Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File:                     X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier:          Ulot0qlf0uP+bo+vWlrxiecu5gOeKhob144ydqIY9Uw=
Subject key identifier:   2A:14:BA:C4:A4:12:8F:30:42:3C:F3:E0:7E:CA:E4:95:01:99:9C:E0
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer:       /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial:       01962E61F43B3E1BB7CEA468D39A8754DA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number:          0C4F
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
                          2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: zEXFWlFcu2PMg81aex7p3YM3v71FpIBFVcp3GcSHkck=)
                          3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f4:3b:3e:1b:b7:ce:a4:68:d3:9a:87:54:da:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=2a14bac4a4128f30423cf3e07ecae49501999ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:06:08:83:cd:ba:07:4b:b1:a7:11:e5:c8:
                    a3:57:70:57:d5:2b:72:fa:c5:07:d3:b4:3e:6e:3e:
                    46:a9:6f:8c:2f:85:88:9b:63:d7:c0:c9:4d:79:b5:
                    db:59:74:27:50:b5:c5:ae:a0:74:6f:34:d7:3a:f1:
                    a4:55:e8:00:85:55:94:0a:8d:e6:f2:76:51:5d:b4:
                    80:4e:2f:2a:09:35:e0:2d:16:09:c8:b9:d4:cd:d9:
                    b4:f6:a4:3f:44:86:3a:4f:86:e6:91:4e:43:fe:31:
                    c2:b2:0f:35:e9:b6:ac:11:55:c5:36:d1:67:11:0d:
                    d8:a1:69:7c:af:29:64:3d:9f:01:9b:62:91:b1:7c:
                    96:97:33:f6:13:56:b2:6b:de:11:97:c7:42:42:b6:
                    7c:77:1d:9c:76:a6:05:8c:20:b4:56:ac:01:bf:4e:
                    f9:b3:13:d9:77:6e:3a:ab:d1:d6:e0:ef:9e:c6:b4:
                    8e:8b:93:6c:86:0d:a7:bd:46:8d:4b:69:82:0b:88:
                    5e:7c:06:e7:f2:34:57:9d:3e:d2:09:37:ee:b8:ce:
                    a0:09:7e:d7:09:39:29:1e:f4:64:74:fa:d1:1b:65:
                    d4:d1:16:d3:50:a9:55:ee:34:78:c6:49:a6:76:77:
                    a2:96:26:ae:54:0f:7a:7b:12:6a:fb:57:31:eb:1d:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:14:BA:C4:A4:12:8F:30:42:3C:F3:E0:7E:CA:E4:95:01:99:9C:E0
            X509v3 Authority Key Identifier:
                keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:57:db:06:37:10:c9:33:47:59:26:a0:8c:c6:0e:89:91:76:
         b9:0a:86:d5:69:43:5e:c5:c7:d3:78:d6:c8:87:99:93:e9:b4:
         6c:94:fe:c5:c9:24:af:62:a6:f8:b5:26:44:a9:fb:8d:09:db:
         df:6f:f6:3b:05:b8:d6:b0:e8:21:19:69:e4:1f:f3:5a:45:b4:
         70:57:31:dc:bc:53:46:92:ee:fd:52:8c:b7:ca:b8:eb:94:cb:
         3b:7c:2b:fd:df:56:ba:3c:8a:4b:52:33:d8:bd:bc:05:1a:36:
         da:b7:57:40:11:ed:db:16:ed:55:8b:7f:b0:17:e5:26:83:50:
         08:a1:8c:3a:6c:fd:c3:cf:61:e6:99:5c:e9:f9:55:4f:59:df:
         d8:6a:01:66:47:46:f9:b5:7e:11:be:b4:ed:95:ee:52:06:d5:
         a1:8a:4e:3d:d0:30:f2:3e:b9:e0:7a:42:c3:b9:a7:e6:31:0b:
         97:96:eb:da:56:bd:08:85:82:64:5a:59:28:0c:f1:85:bb:53:
         57:0f:84:f3:d2:95:4c:87:b5:e5:78:5d:f3:2b:82:27:3e:ec:
         76:e6:2c:f7:9a:08:3a:4d:76:07:db:e4:b8:d5:0b:11:09:d5:
         5d:88:85:d1:7c:26:3d:c7:1a:ef:9e:2c:85:6e:6c:ea:c6:df:
         1a:db:0e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfQ7Phu3zqRo05qHVNpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
EygyYTE0YmFjNGE0MTI4ZjMwNDIzY2YzZTA3ZWNhZTQ5NTAxOTk5Y2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O4GCIPNugdLsacR5cijV3BX1Sty
+sUH07Q+bj5GqW+ML4WIm2PXwMlNebXbWXQnULXFrqB0bzTXOvGkVegAhVWUCo3m
8nZRXbSATi8qCTXgLRYJyLnUzdm09qQ/RIY6T4bmkU5D/jHCsg816basEVXFNtFn
EQ3YoWl8rylkPZ8Bm2KRsXyWlzP2E1aya94Rl8dCQrZ8dx2cdqYFjCC0VqwBv075
sxPZd246q9HW4O+exrSOi5Nshg2nvUaNS2mCC4hefAbn8jRXnT7SCTfuuM6gCX7X
CTkpHvRkdPrRG2XU0RbTUKlV7jR4xkmmdneiliauVA96exJq+1cx6x1CswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoUusSkEo8wQjzz4H7K5JUBmZzgMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlfbBjcQ
yTNHWSagjMYOiZF2uQqG1WlDXsXH03jWyIeZk+m0bJT+xckkr2Km+LUmRKn7jQnb
32/2OwW41rDoIRlp5B/zWkW0cFcx3LxTRpLu/VKMt8q465TLO3wr/d9WujyKS1Iz
2L28BRo22rdXQBHt2xbtVYt/sBflJoNQCKGMOmz9w89h5plc6flVT1nf2GoBZkdG
+bV+Eb607ZXuUgbVoYpOPdAw8j654HpCw7mn5jELl5br2la9CIWCZFpZKAzxhbtT
Vw+E89KVTIe15Xhd8yuCJz7sduYs95oIOk12B9vkuNULEQnVXYiF0XwmPcca754s
hW5s6sbfGtsOEg==
-----END CERTIFICATE-----