Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
File:                     6E31KvRgym-oySOkn1y3lepnB_c.mft (raw, json)
Hash identifier:          vNT8utIS1T0Bf6cDgrVKf7goURqOnlWSiVrrg6/qcFU=
Subject key identifier:   50:32:99:7E:C2:67:DA:BB:AD:4B:73:98:16:83:CC:B7:29:15:36:85
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       01962E61D739740B74D57C99A3B94A48DB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
Manifest number:          077C
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 6E31KvRgym-oySOkn1y3lepnB_c.crl (hash: gCn6uN6Qk5v3K9gWEYa53RAVsVMHhKvATCAEFQ5cbYc=)
                          2: KG0ELDyPHSkIQS-mg9gLAsQapjw.roa (hash: e+EZSd1IAWr6lFOaOhHRn/7FSXywEXsdZ12xJvEd9no=)
                          3: PTDbUIn0Q0I_C1Yhkz7niBznTUM.roa (hash: J/Q3tBA3oVWuhGFSQ0i5K54Rr9Z/lu/1FwwreS+xCLI=)
                          4: k7DdVIae-AxCWUb7EmYJ2hRh4t4.roa (hash: wSVp7Kcd0rbRV/gx0zQiYnmpIL4IcpIzOBoIloYGTHE=)
                          5: lRJP557P-ah_9W8ZheSmqCwj9zE.roa (hash: gieMZm91HbwHzADRLU0Wb4pj7bnfrsU9RpRwfF79zX4=)
                          6: uX23_mzV3I9ZD7Q7zQwf1E3ofQo.roa (hash: FeYP7aaDi48jmb8v+wyHZazNXEJBqq9Kz30r2ZHOodg=)
                          7: ubvYMN6BtFRNr0vp49aJy_r3Xko.roa (hash: jeDx38EQ0bixAkTdHz4reHrT4rtAAO/OkJFTEQkFuyQ=)
                          8: z7XpKInxMUGGJ1-tIa9aZMIU0NM.roa (hash: eE8LFeccl/2KqXQm9lZ97GRHlNXsQ2CX2nj/+cj0tfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:39:74:0b:74:d5:7c:99:a3:b9:4a:48:db:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=5032997ec267dabbad4b73981683ccb729153685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:00:f3:fd:00:23:99:e9:02:a6:32:89:1d:
                    d0:97:6f:57:3e:91:c4:95:ef:45:c3:eb:ff:30:bc:
                    52:78:ee:5d:5d:a5:ed:73:24:6a:f8:aa:3b:13:c4:
                    85:a2:03:2d:06:43:c4:83:c5:86:24:d9:da:65:a3:
                    23:16:6e:11:ad:88:bf:02:e4:75:85:12:a7:6e:42:
                    0f:4d:43:88:bb:08:cf:aa:59:b4:8c:4b:e7:87:36:
                    c3:d7:04:32:8f:73:77:fb:f9:72:2a:29:cf:e8:87:
                    79:59:b6:18:4f:99:5a:c3:55:dd:d9:20:23:c8:05:
                    6b:71:3b:b7:20:ce:4c:c4:99:f2:5a:2e:cc:ce:84:
                    ef:52:66:1a:50:b2:0a:45:86:b8:b8:d1:1c:43:5f:
                    91:10:7e:41:fa:9b:97:61:3a:7a:46:d4:69:3a:8b:
                    83:f1:13:0f:de:26:fa:f2:41:a4:69:6b:22:44:e7:
                    fe:80:c9:77:52:d1:59:93:1e:fa:b8:a5:63:b8:c4:
                    51:36:f3:d1:6c:67:62:57:ba:bd:06:3f:43:59:1a:
                    a4:47:2d:50:d4:27:88:34:17:b4:1a:ec:ef:7f:1a:
                    6f:0d:5a:c6:2f:64:3f:a7:59:a1:b5:33:7e:2a:1d:
                    b0:06:e9:4b:89:e0:f4:17:fe:6d:3f:2a:18:3b:27:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:32:99:7E:C2:67:DA:BB:AD:4B:73:98:16:83:CC:B7:29:15:36:85
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f3:96:53:27:d1:d5:fa:fe:99:c1:50:23:b4:ff:7f:e2:67:
         64:5e:13:f0:0e:ec:93:50:51:77:14:2a:01:42:52:8a:bc:73:
         65:c4:15:47:49:4d:fa:a7:25:72:9b:cb:b3:04:77:ea:38:dd:
         b1:ca:17:62:8c:3a:ee:48:10:0f:32:ac:79:cc:eb:01:c2:ad:
         3f:af:41:12:74:bd:28:2f:64:85:3c:ca:ab:fc:64:1a:ec:66:
         79:15:81:74:ba:ca:b2:eb:f2:cd:56:ba:e0:2e:d9:a6:26:96:
         8d:6d:68:46:f9:d8:b9:e2:ed:8e:5c:78:44:17:32:9b:46:ff:
         5b:94:30:24:da:f3:69:f5:48:c7:ee:1f:be:7f:6d:0f:d6:43:
         5e:f6:51:3d:45:81:e6:00:77:6c:20:48:d4:c9:ed:6c:d7:e9:
         21:6b:64:df:94:2a:fc:ea:41:40:b2:5c:a0:87:da:58:21:1b:
         d0:5e:91:16:66:8a:68:19:d2:12:a7:27:f6:24:9f:66:0f:ac:
         6d:92:b6:f6:a9:0b:38:74:4f:68:a1:ca:fc:58:c5:65:17:14:
         6a:7b:a8:bb:12:94:16:76:8f:ce:b1:2c:78:c4:f4:9c:6a:c4:
         2a:f9:0e:56:c0:07:1b:86:30:e4:50:fc:67:87:a6:b6:ea:ca:
         a5:95:30:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdc5dAt01XyZo7lKSNsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjUwNDEzMDkwMTI2WhcNMjUwNDE0MDkwMTI2WjAzMTEwLwYDVQQD
Eyg1MDMyOTk3ZWMyNjdkYWJiYWQ0YjczOTgxNjgzY2NiNzI5MTUzNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOQA8/0AI5npAqYyiR3Ql29XPpHE
le9Fw+v/MLxSeO5dXaXtcyRq+Ko7E8SFogMtBkPEg8WGJNnaZaMjFm4RrYi/AuR1
hRKnbkIPTUOIuwjPqlm0jEvnhzbD1wQyj3N3+/lyKinP6Id5WbYYT5law1Xd2SAj
yAVrcTu3IM5MxJnyWi7MzoTvUmYaULIKRYa4uNEcQ1+REH5B+puXYTp6RtRpOouD
8RMP3ib68kGkaWsiROf+gMl3UtFZkx76uKVjuMRRNvPRbGdiV7q9Bj9DWRqkRy1Q
1CeINBe0GuzvfxpvDVrGL2Q/p1mhtTN+Kh2wBulLieD0F/5tPyoYOyfOeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAymX7CZ9q7rUtzmBaDzLcpFTaFMB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/OWUyfR
1fr+mcFQI7T/f+JnZF4T8A7sk1BRdxQqAUJSirxzZcQVR0lN+qclcpvLswR36jjd
scoXYow67kgQDzKseczrAcKtP69BEnS9KC9khTzKq/xkGuxmeRWBdLrKsuvyzVa6
4C7ZpiaWjW1oRvnYueLtjlx4RBcym0b/W5QwJNrzafVIx+4fvn9tD9ZDXvZRPUWB
5gB3bCBI1MntbNfpIWtk35Qq/OpBQLJcoIfaWCEb0F6RFmaKaBnSEqcn9iSfZg+s
bZK29qkLOHRPaKHK/FjFZRcUanuouxKUFnaPzrEseMT0nGrEKvkOVsAHG4Yw5FD8
Z4emturKpZUwiA==
-----END CERTIFICATE-----