Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File:                     Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier:          YsycquQk+qpb8jD/4MB6DtmEVEKDM/bZfeVf0JvA6W4=
Subject key identifier:   9E:79:AC:7B:97:38:75:4A:EC:C4:3F:FF:3B:E5:DE:D0:D6:54:A4:69
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer:       /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial:       01962E9866990F9C8BAC2FCEDDB27A5ADB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number:          02F8
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: 5zU7Wz1BIvEhEjrb6Y4Q18ML0KWemkbveG4lUq3IWTc=)
                          2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:66:99:0f:9c:8b:ac:2f:ce:dd:b2:7a:5a:db:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=9e79ac7b9738754aecc43fff3be5ded0d654a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:1e:30:2a:ef:00:f4:cd:a5:62:d5:59:50:
                    48:19:33:39:bb:8a:d8:49:66:5c:ac:c8:1b:25:a7:
                    3f:8d:e9:5e:be:0d:ff:2a:ff:ba:c1:8d:c2:d7:e1:
                    cd:48:75:53:7b:32:8a:78:c2:d7:f4:09:17:dd:cd:
                    bd:78:31:a6:9f:d1:06:c3:d0:1b:63:b0:cc:5d:ca:
                    1f:7f:0f:6a:4f:59:e1:8a:f2:39:18:e2:3f:8c:43:
                    2d:b0:06:2c:d9:d4:f6:ed:95:4b:72:46:f1:60:76:
                    f4:74:81:97:64:f3:39:8e:c5:c5:f4:6c:d0:6b:b3:
                    6e:93:a3:8e:6d:45:7e:2a:61:0b:a6:82:e6:3f:d4:
                    cb:73:b2:0a:81:8d:96:51:9e:86:77:df:df:f1:5a:
                    a3:b4:97:25:c4:a9:a6:dc:b4:66:c4:be:d6:55:8e:
                    7f:3e:23:28:a4:2c:4e:e1:13:a8:9c:0d:fc:43:6b:
                    a0:9c:e0:60:9d:c9:46:f2:03:82:cf:8a:af:87:41:
                    7a:ea:d4:e6:91:b1:d8:28:54:d2:45:81:ab:b9:0c:
                    b2:d1:1a:d3:2a:19:fd:2c:9c:9a:32:66:5e:89:d5:
                    03:1d:4d:4d:8c:9f:d9:53:4b:78:1f:e5:60:83:5a:
                    c7:48:da:62:1b:ad:78:b9:5d:61:91:13:d8:fe:2d:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:79:AC:7B:97:38:75:4A:EC:C4:3F:FF:3B:E5:DE:D0:D6:54:A4:69
            X509v3 Authority Key Identifier:
                keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:03:32:31:0d:13:ae:49:a3:7e:9a:35:89:22:56:bf:ee:84:
         7e:87:de:56:09:c6:d1:b3:26:07:d4:fb:ec:20:d0:79:1d:34:
         e7:a8:52:99:2b:bb:6d:50:27:47:fb:c3:60:91:98:e2:4d:50:
         bd:a1:86:07:a4:02:85:79:90:4a:de:6d:2a:eb:6f:d5:2c:e4:
         5e:67:b8:48:4e:85:76:12:96:55:15:d2:e3:9d:15:14:ef:24:
         67:da:fa:80:05:1b:0a:25:e2:02:58:9a:64:68:11:32:70:04:
         6f:0f:63:a7:56:eb:19:17:1c:01:ba:ab:33:3b:6f:da:cb:aa:
         b3:2f:95:45:f9:0c:ce:0a:f5:b9:d4:39:0a:d3:55:d9:25:21:
         d9:70:27:73:73:14:7c:97:aa:62:c3:89:14:ae:9c:52:7b:1e:
         32:ed:da:0f:98:90:1f:33:15:e0:7d:2e:81:0b:7f:52:1a:70:
         de:5a:1e:1e:01:6e:8b:c3:f1:67:b3:48:75:a0:59:0f:ca:cb:
         eb:da:67:71:82:7d:79:c7:4e:33:11:b7:8f:83:61:9d:76:5c:
         34:05:4c:4a:43:dc:db:1f:e4:4c:4a:fd:d0:9b:15:41:d7:ee:
         ee:73:29:6b:fc:c3:9c:94:db:be:23:2f:37:50:06:48:bd:5c:
         e5:9b:ce:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumGaZD5yLrC/O3bJ6WtuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw
ZjgwZTkwHhcNMjUwNDEzMTAwMTAxWhcNMjUwNDE0MTAwMTAxWjAzMTEwLwYDVQQD
Eyg5ZTc5YWM3Yjk3Mzg3NTRhZWNjNDNmZmYzYmU1ZGVkMGQ2NTRhNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuceMCrvAPTNpWLVWVBIGTM5u4rY
SWZcrMgbJac/jelevg3/Kv+6wY3C1+HNSHVTezKKeMLX9AkX3c29eDGmn9EGw9Ab
Y7DMXcoffw9qT1nhivI5GOI/jEMtsAYs2dT27ZVLckbxYHb0dIGXZPM5jsXF9GzQ
a7Nuk6OObUV+KmELpoLmP9TLc7IKgY2WUZ6Gd9/f8VqjtJclxKmm3LRmxL7WVY5/
PiMopCxO4ROonA38Q2ugnOBgnclG8gOCz4qvh0F66tTmkbHYKFTSRYGruQyy0RrT
Khn9LJyaMmZeidUDHU1NjJ/ZU0t4H+Vgg1rHSNpiG614uV1hkRPY/i2VHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ55rHuXOHVK7MQ//zvl3tDWVKRpMB8GA1UdIwQY
MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt
YWY1MGZiNWNjNzdhLzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh
LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgMyMQ0T
rkmjfpo1iSJWv+6EfofeVgnG0bMmB9T77CDQeR0056hSmSu7bVAnR/vDYJGY4k1Q
vaGGB6QChXmQSt5tKutv1SzkXme4SE6FdhKWVRXS450VFO8kZ9r6gAUbCiXiAlia
ZGgRMnAEbw9jp1brGRccAbqrMztv2suqsy+VRfkMzgr1udQ5CtNV2SUh2XAnc3MU
fJeqYsOJFK6cUnseMu3aD5iQHzMV4H0ugQt/Uhpw3loeHgFui8PxZ7NIdaBZD8rL
69pncYJ9ecdOMxG3j4NhnXZcNAVMSkPc2x/kTEr90JsVQdfu7nMpa/zDnJTbviMv
N1AGSL1c5ZvOPQ==
-----END CERTIFICATE-----