Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File:                     tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier:          bqoW8aJmid7AR8bburJAzwm4Y4qJh5k6B+fpqQUV7rM=
Subject key identifier:   34:3E:9D:88:C7:D6:85:26:14:29:E7:E7:44:01:7B:1B:A1:42:04:EA
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer:       /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial:       01962E98794EF71D1C29BBA452644C1DB88F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number:          05BA
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
                          2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: jwsWvpEMCQMXIvMKwX4YOFvabGHefARgmC7j0u4nx00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:4e:f7:1d:1c:29:bb:a4:52:64:4c:1d:b8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=343e9d88c7d685261429e7e744017b1ba14204ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:e9:3d:a6:d9:55:91:ef:a8:ae:be:98:ca:
                    c3:23:be:60:17:01:06:d0:6d:b6:f0:d9:23:56:ea:
                    86:74:7b:e1:8e:84:d3:91:0b:65:3d:76:5c:80:31:
                    e9:7b:74:91:66:ee:f3:7d:79:84:ea:1f:65:f8:1d:
                    45:98:b1:61:01:01:e6:9b:6a:1c:5c:36:0b:25:9f:
                    31:b1:43:45:23:01:c0:55:68:ee:18:3f:62:79:0b:
                    79:4d:1e:7b:d7:7a:98:6a:8d:64:0b:0b:35:9c:a5:
                    e5:af:c2:cf:b1:34:81:b9:e5:0c:b2:b3:3c:9c:91:
                    02:48:df:53:c4:7d:87:55:c3:c8:5e:0a:fb:ca:05:
                    1f:84:86:d8:83:49:f5:a9:d4:f4:6f:67:9b:9c:4d:
                    9a:fa:34:47:42:5f:c8:06:2c:9a:79:78:e5:5b:6d:
                    9e:1b:cf:3f:a0:c4:6f:a3:85:31:37:1e:ca:0b:59:
                    40:32:34:d5:fd:69:01:52:da:36:84:64:ca:2c:45:
                    e0:bc:66:ea:02:20:72:d4:1d:4e:7c:3e:be:54:06:
                    e0:91:75:28:29:77:07:0d:89:ee:13:6b:ec:ea:8e:
                    b8:a0:ea:51:91:75:81:f8:60:fc:da:a2:30:01:af:
                    ac:48:fd:f1:1e:16:0f:69:01:87:44:ef:80:b6:a5:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3E:9D:88:C7:D6:85:26:14:29:E7:E7:44:01:7B:1B:A1:42:04:EA
            X509v3 Authority Key Identifier:
                keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:00:6a:79:c4:7c:7a:b2:63:02:e4:f5:d3:5a:98:b8:d0:63:
         72:c9:d4:58:db:0c:7c:f8:d9:e2:49:b6:28:5d:1a:50:a8:43:
         fe:b2:68:f5:59:5a:df:e5:11:23:03:6a:7b:bc:6b:29:b3:25:
         4e:66:0b:d2:1e:f9:7d:07:f0:88:b8:35:bb:f8:f7:70:8b:12:
         12:b9:e5:f7:38:13:4c:c0:af:4a:62:8b:1a:fd:54:a0:77:20:
         d8:82:b9:b4:79:05:97:b1:68:08:c3:57:10:61:44:09:27:25:
         8f:59:4c:4e:b8:19:4c:18:89:54:7a:8d:55:c0:f4:74:69:0b:
         87:16:0f:8f:90:2a:0e:e8:e6:3e:22:14:68:78:5f:f1:49:d0:
         14:6d:74:4f:05:b2:54:4d:d4:74:c7:6f:ec:3d:fa:2a:57:09:
         fe:96:e4:cf:f6:0a:47:b2:dd:e3:88:fb:e5:ab:2e:b4:e5:e6:
         7c:5d:24:fe:32:cd:50:cc:be:a1:6c:fb:29:a4:4e:2f:d6:00:
         1f:06:46:87:c0:5f:2a:17:db:4b:5b:66:e9:0b:75:ba:e9:7c:
         c9:27:16:85:4e:29:fa:7f:d1:6b:99:3f:53:61:ac:9e:ac:60:
         69:3d:52:70:b6:25:33:3c:0f:52:18:6e:d5:16:21:b6:ad:d1:
         9c:19:da:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHlO9x0cKbukUmRMHbiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjU3NzFmOTkyZmQ3NGRmYjA3MzZlNjk1YWViNTljNmFm
NjdlOTMwHhcNMjUwNDEzMTAwMTA2WhcNMjUwNDE0MTAwMTA2WjAzMTEwLwYDVQQD
EygzNDNlOWQ4OGM3ZDY4NTI2MTQyOWU3ZTc0NDAxN2IxYmExNDIwNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+vpPabZVZHvqK6+mMrDI75gFwEG
0G228NkjVuqGdHvhjoTTkQtlPXZcgDHpe3SRZu7zfXmE6h9l+B1FmLFhAQHmm2oc
XDYLJZ8xsUNFIwHAVWjuGD9ieQt5TR5713qYao1kCws1nKXlr8LPsTSBueUMsrM8
nJECSN9TxH2HVcPIXgr7ygUfhIbYg0n1qdT0b2ebnE2a+jRHQl/IBiyaeXjlW22e
G88/oMRvo4UxNx7KC1lAMjTV/WkBUto2hGTKLEXgvGbqAiBy1B1OfD6+VAbgkXUo
KXcHDYnuE2vs6o64oOpRkXWB+GD82qIwAa+sSP3xHhYPaQGHRO+AtqUNlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ+nYjH1oUmFCnn50QBexuhQgTqMB8GA1UdIwQY
MBaAFLQldx+ZL9dN+wc25pWutZxq9n6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAt
OGE4NTY0YmEzYzhjLzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lOGY5NWQtYWQzOC00YjVjLWIwOTAtOGE4NTY0YmEzYzhj
LzEvdENWM0g1a3YxMDM3QnpibWxhNjFuR3IyZnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQBqecR8
erJjAuT101qYuNBjcsnUWNsMfPjZ4km2KF0aUKhD/rJo9Vla3+URIwNqe7xrKbMl
TmYL0h75fQfwiLg1u/j3cIsSErnl9zgTTMCvSmKLGv1UoHcg2IK5tHkFl7FoCMNX
EGFECSclj1lMTrgZTBiJVHqNVcD0dGkLhxYPj5AqDujmPiIUaHhf8UnQFG10TwWy
VE3UdMdv7D36KlcJ/pbkz/YKR7Ld44j75asutOXmfF0k/jLNUMy+oWz7KaROL9YA
HwZGh8BfKhfbS1tm6Qt1uul8yScWhU4p+n/Ra5k/U2GsnqxgaT1ScLYlMzwPUhhu
1RYhtq3RnBnaHw==
-----END CERTIFICATE-----