Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          gHCQqpDeEikMvnTpJL+Wdzh9DZWSGq4Pfhsuf+rRiq4=
Subject key identifier:   F8:DA:10:85:22:42:3D:E2:DC:21:25:9C:F5:45:61:7C:48:9F:3E:38
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       01962FAB2B012D32A2821E807C1BC860ECF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          14B8
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: uc/ntV3OWDJMklEuVQxd4Uo71trVB9E1Xvk/S9q9Sv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:01:2d:32:a2:82:1e:80:7c:1b:c8:60:ec:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=f8da108522423de2dc21259cf545617c489f3e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:6e:9e:18:98:47:5c:c3:84:c0:63:52:e8:
                    40:e7:be:6a:c1:ef:e0:0a:07:cb:22:3e:a1:9c:a7:
                    98:20:aa:67:64:5d:d7:f1:22:20:70:5a:79:1b:4d:
                    22:e3:77:bf:f9:6b:ba:8c:90:47:15:67:f1:03:dd:
                    9c:2c:dd:35:43:81:28:e9:40:12:b9:c2:cf:e2:59:
                    91:a4:20:a2:b6:7d:ff:35:33:94:60:04:70:a7:f9:
                    4d:90:fd:72:16:1b:96:2e:ab:2b:64:00:34:89:38:
                    15:bf:3e:89:2b:f9:4b:88:24:07:1b:74:1d:61:84:
                    d3:da:93:61:44:49:1a:de:b3:94:49:75:60:3d:70:
                    6f:82:b4:31:85:e8:0e:34:6a:60:d3:c3:e4:38:f3:
                    2b:76:27:81:31:67:bc:a1:62:67:db:3b:e3:68:4a:
                    b3:46:36:3d:d6:b3:df:12:60:23:b4:ec:aa:41:95:
                    d0:f8:74:1c:63:bf:2b:02:2d:3a:d5:4c:85:4a:40:
                    d0:53:25:6a:78:5b:ec:47:83:33:ef:4d:09:fb:06:
                    0a:10:99:d3:8e:98:39:31:ae:01:cc:d2:e6:56:d8:
                    4d:a0:44:04:32:ad:30:62:ba:7f:35:4b:6c:12:92:
                    f9:49:81:be:0e:bd:36:ad:49:5f:11:c7:22:b3:03:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DA:10:85:22:42:3D:E2:DC:21:25:9C:F5:45:61:7C:48:9F:3E:38
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:34:36:e8:83:cc:86:08:7b:94:8d:ee:71:66:c8:93:11:40:
         ec:8b:2c:7c:cd:2d:ab:fe:2b:84:03:63:8e:a0:6f:53:9a:7e:
         83:b5:6e:79:7b:b4:0a:65:58:78:60:b4:83:ec:fb:07:33:e9:
         6a:f1:38:1a:5a:29:5a:88:c0:82:db:03:03:b7:14:ac:d0:b3:
         60:9a:18:c6:aa:0b:a4:b3:e2:52:b9:dd:12:7d:a7:e5:e6:6b:
         b4:cc:64:0e:93:2e:b4:d4:50:86:e4:a7:0e:ac:60:4f:25:a5:
         ba:6d:b0:5c:49:80:8a:2f:f6:b9:25:e6:48:fd:d6:fe:b4:1b:
         5b:02:4c:4d:34:97:0c:94:db:90:70:24:fc:5d:c7:f3:64:97:
         1d:25:75:4f:b6:56:58:0b:7c:b5:94:e1:11:a8:ab:a8:e3:69:
         72:2b:7f:5d:f4:b1:e4:54:d6:ee:b1:96:4c:93:cc:f4:f6:26:
         8c:bd:b3:2a:d0:d2:20:39:4c:5e:80:be:36:a7:96:29:34:22:
         e9:a2:fb:79:91:fb:3d:37:a1:e2:a1:1f:10:f4:84:c2:19:a4:
         b6:3f:b9:ad:41:d4:c9:01:05:aa:ba:09:09:6a:e3:d4:9e:8c:
         f0:cf:59:6e:8c:37:e9:4b:35:28:7e:c9:15:29:01:de:19:2a:
         dc:f9:a7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqysBLTKigh6AfBvIYOz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1
MmIwZWQwHhcNMjUwNDEzMTUwMTA4WhcNMjUwNDE0MTUwMTA4WjAzMTEwLwYDVQQD
EyhmOGRhMTA4NTIyNDIzZGUyZGMyMTI1OWNmNTQ1NjE3YzQ4OWYzZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9tunhiYR1zDhMBjUuhA575qwe/g
CgfLIj6hnKeYIKpnZF3X8SIgcFp5G00i43e/+Wu6jJBHFWfxA92cLN01Q4Eo6UAS
ucLP4lmRpCCitn3/NTOUYARwp/lNkP1yFhuWLqsrZAA0iTgVvz6JK/lLiCQHG3Qd
YYTT2pNhREka3rOUSXVgPXBvgrQxhegONGpg08PkOPMrdieBMWe8oWJn2zvjaEqz
RjY91rPfEmAjtOyqQZXQ+HQcY78rAi061UyFSkDQUyVqeFvsR4Mz700J+wYKEJnT
jpg5Ma4BzNLmVthNoEQEMq0wYrp/NUtsEpL5SYG+Dr02rUlfEcciswNcawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjaEIUiQj3i3CElnPVFYXxInz44MB8GA1UdIwQY
MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt
YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5
LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTQ26IPM
hgh7lI3ucWbIkxFA7IssfM0tq/4rhANjjqBvU5p+g7VueXu0CmVYeGC0g+z7BzPp
avE4GlopWojAgtsDA7cUrNCzYJoYxqoLpLPiUrndEn2n5eZrtMxkDpMutNRQhuSn
DqxgTyWlum2wXEmAii/2uSXmSP3W/rQbWwJMTTSXDJTbkHAk/F3H82SXHSV1T7ZW
WAt8tZThEairqONpcit/XfSx5FTW7rGWTJPM9PYmjL2zKtDSIDlMXoC+NqeWKTQi
6aL7eZH7PTeh4qEfEPSEwhmktj+5rUHUyQEFqroJCWrj1J6M8M9Zbow36Us1KH7J
FSkB3hkq3Pmn/g==
-----END CERTIFICATE-----