Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File:                     FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier:          DGuB81P6RVUODR+6BxLt2JiOhwRUVvmI93D2rmOsOpE=
Subject key identifier:   AD:FD:17:3F:90:DD:F2:D2:43:3E:6E:49:F2:00:0E:B5:6F:61:B9:89
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer:       /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial:       01962E99569BD4585B3A0C6AE6ACC5653BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number:          0B9F
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: V41fPI3Aj56cR6HdC5UAko+8L9pTnj0DxBuzZQjkwZc=)
                          2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:56:9b:d4:58:5b:3a:0c:6a:e6:ac:c5:65:3b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=adfd173f90ddf2d2433e6e49f2000eb56f61b989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:b4:e7:c1:3b:8c:7f:c3:32:1f:00:8c:85:
                    63:a8:95:ec:2f:ff:b3:73:e4:de:f4:e5:1e:b3:a0:
                    9a:e5:6c:ed:fa:41:2f:43:5f:ff:a3:dd:b2:55:ae:
                    8c:90:21:fe:b8:94:54:5b:ec:b9:6f:85:f9:f6:b6:
                    34:0a:0f:8e:67:0e:b7:53:ad:d9:9c:c9:2f:35:d1:
                    a0:01:aa:3a:de:b6:35:65:28:b5:64:9c:4e:a6:06:
                    1c:86:4d:44:75:5f:70:87:87:08:76:ce:25:e5:be:
                    8c:f5:d3:00:09:9a:39:77:ef:92:c1:c9:ca:00:bc:
                    54:eb:8c:47:cf:9d:f3:ca:2c:2c:33:cb:a8:81:b2:
                    97:e4:f1:33:09:63:92:36:7c:61:96:c7:42:23:8d:
                    d6:4b:8a:90:6c:6f:49:72:cb:a2:5c:43:aa:ba:f8:
                    84:18:f2:3d:e8:78:f4:fe:0c:92:bb:26:f7:82:95:
                    67:ec:e8:bf:74:e0:fd:d0:da:96:47:5e:dc:c1:ec:
                    dd:d3:6e:fd:f1:bb:4e:8d:08:9f:0e:f5:4f:8c:3b:
                    29:74:d4:64:05:8b:d7:c1:a9:a1:f0:27:25:8e:2b:
                    e6:51:0b:10:60:76:64:4c:4a:78:b8:c0:f7:6b:83:
                    57:cd:65:f4:aa:a3:dc:ef:f3:cd:c6:3e:7a:c1:12:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FD:17:3F:90:DD:F2:D2:43:3E:6E:49:F2:00:0E:B5:6F:61:B9:89
            X509v3 Authority Key Identifier:
                keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7b:a1:29:ec:c0:58:92:c9:bb:c6:58:75:6c:96:58:09:b4:
         f5:f3:21:87:af:53:58:07:43:76:ac:56:01:21:83:37:9c:5f:
         ae:01:1b:4d:cd:a0:a5:d7:d0:a5:a0:92:6a:d0:77:c2:7f:a2:
         b8:5f:fa:04:66:d0:bf:c7:42:0a:cd:4a:31:29:c5:e2:55:9f:
         25:88:6b:e0:4e:95:16:c8:8c:15:e3:7d:2e:4f:2a:4d:8a:0c:
         ed:4d:26:70:90:ae:50:96:36:17:b0:64:14:4e:e5:f2:c7:a6:
         83:16:e6:27:28:86:ee:5a:e0:16:d0:aa:46:e2:f8:66:f3:5a:
         c0:bc:88:30:73:20:30:d3:1e:49:d0:0c:b0:e9:3e:73:3b:a5:
         09:e4:c2:93:f7:fd:c7:dd:01:9a:41:de:a0:ef:78:12:50:60:
         69:f2:e8:77:ce:da:f4:e7:96:d7:40:4b:48:9b:f0:1f:7a:15:
         18:46:ef:c3:04:f2:9e:75:cf:52:8a:c9:93:a2:d3:60:b5:0c:
         a4:87:4a:f2:b1:24:ec:8a:55:fa:f0:de:70:84:9d:6d:a8:49:
         a0:2e:49:45:b1:e6:fc:48:ce:e0:e8:d2:d1:69:9f:6f:da:8c:
         a9:1c:a7:c8:24:00:d5:81:62:f0:6b:1b:f9:6b:86:47:e8:fb:
         56:21:3f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVab1FhbOgxq5qzFZTvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmMxMjExZWUzYWY2NTdmYzk0ZjkyZmEwMzA5ZGU2YzZj
OTQwNmUwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EyhhZGZkMTczZjkwZGRmMmQyNDMzZTZlNDlmMjAwMGViNTZmNjFiOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TC058E7jH/DMh8AjIVjqJXsL/+z
c+Te9OUes6Ca5Wzt+kEvQ1//o92yVa6MkCH+uJRUW+y5b4X59rY0Cg+OZw63U63Z
nMkvNdGgAao63rY1ZSi1ZJxOpgYchk1EdV9wh4cIds4l5b6M9dMACZo5d++SwcnK
ALxU64xHz53zyiwsM8uogbKX5PEzCWOSNnxhlsdCI43WS4qQbG9JcsuiXEOquviE
GPI96Hj0/gySuyb3gpVn7Oi/dOD90NqWR17cwezd02798btOjQifDvVPjDspdNRk
BYvXwamh8CcljivmUQsQYHZkTEp4uMD3a4NXzWX0qqPc7/PNxj56wRJbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK39Fz+Q3fLSQz5uSfIADrVvYbmJMB8GA1UdIwQY
MBaAFBT8EhHuOvZX/JT5L6AwnebGyUBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQt
NTk4OWE0OTAyZDFhLzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQtNTk4OWE0OTAyZDFh
LzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnuhKezA
WJLJu8ZYdWyWWAm09fMhh69TWAdDdqxWASGDN5xfrgEbTc2gpdfQpaCSatB3wn+i
uF/6BGbQv8dCCs1KMSnF4lWfJYhr4E6VFsiMFeN9Lk8qTYoM7U0mcJCuUJY2F7Bk
FE7l8semgxbmJyiG7lrgFtCqRuL4ZvNawLyIMHMgMNMeSdAMsOk+czulCeTCk/f9
x90BmkHeoO94ElBgafLod87a9OeW10BLSJvwH3oVGEbvwwTynnXPUorJk6LTYLUM
pIdK8rEk7IpV+vDecISdbahJoC5JRbHm/EjO4OjS0Wmfb9qMqRynyCQA1YFi8Gsb
+WuGR+j7ViE/nQ==
-----END CERTIFICATE-----