Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
File:                     rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json)
Hash identifier:          ygAb6FLeadOEnlTVc7YEVxN9LRLhgmsNR+mJbaujdqU=
Subject key identifier:   0C:11:A2:E6:1A:AC:C9:C1:42:82:5B:93:30:31:98:42:78:60:62:92
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       01962DF3FE97DFFFAFABC5FC4E56AEA08CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
Manifest number:          1528
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: 0SyYaQgLQzTmHyjwALNgjgW6Ips.roa (hash: 9FZRGxKEG0jtfYGiry8IM0OKO6/JFkO8TxODVgljdw8=)
                          2: 1oM3GP4XRi0mqDBcN0k0C4RTdHY.roa (hash: Eqko1gSCAK/Ec5hGsjBzpPB0Hmmto77uxcqKM6nkuos=)
                          3: 3wty7vsO9UIAL71reBrfPy8oYTQ.roa (hash: rNtuN9r+yk/6orL0d+CeXB5qTYEo7nBji2qcFakMUQ0=)
                          4: 4JhjKslYK-x39Xd53DH9TC69Rk8.roa (hash: e58H1T1DE3lMwZ8TDVT9NRaFGvcdvvX7mUpQQhawZYI=)
                          5: 4rBl4Xgj-eyO-Qb6KkYRdP_q3yA.roa (hash: 9Fg4JBY24DsNxM7h9nmxlQnxm85kk0BWdXCDra924l8=)
                          6: D-_QiVeAYymMyrqyEwwxZVlJ77w.roa (hash: pLHDIfQfn00HxVAd67SY9GUFCYPJH9fT0t4z495xhcU=)
                          7: MKj1D95IscsnJcwFu1G_QR6ra0Y.roa (hash: fa1NTOC8gwDd/cU25OwEYI6M+pi4vH6HCYjqk3JwdQU=)
                          8: PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa (hash: 6S6SDi+NoevpWtxjp+Phs+mUreAi/RCvfLId1bbLsWc=)
                          9: SHESx2HqUfWZxboQ6jP2hImYKmU.roa (hash: OlCdziBdwRc0FY5ejIFVQ8Nt867ISEKKLNxKfPnLzFA=)
                          10: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (hash: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=)
                          11: U2a4Mi5anG6MoVx-kSkOlCHuZ9U.roa (hash: WzVg8UcZ00h0mbpXiGBDaneFB3IZyzn0LFRbQNJ9OXc=)
                          12: UU4qmywXJeD0s-bEtA06YqQJbXY.roa (hash: U8vbKeUDnyxjI4tldoiMN64co7xQZg9nWw+wDHbmz3c=)
                          13: bicuo27VbekDKZ2baxGyIAeBOBw.roa (hash: SWEpCpnN+xzcUkxLs6Bt4xTFqOqzIoS1IpAm8o8Z7uw=)
                          14: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (hash: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=)
                          15: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (hash: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=)
                          16: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: 2i9/cn3MQP0TcXhGY1q2qlTrboOoPtShj/uF+fQPRog=)
                          17: xZHK8sMXJRR9tFEPi8Dz0m2XwJE.roa (hash: P4VjA7AD0Rq8qJwX9hUh9U04YYNDoPlLqjbXRLiEoic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fe:97:df:ff:af:ab:c5:fc:4e:56:ae:a0:8c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=0c11a2e61aacc9c142825b933031984278606292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:cb:61:65:b4:79:f6:58:9f:bd:6f:de:f6:
                    18:1d:98:24:e1:22:9f:07:28:98:8f:f2:a2:1d:fb:
                    7d:3f:48:ce:88:dd:ad:c5:62:87:18:7d:85:de:19:
                    a5:48:51:e3:47:8c:9e:7d:f8:cd:74:e0:f0:56:01:
                    b2:f2:91:f1:e5:99:26:5d:7a:16:91:9a:ba:db:de:
                    da:ff:ae:a8:88:80:fe:2e:e3:dd:82:63:24:44:06:
                    1b:aa:d1:8f:a5:34:0d:9c:c1:d8:d6:d8:fe:3d:e8:
                    05:af:03:e0:2d:a4:2a:b8:36:ba:57:33:63:28:ec:
                    b5:02:ef:27:03:10:ef:7f:bf:61:89:0a:80:72:92:
                    80:28:ba:77:9c:46:10:43:ed:6f:e2:d9:0b:2a:1f:
                    6a:93:bf:20:32:96:dd:43:eb:a0:63:84:6a:fb:d9:
                    db:82:d7:5c:cc:ae:8f:c3:34:d4:53:d5:b2:bf:60:
                    c6:67:98:0e:89:78:e9:29:e6:fa:b3:55:d4:f7:e5:
                    84:ec:2a:8e:c3:4c:55:c5:92:6d:e7:eb:79:4a:8d:
                    90:6f:78:0c:3a:5a:6b:81:1f:f3:79:61:e9:86:96:
                    b0:c6:62:ec:86:6b:03:2c:ec:d5:4e:71:ba:7a:24:
                    5c:93:ce:2a:01:38:4c:66:ea:27:18:bd:bc:af:15:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:11:A2:E6:1A:AC:C9:C1:42:82:5B:93:30:31:98:42:78:60:62:92
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:30:0c:2b:f1:f8:84:49:18:d8:4d:ef:79:3e:b9:bb:af:9c:
         48:7e:39:5c:7d:ba:79:aa:67:72:2b:f0:48:16:34:d4:73:c4:
         2b:f6:3c:2e:0d:02:36:e8:f1:d8:dd:76:7f:a2:88:29:f6:00:
         e1:cf:2b:f3:25:d9:7e:0a:b9:ad:d7:17:23:0d:d9:b4:8d:0c:
         b3:08:b9:9d:e0:bd:bf:11:51:cf:e9:95:38:2e:26:2e:cb:3c:
         82:2b:90:2d:75:a8:26:a1:56:27:d3:f2:f7:c4:ef:ff:2f:63:
         8d:0a:77:33:50:be:18:ef:18:0b:3f:d4:8e:2b:62:62:bf:ca:
         df:b9:6d:69:b9:f6:2e:f8:58:3d:bb:3e:d7:be:1c:8d:80:37:
         74:23:48:c9:1f:37:df:ba:01:8d:35:e2:60:2b:33:6c:c3:ef:
         29:ae:1c:65:e6:77:01:56:b3:13:6c:1a:56:17:34:d6:2e:3a:
         f0:7f:e7:bd:30:29:f5:6b:d4:b6:c1:ec:ba:bc:c3:0e:97:14:
         25:31:d7:f9:7a:5d:c3:5a:be:59:a2:b7:9e:9c:1d:d2:ad:dd:
         53:93:9c:22:53:75:9b:37:54:1e:d5:a7:32:3e:ee:ac:ad:d0:
         60:bb:9a:ef:df:3d:de:99:1b:da:ad:7c:bb:c9:30:0d:b6:cd:
         8d:89:04:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/6X3/+vq8X8TlauoIzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjUwNDEzMDcwMTI3WhcNMjUwNDE0MDcwMTI3WjAzMTEwLwYDVQQD
EygwYzExYTJlNjFhYWNjOWMxNDI4MjViOTMzMDMxOTg0Mjc4NjA2MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua/LYWW0efZYn71v3vYYHZgk4SKf
ByiYj/KiHft9P0jOiN2txWKHGH2F3hmlSFHjR4yeffjNdODwVgGy8pHx5ZkmXXoW
kZq6297a/66oiID+LuPdgmMkRAYbqtGPpTQNnMHY1tj+PegFrwPgLaQquDa6VzNj
KOy1Au8nAxDvf79hiQqAcpKAKLp3nEYQQ+1v4tkLKh9qk78gMpbdQ+ugY4Rq+9nb
gtdczK6PwzTUU9Wyv2DGZ5gOiXjpKeb6s1XU9+WE7CqOw0xVxZJt5+t5So2Qb3gM
OlprgR/zeWHphpawxmLshmsDLOzVTnG6eiRck84qAThMZuonGL28rxVQkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwRouYarMnBQoJbkzAxmEJ4YGKSMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzAMK/H4
hEkY2E3veT65u6+cSH45XH26eapncivwSBY01HPEK/Y8Lg0CNujx2N12f6KIKfYA
4c8r8yXZfgq5rdcXIw3ZtI0Mswi5neC9vxFRz+mVOC4mLss8giuQLXWoJqFWJ9Py
98Tv/y9jjQp3M1C+GO8YCz/UjitiYr/K37ltabn2LvhYPbs+174cjYA3dCNIyR83
37oBjTXiYCszbMPvKa4cZeZ3AVazE2waVhc01i468H/nvTAp9WvUtsHsurzDDpcU
JTHX+Xpdw1q+WaK3npwd0q3dU5OcIlN1mzdUHtWnMj7urK3QYLua79893pkb2q18
u8kwDbbNjYkEoA==
-----END CERTIFICATE-----