Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File:                     1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier:          4q5ziprSe6DarVs3WDV7XMJxwBuT6r2979WYxG8ERH0=
Subject key identifier:   DD:66:E6:B4:A4:B4:20:DB:E0:67:32:38:B9:A6:E6:97:80:02:DB:8C
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer:       /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial:       01962DF4070354B3BA0AF43F443C0C327C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: nImz+i0iZgDoW5AqB7ESXyv/9i/Uu9Djw/zS0vscZdo=)
                          2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:07:03:54:b3:ba:0a:f4:3f:44:3c:0c:32:7c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=dd66e6b4a4b420dbe0673238b9a6e6978002db8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:7e:a4:6f:a8:98:80:b0:35:4f:92:58:68:
                    bc:26:c4:fc:4b:f2:5a:06:79:ca:15:83:4f:a5:ef:
                    87:b1:6b:8c:04:58:20:59:25:c5:cf:31:f4:db:07:
                    20:48:d1:8c:b7:d9:bc:d2:3f:04:f4:0c:e8:38:01:
                    fa:e8:eb:72:0d:7d:43:5b:50:60:74:cd:cf:10:e4:
                    83:0b:b5:f1:c9:c5:39:c1:e0:2b:de:c1:56:ae:fd:
                    e0:42:90:69:aa:1e:32:73:ec:5b:46:b9:e5:e4:15:
                    e0:95:b6:5b:46:7d:f8:2e:0e:83:ec:75:c5:ec:85:
                    bc:64:95:4d:04:4e:08:b7:ff:64:fc:e7:ec:5a:bf:
                    23:6d:9b:7b:d0:1f:99:ae:39:fc:6f:14:e6:12:18:
                    4e:b6:48:e7:b5:ec:b6:a0:bc:83:83:30:6f:e9:f7:
                    3e:f8:bf:ac:34:77:ca:92:bf:91:0a:25:f4:84:ad:
                    e0:1b:9a:40:24:c0:98:8e:91:56:b0:21:92:b4:07:
                    5a:e5:e4:de:4d:83:81:ca:99:60:3b:da:0e:52:b6:
                    39:0d:0b:2c:8d:58:b0:ae:55:2a:cc:7c:b6:ed:2c:
                    15:1b:7b:b7:f0:a8:8d:87:b7:27:9d:09:2c:b6:f6:
                    6a:52:0d:9f:77:97:4f:c3:de:95:66:dc:0a:c8:4e:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:66:E6:B4:A4:B4:20:DB:E0:67:32:38:B9:A6:E6:97:80:02:DB:8C
            X509v3 Authority Key Identifier:
                keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6b:97:6c:f1:df:09:5b:ae:42:ab:34:d4:e8:6b:2c:9f:95:
         4f:a0:41:15:e8:2c:16:0e:47:fc:15:ab:4a:7d:96:ba:e2:83:
         d8:74:b0:85:03:82:5e:61:e1:b4:a2:a2:55:db:b5:c0:63:67:
         48:16:08:73:bc:31:01:12:9e:84:2f:1e:85:2c:1c:ab:0f:0d:
         2d:1a:bd:61:0c:1e:08:a8:8f:b2:55:23:0e:ad:85:40:3f:f0:
         a4:a7:c2:fa:1f:67:1b:ea:3d:d0:0c:38:be:fc:db:7b:f8:96:
         09:d3:61:dd:6f:f4:50:7a:aa:6c:59:26:02:6c:6b:45:ff:6e:
         d9:d6:14:2c:f7:d5:b3:55:88:52:f3:98:86:d8:93:d7:78:21:
         fd:a3:3d:c0:94:d8:6b:dc:f8:99:a6:50:a4:97:23:d7:c5:22:
         70:05:f4:c4:7e:24:a7:c7:d1:76:59:3c:ec:12:dd:27:31:c8:
         70:ee:1c:81:7b:9d:be:39:b1:a4:e7:45:88:a3:c6:c6:cc:95:
         5b:3e:61:18:5f:8f:0e:3b:f9:fa:37:ab:44:a5:f1:71:98:66:
         28:63:41:ce:42:6a:8c:f1:a0:8d:d2:a3:0f:3b:1c:04:aa:4e:
         75:08:38:39:80:da:fd:ac:c9:44:d9:7c:9f:59:6a:1b:58:fd:
         28:d7:91:be
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYt9AcDVLO6CvQ/RDwMMnwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk
YjU5OGMwHhcNMjUwNDEzMDcwMTI5WhcNMjUwNDE0MDcwMTI5WjAzMTEwLwYDVQQD
EyhkZDY2ZTZiNGE0YjQyMGRiZTA2NzMyMzhiOWE2ZTY5NzgwMDJkYjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMZ+pG+omICwNU+SWGi8JsT8S/Ja
BnnKFYNPpe+HsWuMBFggWSXFzzH02wcgSNGMt9m80j8E9AzoOAH66OtyDX1DW1Bg
dM3PEOSDC7XxycU5weAr3sFWrv3gQpBpqh4yc+xbRrnl5BXglbZbRn34Lg6D7HXF
7IW8ZJVNBE4It/9k/OfsWr8jbZt70B+Zrjn8bxTmEhhOtkjntey2oLyDgzBv6fc+
+L+sNHfKkr+RCiX0hK3gG5pAJMCYjpFWsCGStAda5eTeTYOByplgO9oOUrY5DQss
jViwrlUqzHy27SwVG3u38KiNh7cnnQkstvZqUg2fd5dPw96VZtwKyE7okQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN1m5rSktCDb4GcyOLmm5peAAtuMMB8GA1UdIwQY
MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi
LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl
ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2uX
bPHfCVuuQqs01OhrLJ+VT6BBFegsFg5H/BWrSn2WuuKD2HSwhQOCXmHhtKKiVdu1
wGNnSBYIc7wxARKehC8ehSwcqw8NLRq9YQweCKiPslUjDq2FQD/wpKfC+h9nG+o9
0Aw4vvzbe/iWCdNh3W/0UHqqbFkmAmxrRf9u2dYULPfVs1WIUvOYhtiT13gh/aM9
wJTYa9z4maZQpJcj18UicAX0xH4kp8fRdlk87BLdJzHIcO4cgXudvjmxpOdFiKPG
xsyVWz5hGF+PDjv5+jerRKXxcZhmKGNBzkJqjPGgjdKjDzscBKpOdQg4OYDa/azJ
RNl8n1lqG1j9KNeRvg==
-----END CERTIFICATE-----