Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File:                     K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier:          EZ+lBqkW0mG3zJvB8rWtIcKd8jJj6wpL73keTpi/T+c=
Subject key identifier:   9B:E9:2A:C2:53:10:4C:6D:55:6A:F7:9F:A4:0F:82:E8:D1:32:9E:C8
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer:       /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial:       01962F3D407E9A107F58E1EF106131770DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: peyCverR77nn1G6mFRc36JPAZMeSiN9Fj10m8tCOjTA=)
                          2: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (hash: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:40:7e:9a:10:7f:58:e1:ef:10:61:31:77:0d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=9be92ac253104c6d556af79fa40f82e8d1329ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:31:da:d7:c0:42:02:58:88:f0:71:0e:e3:
                    7b:7c:8d:26:10:aa:11:4c:0c:49:4d:43:29:ea:c0:
                    8c:2e:b8:b8:06:ca:54:cb:32:35:d5:71:0e:75:28:
                    cd:4f:fc:ea:7e:a7:3b:e4:60:29:92:9c:14:cb:fd:
                    8e:52:4f:74:d5:83:be:ff:55:c7:e9:cb:58:36:5f:
                    9a:15:3a:f4:35:b9:60:26:a4:93:c0:22:c0:74:5f:
                    d8:e3:7f:84:a3:fe:7c:5c:fb:09:d1:13:d8:ac:7a:
                    27:9a:e9:a7:d1:bd:3e:24:7a:46:6c:e7:37:3f:19:
                    cf:ee:e5:08:a3:0d:1c:b0:8e:63:0d:75:a1:a7:e5:
                    c4:cd:5e:82:f8:bf:6a:e0:00:af:62:a4:9f:a1:5b:
                    b7:f3:55:54:21:67:f3:a9:73:f0:a6:d5:44:76:ba:
                    f4:92:41:72:fc:4c:da:97:51:26:cf:56:cd:b5:24:
                    75:fa:96:e6:32:b9:41:33:3c:7a:c7:65:72:f5:0b:
                    63:49:e2:35:97:10:10:66:c3:b9:2d:26:ec:c1:36:
                    da:79:56:d6:2b:ae:26:1e:3c:d5:22:35:d8:b4:af:
                    16:11:b9:fd:12:2f:d5:a6:ba:ad:9d:44:c5:77:e6:
                    bf:50:37:80:86:2f:7e:16:82:ab:d0:ed:41:5c:45:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:2A:C2:53:10:4C:6D:55:6A:F7:9F:A4:0F:82:E8:D1:32:9E:C8
            X509v3 Authority Key Identifier:
                keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:b2:ae:18:97:64:95:ec:ca:36:11:fa:8d:90:97:a1:45:dd:
         38:aa:1a:72:7d:45:db:97:b0:7e:da:a9:0c:6f:30:74:ab:49:
         83:8a:eb:3d:d3:47:d6:b3:30:28:0f:3c:02:c2:f1:e1:77:17:
         cc:34:14:6b:8a:bd:42:45:b7:85:a3:25:f4:1c:81:d4:32:eb:
         6d:07:a4:af:63:cd:d5:f6:9e:53:e8:9d:a9:cf:a0:ef:da:93:
         ca:5a:2f:be:3f:35:e2:a5:3d:52:3f:11:e9:89:fe:53:28:fb:
         9d:3b:90:c1:c6:b1:eb:bd:15:34:68:2a:6b:80:86:56:a3:81:
         e7:0f:65:25:27:31:f6:ff:8a:5d:cb:35:57:13:83:92:1a:29:
         a8:89:2e:a2:35:76:c0:70:1d:83:57:0a:7c:d1:f7:00:2c:33:
         95:87:0c:3d:14:ba:fd:81:6d:59:01:49:79:30:e3:0c:2a:89:
         83:53:c4:c0:04:f6:86:83:15:19:cb:73:28:d4:02:97:f5:6e:
         99:f6:fc:b8:77:07:b0:c9:5d:00:8e:41:ed:44:c6:d0:8c:de:
         8d:d1:97:9e:72:56:ba:90:3f:a1:5a:23:47:1e:8d:b0:3a:75:
         d3:d9:4a:c4:67:1f:39:09:16:21:9b:5d:99:19:f1:41:cb:4f:
         74:0d:59:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUB+mhB/WOHvEGExdw3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz
ZmU0ZjIwHhcNMjUwNDEzMTMwMTA1WhcNMjUwNDE0MTMwMTA1WjAzMTEwLwYDVQQD
Eyg5YmU5MmFjMjUzMTA0YzZkNTU2YWY3OWZhNDBmODJlOGQxMzI5ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGIx2tfAQgJYiPBxDuN7fI0mEKoR
TAxJTUMp6sCMLri4BspUyzI11XEOdSjNT/zqfqc75GApkpwUy/2OUk901YO+/1XH
6ctYNl+aFTr0NblgJqSTwCLAdF/Y43+Eo/58XPsJ0RPYrHonmumn0b0+JHpGbOc3
PxnP7uUIow0csI5jDXWhp+XEzV6C+L9q4ACvYqSfoVu381VUIWfzqXPwptVEdrr0
kkFy/Ezal1Emz1bNtSR1+pbmMrlBMzx6x2Vy9QtjSeI1lxAQZsO5LSbswTbaeVbW
K64mHjzVIjXYtK8WEbn9Ei/VprqtnUTFd+a/UDeAhi9+FoKr0O1BXEWyXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvpKsJTEExtVWr3n6QPgujRMp7IMB8GA1UdIwQY
MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt
NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm
LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7KuGJdk
lezKNhH6jZCXoUXdOKoacn1F25ewftqpDG8wdKtJg4rrPdNH1rMwKA88AsLx4XcX
zDQUa4q9QkW3haMl9ByB1DLrbQekr2PN1faeU+idqc+g79qTylovvj814qU9Uj8R
6Yn+Uyj7nTuQwcax670VNGgqa4CGVqOB5w9lJScx9v+KXcs1VxODkhopqIkuojV2
wHAdg1cKfNH3ACwzlYcMPRS6/YFtWQFJeTDjDCqJg1PEwAT2hoMVGctzKNQCl/Vu
mfb8uHcHsMldAI5B7UTG0IzejdGXnnJWupA/oVojRx6NsDp109lKxGcfOQkWIZtd
mRnxQctPdA1ZmA==
-----END CERTIFICATE-----