Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File:                     Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier:          rhPT5JoS3FeCx/niqSU83o5fDRY267dUJwGTi8etxj8=
Subject key identifier:   ED:8E:41:A8:71:6B:48:DF:0D:A4:AA:07:65:0D:26:03:A5:15:40:1A
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer:       /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial:       01962F0739967022081B45E83240D430C801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: pl8UZQtYoBIjIQQ10WYT4KhQNhEmx9h/UBozHd22/OU=)
                          2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:39:96:70:22:08:1b:45:e8:32:40:d4:30:c8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=ed8e41a8716b48df0da4aa07650d2603a515401a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:e6:21:6d:d1:3b:2a:f9:cb:9e:9f:eb:32:
                    64:34:ac:43:5a:61:04:34:b7:b7:3c:28:59:cc:e3:
                    5c:79:90:b7:3c:dc:89:92:0b:2b:54:d3:fa:34:9d:
                    37:9a:61:06:50:2e:c1:07:6d:06:a2:e5:14:53:c7:
                    2a:4e:32:94:3f:9a:8a:35:f7:36:40:01:ec:1b:a7:
                    97:50:d7:03:5e:ac:b9:62:70:ab:21:f3:46:84:12:
                    60:ea:78:56:de:2c:0d:2c:86:0d:97:ed:0b:ed:85:
                    77:b8:4b:87:59:8a:3f:22:fb:1f:f6:23:ef:e0:02:
                    dc:6f:45:0f:5f:a9:8f:fe:ad:8f:0c:e2:b3:01:f2:
                    08:21:6c:f2:3f:31:95:4d:c3:84:c6:0c:2c:ae:26:
                    20:a4:32:0d:23:19:89:cd:a3:2f:39:96:f1:1b:0a:
                    80:cb:a6:b1:3b:e0:48:4d:6f:4d:4e:49:f0:c4:96:
                    03:5a:c7:62:ed:72:9a:89:79:6f:fb:fa:a8:3e:b4:
                    e0:68:0f:6e:22:f8:78:fa:84:63:58:42:34:e1:bc:
                    63:0a:70:d7:65:14:12:05:3b:59:75:97:26:f8:60:
                    fc:a2:52:d6:5a:d1:e1:1a:b8:4d:46:18:fb:79:5c:
                    02:87:3e:4b:cb:2d:69:80:c3:78:d5:95:37:ef:73:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:41:A8:71:6B:48:DF:0D:A4:AA:07:65:0D:26:03:A5:15:40:1A
            X509v3 Authority Key Identifier:
                keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:e3:1e:73:cb:20:0b:01:2d:f2:2c:b1:3f:3f:98:c2:d8:
         0c:be:e5:10:32:7e:0f:a0:1e:a9:d9:87:5c:e8:1b:e5:1c:8e:
         79:32:d7:83:c2:c2:b5:30:84:ab:ac:e4:d2:b6:10:95:b4:fc:
         78:3f:4e:da:76:9a:01:82:b0:9d:c0:e1:cb:b1:a6:f4:54:18:
         18:b0:a3:5f:01:14:0b:9a:48:58:c4:17:9c:0c:84:ea:43:9e:
         ad:fc:4f:e7:3c:ca:fb:50:80:32:c0:78:1a:97:a2:d6:5f:be:
         cc:42:8d:4f:51:49:23:24:a3:a7:71:41:11:e0:07:bd:cf:5c:
         28:94:23:24:c5:21:e8:26:71:35:75:df:86:75:df:19:45:e0:
         b5:3b:1d:d8:20:44:b8:38:ad:1e:e9:52:0c:a3:8d:e6:a2:30:
         5c:fb:cf:b7:69:7f:47:6e:1b:23:70:e9:3e:18:a0:fd:25:c0:
         73:4d:a6:2e:c5:2b:f9:f1:a4:c6:05:06:ee:d2:13:9c:33:94:
         32:3e:6a:6a:0b:3b:c4:7b:ed:47:0c:72:e3:30:d4:87:bb:0e:
         29:8c:8c:24:48:08:71:f0:22:1c:fa:31:22:65:5e:96:6e:1e:
         d9:77:bf:6f:3d:c4:09:2b:58:55:bb:b9:23:24:9d:98:1e:53:
         08:49:dd:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzmWcCIIG0XoMkDUMMgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWVkOTkxZWU2YmM0YmI0OGE4Yjc1MDExZDA0ODE5MTdl
MGYzZjcwHhcNMjUwNDEzMTIwMjA0WhcNMjUwNDE0MTIwMjA0WjAzMTEwLwYDVQQD
EyhlZDhlNDFhODcxNmI0OGRmMGRhNGFhMDc2NTBkMjYwM2E1MTU0MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OrmIW3ROyr5y56f6zJkNKxDWmEE
NLe3PChZzONceZC3PNyJkgsrVNP6NJ03mmEGUC7BB20GouUUU8cqTjKUP5qKNfc2
QAHsG6eXUNcDXqy5YnCrIfNGhBJg6nhW3iwNLIYNl+0L7YV3uEuHWYo/Ivsf9iPv
4ALcb0UPX6mP/q2PDOKzAfIIIWzyPzGVTcOExgwsriYgpDINIxmJzaMvOZbxGwqA
y6axO+BITW9NTknwxJYDWsdi7XKaiXlv+/qoPrTgaA9uIvh4+oRjWEI04bxjCnDX
ZRQSBTtZdZcm+GD8olLWWtHhGrhNRhj7eVwChz5Lyy1pgMN41ZU373P/GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2OQahxa0jfDaSqB2UNJgOlFUAaMB8GA1UdIwQY
MBaAFF6e2ZHua8S7SKi3UBHQSBkX4PP3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQt
NmNkYmMyMTIyNzQ5LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQtNmNkYmMyMTIyNzQ5
LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1rjHnPL
IAsBLfIssT8/mMLYDL7lEDJ+D6AeqdmHXOgb5RyOeTLXg8LCtTCEq6zk0rYQlbT8
eD9O2naaAYKwncDhy7Gm9FQYGLCjXwEUC5pIWMQXnAyE6kOerfxP5zzK+1CAMsB4
Gpei1l++zEKNT1FJIySjp3FBEeAHvc9cKJQjJMUh6CZxNXXfhnXfGUXgtTsd2CBE
uDitHulSDKON5qIwXPvPt2l/R24bI3DpPhig/SXAc02mLsUr+fGkxgUG7tITnDOU
Mj5qags7xHvtRwxy4zDUh7sOKYyMJEgIcfAiHPoxImVelm4e2Xe/bz3ECStYVbu5
IySdmB5TCEnduA==
-----END CERTIFICATE-----