Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          n9ZgjnBGOyqQLSYjZjWJJ2x0rC4FgZ9JPEyzVVA74Fw=
Subject key identifier:   AD:0D:58:E1:5A:1B:72:44:E9:0F:5B:2C:29:3B:5E:67:96:14:6A:21
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       01962E2ADF82A42FB31AD1C3364EEFC64BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          0D71
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: O30lZWc+4Kpdx3LX/6M7Lsy0yN/lKg5KSa+pAJEPxKQ=)
                          2: LxqOr6kmcQm7vZYRRdP1VkRGlgU.roa (hash: 3mO1xiAyPsi9YB2Utyx+mrmowxSoZyyyseC61QFbUek=)
                          3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:df:82:a4:2f:b3:1a:d1:c3:36:4e:ef:c6:4b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=ad0d58e15a1b7244e90f5b2c293b5e6796146a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:02:cb:06:38:91:30:f7:41:64:90:63:5d:
                    16:70:6a:1b:0c:50:b9:6c:df:8d:25:ec:ae:a6:6d:
                    2c:d9:ba:cd:1c:6d:01:65:2b:b7:04:1c:56:68:92:
                    cb:54:76:32:23:fb:67:48:0c:b4:8b:64:ec:ca:23:
                    ce:eb:ea:e0:cd:c7:a2:55:42:fe:86:42:1a:7d:5f:
                    e3:ed:31:5b:82:1b:ac:c1:d7:8c:47:c2:49:f0:7b:
                    d6:25:97:aa:d3:c9:48:ab:1a:ae:02:01:e5:92:bc:
                    a8:3f:1b:6a:4e:3b:a2:cc:a3:71:35:0d:0a:c1:df:
                    5b:bc:b9:f3:11:83:15:cf:f5:a4:c9:95:ac:7b:e4:
                    1b:97:f5:dc:10:82:7d:da:c7:5b:d5:79:dc:8a:9a:
                    46:2b:73:8e:51:c6:73:7b:b1:90:51:86:cd:b9:e2:
                    be:91:3e:43:6f:fc:ca:90:57:b7:38:1c:c9:75:de:
                    b9:f9:6b:3a:48:9d:13:bc:86:aa:4a:42:95:e5:b5:
                    6c:43:3b:17:88:1f:9b:4b:62:30:79:5c:bc:1d:4b:
                    05:aa:44:80:de:0b:4f:cc:c4:f7:b3:ce:85:61:d2:
                    89:0b:9d:3c:5f:5e:20:61:ed:be:9a:47:1d:74:9e:
                    2d:d9:40:4e:b2:b2:d1:63:1d:ee:35:f4:37:bd:a3:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0D:58:E1:5A:1B:72:44:E9:0F:5B:2C:29:3B:5E:67:96:14:6A:21
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:b5:d3:02:1b:75:b6:4c:df:88:c3:e9:69:ae:85:42:66:
         ae:16:1c:ad:be:95:11:01:1b:7f:6c:e0:69:d2:65:fa:08:83:
         cd:6c:43:b7:a3:56:9a:f4:61:03:df:47:92:a9:ab:0d:9c:1e:
         85:d4:eb:82:a1:5a:6e:9d:38:dc:66:3d:95:3d:e1:ba:aa:0e:
         6b:4e:99:05:b4:9a:5c:61:6b:1d:bb:ab:d5:dd:25:70:57:79:
         c7:6d:7f:36:62:40:8a:5b:cb:3b:7d:7e:c9:f2:b7:6b:cb:ae:
         f5:82:f6:9d:bf:8f:77:50:e6:7a:3b:20:16:47:79:a8:22:9d:
         ed:ce:03:d1:02:a1:b4:14:80:50:b7:e1:0d:f2:33:ed:c9:16:
         18:ce:15:09:87:df:c9:07:a6:09:2f:e4:48:89:c8:ea:2c:a7:
         cc:c8:86:10:34:68:90:48:45:4c:56:63:e3:fd:a7:56:e4:5b:
         0a:55:83:5c:ee:4e:61:2d:03:ea:f2:70:2c:67:b9:05:0d:8d:
         da:2b:b9:95:5f:96:e0:f5:eb:86:68:6e:ab:87:6d:1f:fa:0b:
         51:b3:8b:16:3b:4d:b6:86:fb:c1:1d:9d:49:f2:61:47:85:fd:
         90:49:80:09:5e:cf:60:74:36:f3:74:cc:8a:e9:43:50:5b:4e:
         8f:66:c2:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKt+CpC+zGtHDNk7vxkvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjUwNDEzMDgwMTIzWhcNMjUwNDE0MDgwMTIzWjAzMTEwLwYDVQQD
EyhhZDBkNThlMTVhMWI3MjQ0ZTkwZjViMmMyOTNiNWU2Nzk2MTQ2YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3asCywY4kTD3QWSQY10WcGobDFC5
bN+NJeyupm0s2brNHG0BZSu3BBxWaJLLVHYyI/tnSAy0i2TsyiPO6+rgzceiVUL+
hkIafV/j7TFbghuswdeMR8JJ8HvWJZeq08lIqxquAgHlkryoPxtqTjuizKNxNQ0K
wd9bvLnzEYMVz/WkyZWse+Qbl/XcEIJ92sdb1XncippGK3OOUcZze7GQUYbNueK+
kT5Db/zKkFe3OBzJdd65+Ws6SJ0TvIaqSkKV5bVsQzsXiB+bS2IweVy8HUsFqkSA
3gtPzMT3s86FYdKJC508X14gYe2+mkcddJ4t2UBOsrLRYx3uNfQ3vaM0UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0NWOFaG3JE6Q9bLCk7XmeWFGohMB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvO10wIb
dbZM34jD6WmuhUJmrhYcrb6VEQEbf2zgadJl+giDzWxDt6NWmvRhA99HkqmrDZwe
hdTrgqFabp043GY9lT3huqoOa06ZBbSaXGFrHbur1d0lcFd5x21/NmJAilvLO31+
yfK3a8uu9YL2nb+Pd1DmejsgFkd5qCKd7c4D0QKhtBSAULfhDfIz7ckWGM4VCYff
yQemCS/kSInI6iynzMiGEDRokEhFTFZj4/2nVuRbClWDXO5OYS0D6vJwLGe5BQ2N
2iu5lV+W4PXrhmhuq4dtH/oLUbOLFjtNtob7wR2dSfJhR4X9kEmACV7PYHQ283TM
iulDUFtOj2bCRQ==
-----END CERTIFICATE-----