Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File:                     i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier:          yGgGtBaGxYS6soU+tOIToOKKCS9kaV0PwZfTLXRx5Ew=
Subject key identifier:   4C:E8:8D:E9:12:9B:95:04:0F:F3:7C:B2:8B:A1:18:66:84:AE:6F:BF
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer:       /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial:       01962E6205F231048FBC0D21C33D1B98B3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
                          2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
                          3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: HnQpfji5I82rgJM5EFxPYHX2IRKvjwiskPHSxegYxcY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:05:f2:31:04:8f:bc:0d:21:c3:3d:1b:98:b3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=4ce88de9129b95040ff37cb28ba1186684ae6fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:18:0b:75:29:42:d6:a2:b5:93:b4:40:d4:
                    de:63:16:79:98:b0:50:ff:6f:ff:f0:cc:d7:b5:e9:
                    b0:73:5b:f9:ba:89:1e:80:a1:62:fc:e0:a8:91:8e:
                    2e:5b:c0:44:21:d9:5c:aa:31:9f:b7:c5:b0:c8:13:
                    62:e7:bf:e0:a8:76:5a:bf:82:ec:c7:77:ab:c2:8d:
                    d9:5e:da:c2:4f:eb:10:6c:7a:bc:7c:15:04:83:b1:
                    47:e7:16:2a:5b:86:b2:d2:7e:75:1a:b4:ca:63:aa:
                    8b:cb:e8:e8:7d:a1:5c:14:f4:0d:03:3f:4a:c8:09:
                    f1:37:3a:bf:cd:b4:45:ad:c9:09:46:0c:32:a6:77:
                    eb:c5:b3:a7:7b:d8:bc:c4:6f:f5:e0:fd:e0:29:ed:
                    be:45:9b:50:1d:86:48:2e:c2:9f:92:f5:0b:a4:aa:
                    e3:a1:a5:28:c8:d9:dd:70:3a:56:cf:73:e4:d4:fc:
                    46:f5:88:71:dd:c2:c4:f9:95:86:b0:f1:82:ad:0d:
                    45:9f:85:91:38:40:da:8e:cf:17:a5:2b:1a:85:ab:
                    b4:e3:1b:01:7e:95:5a:2e:d1:2e:44:c4:6a:01:e8:
                    bb:e8:cf:98:be:bb:37:f8:94:1e:2a:98:29:5d:8d:
                    34:d2:fe:48:0a:b9:d8:29:a8:71:9a:9d:84:f4:ba:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:8D:E9:12:9B:95:04:0F:F3:7C:B2:8B:A1:18:66:84:AE:6F:BF
            X509v3 Authority Key Identifier:
                keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:51:e1:11:e4:68:50:7d:0a:ef:56:12:d9:1d:25:e2:0a:4e:
         34:ab:42:cd:49:3e:1f:33:d5:2c:ca:b5:34:3f:d1:22:08:a4:
         14:d9:02:47:2f:03:67:8a:ad:d5:82:13:80:33:4a:15:03:eb:
         77:59:61:e9:15:cf:a9:bc:e4:f2:0e:65:18:32:e5:23:ef:b6:
         88:d7:65:0c:33:d4:0c:7d:38:d5:60:5a:f2:84:2b:f0:10:85:
         76:e7:ba:16:68:16:52:67:f7:41:36:6b:ec:4b:36:82:95:7c:
         80:16:48:b6:b0:ea:ad:09:71:3d:cc:ed:de:80:a6:42:16:5f:
         5d:51:c6:c3:e1:d6:e2:79:50:0a:5c:10:43:ee:a9:d0:b1:ec:
         0b:54:24:34:b2:08:2c:2a:1d:92:38:ca:25:dc:76:0a:f4:c2:
         61:9c:bb:f5:de:67:a6:ab:00:64:6b:cd:82:cd:53:88:83:95:
         75:66:a4:75:36:55:14:50:b4:4d:d3:04:cd:57:6d:a3:a6:58:
         e8:f7:23:37:5a:1d:f0:09:86:b9:4a:29:5e:8b:10:4c:4d:a3:
         8a:04:4e:ac:8c:42:1f:a9:92:7a:74:f7:2a:ac:59:16:a5:58:
         c2:a3:32:41:fb:bd:96:60:86:30:91:5a:8f:29:a2:0f:1e:73:
         61:84:19:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgXyMQSPvA0hwz0bmLPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNmEyM2EyZmQxYTA5NTYzNzhhMzdkNGZjZTI1OWRmMmJk
Nzk0YTcwHhcNMjUwNDEzMDkwMTM3WhcNMjUwNDE0MDkwMTM3WjAzMTEwLwYDVQQD
Eyg0Y2U4OGRlOTEyOWI5NTA0MGZmMzdjYjI4YmExMTg2Njg0YWU2ZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjugYC3UpQtaitZO0QNTeYxZ5mLBQ
/2//8MzXtemwc1v5uokegKFi/OCokY4uW8BEIdlcqjGft8WwyBNi57/gqHZav4Ls
x3erwo3ZXtrCT+sQbHq8fBUEg7FH5xYqW4ay0n51GrTKY6qLy+jofaFcFPQNAz9K
yAnxNzq/zbRFrckJRgwypnfrxbOne9i8xG/14P3gKe2+RZtQHYZILsKfkvULpKrj
oaUoyNndcDpWz3Pk1PxG9Yhx3cLE+ZWGsPGCrQ1Fn4WROEDajs8XpSsahau04xsB
fpVaLtEuRMRqAei76M+Yvrs3+JQeKpgpXY000v5ICrnYKahxmp2E9LrW7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzojekSm5UED/N8souhGGaErm+/MB8GA1UdIwQY
MBaAFItqI6L9GglWN4o31PziWd8r15SnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAt
OWE0NmVkNWI0MmRiLzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAtOWE0NmVkNWI0MmRi
LzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlHhEeRo
UH0K71YS2R0l4gpONKtCzUk+HzPVLMq1ND/RIgikFNkCRy8DZ4qt1YITgDNKFQPr
d1lh6RXPqbzk8g5lGDLlI++2iNdlDDPUDH041WBa8oQr8BCFdue6FmgWUmf3QTZr
7Es2gpV8gBZItrDqrQlxPczt3oCmQhZfXVHGw+HW4nlQClwQQ+6p0LHsC1QkNLII
LCodkjjKJdx2CvTCYZy79d5npqsAZGvNgs1TiIOVdWakdTZVFFC0TdMEzVdto6ZY
6PcjN1od8AmGuUopXosQTE2jigROrIxCH6mSenT3KqxZFqVYwqMyQfu9lmCGMJFa
jymiDx5zYYQZYw==
-----END CERTIFICATE-----