Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          4H4crGE3m2PNsbmwTHpsZj4jXtIN8Y38stA2s/kELns=
Subject key identifier:   57:44:0A:AC:98:F9:81:B6:4F:92:0A:4E:A8:BC:62:F1:EA:D4:6D:29
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       01962E61883E3B961291D35F419B22877AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: VEAJzrMX4/Y7ChKZcOkH56uXhJX8w5zQjc6S3kgBtHg=)
                          2: uSVVlqHZvV5YEhwqY0z-9BTB1zI.roa (hash: AWa2RaP+hTglbbgDdOdlnFQ+mgvTTY8nknDwYB/qQE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:3e:3b:96:12:91:d3:5f:41:9b:22:87:7a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=57440aac98f981b64f920a4ea8bc62f1ead46d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:1e:b4:c6:12:a5:2d:55:79:c9:ce:91:ce:
                    86:27:bf:67:56:8e:35:f8:1c:fe:7e:db:99:a6:6d:
                    f6:f1:c3:0d:c0:53:90:ab:ec:95:07:45:ff:7c:65:
                    d1:e6:c8:27:ce:79:3f:ed:fb:71:4b:14:10:82:c7:
                    67:47:7e:4a:da:3c:af:bb:61:07:42:a2:63:ed:f2:
                    ac:88:d5:ad:75:66:44:04:7c:ed:d6:2c:7f:e6:a7:
                    2d:ea:47:89:f2:07:10:e5:34:5a:8f:9d:c3:cb:e3:
                    48:ae:90:70:9c:47:ff:7c:c6:d4:3d:5a:b0:43:54:
                    cb:9d:bb:c5:16:e9:0d:c5:01:f6:ea:39:85:50:07:
                    a3:83:4c:95:4c:9d:98:0f:a3:f0:9f:1d:2c:ec:4a:
                    cc:3f:1a:61:ab:3c:f6:73:d8:48:9a:f1:d4:b1:17:
                    5d:f0:8a:7b:8d:b6:d6:52:f4:00:47:68:7b:17:63:
                    28:00:d6:60:f4:2b:f1:ba:80:ac:82:28:98:59:06:
                    5a:9e:79:d3:62:48:4f:d6:91:13:e0:64:07:6f:41:
                    9f:75:5f:ed:5d:f1:f2:07:7d:63:75:10:cc:07:cb:
                    97:dc:0c:c3:01:b6:b9:59:0b:26:9b:74:ef:8a:0f:
                    78:85:9b:46:dd:e4:20:07:6e:60:84:24:9c:fb:65:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:44:0A:AC:98:F9:81:B6:4F:92:0A:4E:A8:BC:62:F1:EA:D4:6D:29
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:7b:1e:20:05:a7:9f:a4:ad:ba:1b:36:e8:fb:73:e2:4e:
         54:02:b5:1a:ba:6b:44:aa:d7:d2:1b:ff:f8:b1:9a:24:ab:bc:
         cd:54:2e:83:dd:2f:26:17:6d:ed:d0:f6:d3:8c:92:ff:d2:bf:
         df:88:1e:a3:67:1d:59:06:4d:fc:4c:2d:50:41:62:8d:51:eb:
         83:c8:2b:9e:b8:0d:77:9c:1c:7c:e7:e3:34:fe:8f:20:c6:a5:
         bb:df:ce:b4:47:d3:b3:dd:47:45:5c:b9:0a:86:32:31:11:71:
         6c:d2:0a:a1:dd:ca:7f:38:6c:95:cb:6d:ca:dd:66:b5:de:e5:
         ed:aa:61:b0:da:8d:33:7d:1e:6e:03:3d:ff:f2:4f:11:b2:c0:
         a3:ec:d2:35:39:44:53:11:86:f2:08:27:2d:66:ff:4a:cf:95:
         b5:96:d3:59:b0:29:c1:67:a6:47:0a:ae:2b:40:6a:1c:c3:6c:
         36:b4:da:b8:9f:bd:b8:ee:a9:de:6a:22:8d:0b:73:36:cd:17:
         93:6c:bb:ed:04:04:c0:ba:f5:ff:d6:a0:66:b8:ce:af:5b:59:
         b3:ec:ca:67:11:46:e0:c9:5e:bc:c6:5d:35:51:cb:1d:09:06:
         aa:15:fb:1f:5e:6d:84:ce:4c:47:9d:41:cf:5a:70:ff:e8:d0:
         45:af:5e:a7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuYYg+O5YSkdNfQZsih3ryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj
OGJkNTYwHhcNMjUwNDEzMDkwMTA1WhcNMjUwNDE0MDkwMTA1WjAzMTEwLwYDVQQD
Eyg1NzQ0MGFhYzk4Zjk4MWI2NGY5MjBhNGVhOGJjNjJmMWVhZDQ2ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m0etMYSpS1VecnOkc6GJ79nVo41
+Bz+ftuZpm328cMNwFOQq+yVB0X/fGXR5sgnznk/7ftxSxQQgsdnR35K2jyvu2EH
QqJj7fKsiNWtdWZEBHzt1ix/5qct6keJ8gcQ5TRaj53Dy+NIrpBwnEf/fMbUPVqw
Q1TLnbvFFukNxQH26jmFUAejg0yVTJ2YD6Pwnx0s7ErMPxphqzz2c9hImvHUsRdd
8Ip7jbbWUvQAR2h7F2MoANZg9CvxuoCsgiiYWQZannnTYkhP1pET4GQHb0GfdV/t
XfHyB31jdRDMB8uX3AzDAba5WQsmm3Tvig94hZtG3eQgB25ghCSc+2XWuQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFdECqyY+YG2T5IKTqi8YvHq1G0pMB8GA1UdIwQY
MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5
LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl
ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIZ7
HiAFp5+krbobNuj7c+JOVAK1GrprRKrX0hv/+LGaJKu8zVQug90vJhdt7dD204yS
/9K/34geo2cdWQZN/EwtUEFijVHrg8grnrgNd5wcfOfjNP6PIMalu9/OtEfTs91H
RVy5CoYyMRFxbNIKod3Kfzhslcttyt1mtd7l7aphsNqNM30ebgM9//JPEbLAo+zS
NTlEUxGG8ggnLWb/Ss+VtZbTWbApwWemRwquK0BqHMNsNrTauJ+9uO6p3moijQtz
Ns0Xk2y77QQEwLr1/9agZrjOr1tZs+zKZxFG4MlevMZdNVHLHQkGqhX7H15thM5M
R51Bz1pw/+jQRa9epw==
-----END CERTIFICATE-----