Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          XTlF44dSTlzoztS8S/cLqCOvVI/j+5QgVxupKsiE22U=
Subject key identifier:   DD:6A:2E:92:AC:4C:47:DC:D8:45:CB:F8:A8:28:32:B1:AE:F9:09:49
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       01962FAB8333D54AEF72C6A0A37F011F2E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 1xdn8NiVRswlc4uk1WDeK_RiIBI.roa (hash: q1iCF9iJIPjwrPQXtH4xaMoQe7AL1oF2LyzhxGkgni4=)
                          2: Am8JOUS_pv4aGyonpJm3aY43kFA.roa (hash: hel/WsPbSFwbb5JTEfjY35Y4+JW18MVGcJtVTdlc80w=)
                          3: C3FHaTVyQ086WMPBag3rQPfajw8.roa (hash: f/oNhKigKco9tBiGw31uoIotXboAy39S9i+k1rCBUzQ=)
                          4: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: 5FX9pdEbykE97q20eFIfWpvkPjrJXzU9Z2xUvCY+aIg=)
                          5: Nh1ckidMNKlHTaQDjmBWaD_RTqU.roa (hash: HGI9KzkrMn/Mgs6qOK3BC5AOQs+VrhmYJ0sTwXf2f0M=)
                          6: W4wf-OAMEK-73Ed6RT7ypN5sr-k.roa (hash: IJZ4wsFpXNgYN94omFfW/OOG2yIoCFkgqtOfLsCQRvA=)
                          7: Wq5DUxTVl0Dm7wyA_VIMLG14k7s.roa (hash: vEG0EhUJl23XyGjHlaal+XqlIJfe5erG7/zNb/KcbuI=)
                          8: Z0sinVsrjztZdWZXyq0HAMquROw.roa (hash: 5+GjpnCGBWsr7RuL/tVtX2VueODcLobULhwbhL426U8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:83:33:d5:4a:ef:72:c6:a0:a3:7f:01:1f:2e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=dd6a2e92ac4c47dcd845cbf8a82832b1aef90949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:4e:a8:c6:ad:6d:6c:77:85:1e:c0:cb:d6:
                    55:2c:d5:0a:19:e9:f9:d5:16:51:c2:35:9c:af:95:
                    7f:fa:e9:16:34:2f:97:d3:01:bc:2b:24:b3:ea:9a:
                    81:0e:6d:3e:d7:68:29:50:cb:f7:c7:30:ee:3f:00:
                    c2:02:21:47:b3:0b:84:92:fb:74:f9:92:27:4c:6f:
                    7d:48:ca:1a:91:5a:7d:f7:80:90:ab:b8:00:20:75:
                    bc:f0:32:df:75:57:b7:c0:2d:b5:07:5b:99:7a:3c:
                    f7:f2:87:6d:97:b2:b9:91:89:0d:90:4a:e6:d1:77:
                    83:a5:a6:60:88:94:f4:1b:39:25:f3:5f:70:b8:1c:
                    84:6d:5f:f3:25:12:de:0e:d8:d2:1e:0b:9f:a5:6d:
                    b6:24:43:ad:b8:ee:84:93:89:1c:cc:ee:fd:b2:90:
                    7c:b4:db:3c:4c:62:d6:a3:31:47:c2:51:89:c6:50:
                    2b:d3:1e:0b:5f:88:41:99:29:3b:fe:d4:aa:28:79:
                    d0:36:7e:bf:9c:c2:00:97:c1:5c:66:06:09:10:1f:
                    e0:53:15:d8:11:bd:30:95:f1:05:10:66:92:dc:24:
                    dc:1c:39:35:78:86:42:bd:7b:63:0c:29:cf:83:c3:
                    f0:f7:54:67:d0:78:15:b7:b6:4d:89:a7:18:26:b9:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6A:2E:92:AC:4C:47:DC:D8:45:CB:F8:A8:28:32:B1:AE:F9:09:49
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:12:c7:a0:98:18:1d:58:c1:e4:f1:92:dd:f4:a4:e9:56:
         c1:87:f4:46:d9:c2:e8:a3:4f:76:64:ff:43:ff:51:98:2e:16:
         90:9d:ff:e4:22:e9:6d:03:2e:b3:d1:db:57:15:de:96:b8:51:
         3b:2d:87:f0:b6:4f:d4:54:35:5d:95:46:9b:51:43:a4:b3:87:
         93:e3:78:dc:80:bb:fc:01:9e:93:51:7b:e0:cc:b0:ba:30:45:
         cd:a9:e4:27:67:54:04:e6:be:63:77:d4:b7:e1:fe:ec:85:25:
         8d:5e:93:dc:a8:43:59:87:53:06:c9:bf:1f:2c:b3:73:8c:1d:
         24:bb:f8:52:ed:42:3f:04:31:e9:65:2a:78:15:04:f2:6b:aa:
         c6:c0:cb:4b:a4:9c:82:9f:b5:1e:95:f2:5a:0f:45:ab:7f:58:
         66:f2:a5:00:29:be:c2:d1:80:bc:8c:27:6e:10:29:c4:06:e1:
         cf:95:ff:b0:83:fe:a1:f7:ad:c3:c7:c1:9f:5f:88:1b:5f:1d:
         b4:82:4b:d5:d7:5a:c6:3e:12:16:6b:d3:d2:84:90:9e:32:47:
         d8:66:99:82:1d:10:c6:2a:5c:d7:59:8b:5e:d3:cb:89:41:4a:
         4c:07:a8:30:93:47:67:23:58:d6:45:6d:8f:73:e5:d8:0d:e0:
         fe:c5:c4:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq4Mz1Urvcsago38BHy4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz
NjViNjAwHhcNMjUwNDEzMTUwMTMxWhcNMjUwNDE0MTUwMTMxWjAzMTEwLwYDVQQD
EyhkZDZhMmU5MmFjNGM0N2RjZDg0NWNiZjhhODI4MzJiMWFlZjkwOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogVOqMatbWx3hR7Ay9ZVLNUKGen5
1RZRwjWcr5V/+ukWNC+X0wG8KySz6pqBDm0+12gpUMv3xzDuPwDCAiFHswuEkvt0
+ZInTG99SMoakVp994CQq7gAIHW88DLfdVe3wC21B1uZejz38odtl7K5kYkNkErm
0XeDpaZgiJT0Gzkl819wuByEbV/zJRLeDtjSHgufpW22JEOtuO6Ek4kczO79spB8
tNs8TGLWozFHwlGJxlAr0x4LX4hBmSk7/tSqKHnQNn6/nMIAl8FcZgYJEB/gUxXY
Eb0wlfEFEGaS3CTcHDk1eIZCvXtjDCnPg8Pw91Rn0HgVt7ZNiacYJrmldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1qLpKsTEfc2EXL+KgoMrGu+QlJMB8GA1UdIwQY
MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo0Sx6CY
GB1YweTxkt30pOlWwYf0RtnC6KNPdmT/Q/9RmC4WkJ3/5CLpbQMus9HbVxXelrhR
Oy2H8LZP1FQ1XZVGm1FDpLOHk+N43IC7/AGek1F74MywujBFzankJ2dUBOa+Y3fU
t+H+7IUljV6T3KhDWYdTBsm/Hyyzc4wdJLv4Uu1CPwQx6WUqeBUE8muqxsDLS6Sc
gp+1HpXyWg9Fq39YZvKlACm+wtGAvIwnbhApxAbhz5X/sIP+ofetw8fBn1+IG18d
tIJL1ddaxj4SFmvT0oSQnjJH2GaZgh0Qxipc11mLXtPLiUFKTAeoMJNHZyNY1kVt
j3Pl2A3g/sXEVw==
-----END CERTIFICATE-----