:26:23:a5:f8:
         2a:84:34:56:d2:e9:26:fc:fd:c8:80:a4:c8:ee:37:05:3f:ba:
         cb:47:dc:0a:f4:ee:1d:3c:4d:1a:8e:c4:45:66:69:4e:16:52:
         7a:57:eb:5f:76:c5:82:18:f7:22:87:52:7b:d4:c7:81:c9:cd:
         91:d9:27:87:8f:a5:2d:90:c8:71:af:74:68:7b:cf:1d:0d:b9:
         02:db:c3:35:48:54:90:53:82:22:28:3b:98:01:6a:0a:23:55:
         db:34:eb:9d:29:37:0c:09:6c:cf:6f:59:ba:5f:53:7f:ef:4b:
         52:ac:d3:5f:b0:52:78:25:d2:bd:52:a8:c5:5d:b5:2b:22:00:
         c2:6f:87:ec:a4:40:0a:b0:36:96:80:11:12:7c:00:9f:70:af:
         73:52:26:93:c3:91:a7:9a:66:81:8f:4e:18:cd:bc:f8:b0:a1:
         e6:c2:cd:c2:57:88:9a:34:08:16:78:c3:da:b4:e8:78:72:e3:
         f9:2f:53:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9C+pgDwm7mkv2i+PsGldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjUwNDEzMDcwMTM5WhcNMjUwNDE0MDcwMTM5WjAzMTEwLwYDVQQD
Eyg3ZGNiZTcyY2RiMTM4MTY4ZTU1YmNhZTQ4OTc0ZjA4MDNmMjNlNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYpX7pQerlPde9N5dTIKreyWYdQA
AOX2CTvPyORNz1J7/CypBTJ833fZ8DQKWRKxqnCvMopADQeOiWOwCpN1hd/8Xrrg
siFsx5PPL+oTDPrvefEtldjkdmy3M/Hg5MotK/ltqr3XdjiMV+UEAZLvdZEyiFRp
fjPOOt2Adn25WSyZndSbGTitO1mpoPnBIuXHyTot6lAM6Ckn2fkQ+KfW2hToeU/8
ScTHZXWYmCLduUVGlhffRMlb0tNMMpmX3eEF+/HHzcFKvlHHmqGwialrv0ObCne/
94XuRVxKqEnwZcvFnwT4+xabgha7Dr3gDvWskFkPZMjbKOC5RrtgclOL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3L5yzbE4Fo5VvK5Il08IA/I+QFMB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdjJ/z6x
tVnwNBCgKVHlnzAD+weYoiXzw9idcpyMxJLQauy3vMBl00DDnLmefwXNV8wFyZzt
+EO9t5CUU0Y2hVAYV2YmI6X4KoQ0VtLpJvz9yICkyO43BT+6y0fcCvTuHTxNGo7E
RWZpThZSelfrX3bFghj3IodSe9THgcnNkdknh4+lLZDIca90aHvPHQ25AtvDNUhU
kFOCIig7mAFqCiNV2zTrnSk3DAlsz29Zul9Tf+9LUqzTX7BSeCXSvVKoxV21KyIA
wm+H7KRACrA2loAREnwAn3Cvc1Imk8ORp5pmgY9OGM28+LCh5sLNwleImjQIFnjD
2rToeHLj+S9Tyg==
-----END CERTIFICATE-----