Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File:                     17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier:          pB2hapG8K2n9BdNUQLUU5j+k0r7cxA/usRgR1oFCQbY=
Subject key identifier:   CD:D1:53:95:84:B8:C2:92:97:EB:B4:65:F6:03:4E:90:82:87:FB:6E
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer:       /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial:       01962F7490CDE9A35AB3C19C1194469B0C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number:          0BD4
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: Sy+Wh5/nudLNhmxsbay4Ief/IXU0uti7K66u0HSztLw=)
                          2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:90:cd:e9:a3:5a:b3:c1:9c:11:94:46:9b:0c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=cdd1539584b8c29297ebb465f6034e908287fb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:43:81:6a:62:85:58:62:9d:f5:b8:a3:44:
                    7c:e2:df:e1:f0:9b:7c:63:ad:33:b6:de:c6:e5:c9:
                    b3:a9:24:66:c0:f6:f9:2d:b6:fd:d6:31:ee:b2:ea:
                    25:c7:2e:66:30:bd:e2:17:b5:1d:06:94:d7:20:59:
                    37:d0:eb:25:3d:e2:6d:cf:06:54:82:79:87:b4:8b:
                    14:eb:02:37:e9:0f:f1:93:6a:61:e8:2a:dd:6a:09:
                    02:ff:6e:18:fb:37:4b:79:f0:0b:c8:9a:74:fd:e7:
                    cb:95:4b:8e:39:63:52:13:22:12:97:c2:a5:cf:c9:
                    55:bd:db:82:17:b3:64:f8:c5:98:f3:5c:0e:6f:cd:
                    17:4d:13:eb:ad:4e:81:03:5e:aa:d8:46:b6:95:79:
                    fc:ca:77:40:67:5b:6c:ff:5e:b7:01:7b:d8:55:78:
                    c2:a2:62:0b:37:89:f6:29:75:b5:6e:ad:c1:78:00:
                    12:cf:3a:95:1f:d7:9d:5d:36:6a:9b:31:ca:c1:25:
                    a3:c6:3c:3a:6e:b6:b9:dc:5b:23:37:53:82:89:3d:
                    70:62:40:48:8e:e3:2a:dc:a9:f8:01:0e:4e:a9:47:
                    b1:d9:f4:c3:0e:d8:d5:2f:3c:10:6e:d6:f4:21:95:
                    78:ae:26:d4:e6:c2:ed:a6:08:1f:4d:19:ef:02:fd:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:53:95:84:B8:C2:92:97:EB:B4:65:F6:03:4E:90:82:87:FB:6E
            X509v3 Authority Key Identifier:
                keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:0f:75:ac:4c:6e:ca:62:09:c0:60:95:82:75:f2:0c:dd:
         2f:df:5c:f5:40:91:cb:2f:99:4d:18:43:d7:0a:a7:7d:ab:24:
         bc:99:fd:36:e3:03:3d:2c:2f:e0:95:8e:00:91:e7:33:ee:75:
         48:b2:a3:6d:68:e1:be:7f:0b:e6:d7:9a:c8:72:60:49:f6:a6:
         cf:f7:dc:ee:57:2a:c0:2a:31:ab:85:ed:37:66:81:18:74:22:
         aa:b2:86:03:03:cf:7e:de:3e:1d:01:cd:84:c9:09:87:33:42:
         78:8a:8f:d6:ff:c6:9a:81:d1:f4:f6:55:07:44:85:c8:40:04:
         14:39:0a:67:2f:1a:06:8b:46:39:5c:d1:fe:7d:62:ae:28:83:
         3f:2e:7b:a5:a3:ce:04:f6:dd:07:9d:53:4e:a2:5c:9e:79:65:
         d3:e9:ae:3d:ff:58:00:43:0e:51:8c:34:f5:0a:a8:7c:0f:47:
         ec:78:c9:18:8f:a9:f5:49:5a:77:4a:09:bf:7a:45:5f:f0:78:
         9c:0c:6d:15:7e:5a:2e:a8:17:e0:06:50:f1:e4:45:c2:0a:c4:
         75:a8:20:ff:21:7e:67:71:4e:79:7b:a3:5f:3a:81:1d:58:97:
         51:93:9a:60:0f:32:e9:84:f6:1a:b8:b3:d4:35:1c:d0:c4:cc:
         ef:de:a6:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJDN6aNas8GcEZRGmwx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YmI1NTIzNjU0OTljMDdhZWQzNGI2ODg0ZjViMmU5Mzgw
ZWJlZTEwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
EyhjZGQxNTM5NTg0YjhjMjkyOTdlYmI0NjVmNjAzNGU5MDgyODdmYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUBDgWpihVhinfW4o0R84t/h8Jt8
Y60ztt7G5cmzqSRmwPb5Lbb91jHusuolxy5mML3iF7UdBpTXIFk30OslPeJtzwZU
gnmHtIsU6wI36Q/xk2ph6CrdagkC/24Y+zdLefALyJp0/efLlUuOOWNSEyISl8Kl
z8lVvduCF7Nk+MWY81wOb80XTRPrrU6BA16q2Ea2lXn8yndAZ1ts/163AXvYVXjC
omILN4n2KXW1bq3BeAASzzqVH9edXTZqmzHKwSWjxjw6bra53FsjN1OCiT1wYkBI
juMq3Kn4AQ5OqUex2fTDDtjVLzwQbtb0IZV4ribU5sLtpggfTRnvAv2c/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3RU5WEuMKSl+u0ZfYDTpCCh/tuMB8GA1UdIwQY
MBaAFNe7VSNlSZwHrtNLaIT1suk4Dr7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUt
M2ViZDQ1NWFjMmFlLzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUtM2ViZDQ1NWFjMmFl
LzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDwPdaxM
bspiCcBglYJ18gzdL99c9UCRyy+ZTRhD1wqnfaskvJn9NuMDPSwv4JWOAJHnM+51
SLKjbWjhvn8L5teayHJgSfamz/fc7lcqwCoxq4XtN2aBGHQiqrKGAwPPft4+HQHN
hMkJhzNCeIqP1v/GmoHR9PZVB0SFyEAEFDkKZy8aBotGOVzR/n1iriiDPy57paPO
BPbdB51TTqJcnnll0+muPf9YAEMOUYw09QqofA9H7HjJGI+p9Ulad0oJv3pFX/B4
nAxtFX5aLqgX4AZQ8eRFwgrEdagg/yF+Z3FOeXujXzqBHViXUZOaYA8y6YT2Griz
1DUc0MTM796mFw==
-----END CERTIFICATE-----