Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File:                     S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier:          AWXTJkdBGbuuwzxhQbkLjmeAZu7ub+ngPTc5Kg0BbyU=
Subject key identifier:   49:F9:BD:EE:6A:86:79:0E:BD:CE:4F:DE:DA:76:45:E2:9D:8B:8B:19
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer:       /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial:       01962F7434853BA09DDD09D1C80C71ADAC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number:          03EE
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: iOeQNuJI3nZZTTYcqz4OW5MyZBuFIOkgMsRQwQ+6LhQ=)
                          2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:34:85:3b:a0:9d:dd:09:d1:c8:0c:71:ad:ac:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=49f9bdee6a86790ebdce4fdeda7645e29d8b8b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:f7:1c:d5:a5:c3:9d:20:12:6c:57:6a:15:
                    54:b2:96:f0:d5:28:ae:50:c8:62:dc:a6:2e:3b:7e:
                    d7:a7:dd:32:6c:bc:91:0c:7f:b3:ae:7c:8d:08:43:
                    4c:72:3e:bd:dd:03:4c:e3:8b:29:12:c5:23:c0:68:
                    fc:52:d3:2b:e6:39:9f:86:8a:03:30:1b:e0:a0:50:
                    f1:36:fa:06:e4:d7:16:2f:9f:5f:2b:e7:f3:18:cd:
                    1d:6f:22:2f:ee:59:9c:37:81:ae:3e:a3:f6:ef:7b:
                    5b:bc:e0:99:d2:a1:1c:79:c3:f1:a3:93:fa:b0:73:
                    57:7a:c0:95:3b:39:51:2f:a8:80:69:59:2b:9e:1e:
                    7c:4f:9c:8d:9b:23:f0:8b:9f:f5:a3:f7:29:63:53:
                    d8:12:be:ff:46:c4:12:08:7c:ae:6e:13:05:1e:89:
                    71:9d:06:41:c8:8f:79:43:79:9c:c2:2b:8f:cb:d3:
                    27:d6:6f:1d:3e:55:a1:ec:ec:1a:14:1b:5a:87:1b:
                    50:51:be:9d:4b:1f:60:43:b5:92:a7:08:fb:e3:95:
                    c6:f0:57:00:17:12:c8:d7:d6:fa:b7:2a:1b:64:82:
                    12:02:41:fa:4b:88:58:2e:dd:78:8d:c2:08:be:e7:
                    a2:43:20:5e:64:e4:4d:ca:5d:06:55:fb:85:52:f6:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F9:BD:EE:6A:86:79:0E:BD:CE:4F:DE:DA:76:45:E2:9D:8B:8B:19
            X509v3 Authority Key Identifier:
                keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:99:ac:94:e6:54:4e:46:0f:8a:50:78:27:7d:fd:7a:52:16:
         63:da:15:f7:b2:54:a1:1a:0b:6d:1c:0e:00:e1:08:95:ae:0f:
         94:69:4a:dd:24:65:01:e5:55:12:d7:c8:cd:6c:a8:f2:90:d6:
         98:51:fe:74:9a:e7:87:67:e9:49:cb:9b:af:7b:08:81:5b:01:
         e5:82:46:a8:50:9e:79:ea:6e:6c:bb:c9:4b:f9:1a:2b:c8:40:
         fc:79:59:34:f2:0f:51:00:02:00:ef:0e:b2:93:20:54:fa:bf:
         46:1d:0d:de:e4:02:e2:67:0f:ac:b4:51:18:25:0f:b6:33:ef:
         ef:d9:74:07:79:80:ba:9b:2f:05:92:cf:d9:6c:f7:d9:c9:de:
         15:24:58:aa:06:76:7a:b2:7e:f2:82:f1:ef:46:3d:8d:9b:4b:
         3a:a3:65:b7:b7:0f:7e:83:9b:ca:98:ff:55:c4:36:87:1a:33:
         04:f8:6b:a3:f6:54:31:6e:b4:69:89:fa:7a:d9:e9:68:0f:c7:
         6c:26:18:05:f7:7b:54:98:76:b9:e3:1e:1c:ad:59:e6:4e:74:
         40:53:df:c3:57:01:fe:e7:ca:03:bd:38:48:a4:ef:fa:76:a7:
         54:ea:7c:0f:53:b9:15:b6:e9:a5:3f:20:62:ea:70:50:12:e3:
         a8:1b:5b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDSFO6Cd3QnRyAxxraxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTVjNDA0MjY2ZGViMTZkOWM3OGFhOTJlODAyZDgzZmJh
MjZjNzEwHhcNMjUwNDEzMTQwMTA2WhcNMjUwNDE0MTQwMTA2WjAzMTEwLwYDVQQD
Eyg0OWY5YmRlZTZhODY3OTBlYmRjZTRmZGVkYTc2NDVlMjlkOGI4YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O33HNWlw50gEmxXahVUspbw1Siu
UMhi3KYuO37Xp90ybLyRDH+zrnyNCENMcj693QNM44spEsUjwGj8UtMr5jmfhooD
MBvgoFDxNvoG5NcWL59fK+fzGM0dbyIv7lmcN4GuPqP273tbvOCZ0qEcecPxo5P6
sHNXesCVOzlRL6iAaVkrnh58T5yNmyPwi5/1o/cpY1PYEr7/RsQSCHyubhMFHolx
nQZByI95Q3mcwiuPy9Mn1m8dPlWh7OwaFBtahxtQUb6dSx9gQ7WSpwj745XG8FcA
FxLI19b6tyobZIISAkH6S4hYLt14jcIIvueiQyBeZORNyl0GVfuFUvbK4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn5ve5qhnkOvc5P3tp2ReKdi4sZMB8GA1UdIwQY
MBaAFEulxAQmbesW2ceKqS6ALYP7omxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTIt
YjBiMDZlYjM0NGZiLzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTItYjBiMDZlYjM0NGZi
LzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZmslOZU
TkYPilB4J339elIWY9oV97JUoRoLbRwOAOEIla4PlGlK3SRlAeVVEtfIzWyo8pDW
mFH+dJrnh2fpScubr3sIgVsB5YJGqFCeeepubLvJS/kaK8hA/HlZNPIPUQACAO8O
spMgVPq/Rh0N3uQC4mcPrLRRGCUPtjPv79l0B3mAupsvBZLP2Wz32cneFSRYqgZ2
erJ+8oLx70Y9jZtLOqNlt7cPfoObypj/VcQ2hxozBPhro/ZUMW60aYn6etnpaA/H
bCYYBfd7VJh2ueMeHK1Z5k50QFPfw1cB/ufKA704SKTv+nanVOp8D1O5FbbppT8g
YupwUBLjqBtbaA==
-----END CERTIFICATE-----