Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File:                     tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier:          c+DrbZECIw+wxlvEB5DIrZOV7TABk5qAYdTrnImrVOI=
Subject key identifier:   9F:FE:C5:7A:78:77:0B:59:9B:E9:85:E9:A9:6A:9A:5B:AC:47:D8:BB
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer:       /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial:       01962F74D4999E9A33C77AB5B27CAE51550F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number:          078B
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
                          2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
                          3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: PwSGvkFELcDI807keClXFxDLikwspEfnRPP6vneOGS4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d4:99:9e:9a:33:c7:7a:b5:b2:7c:ae:51:55:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=9ffec57a78770b599be985e9a96a9a5bac47d8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:41:c3:1b:af:7c:d0:f9:7d:9b:34:29:ac:
                    97:bf:e6:b6:61:7c:07:21:28:26:37:4e:7b:c7:63:
                    03:52:b2:37:9d:f0:b5:e8:67:33:39:a5:ad:70:97:
                    f2:cf:e9:0d:c9:5a:d6:2b:c1:f6:37:3c:0c:08:15:
                    1d:1a:3a:57:e0:e5:5d:ab:6a:12:b8:be:1e:a2:f2:
                    9d:0a:bc:50:7c:d7:8d:a0:07:89:24:71:7a:87:26:
                    96:22:a8:6f:ce:d5:0a:90:33:84:51:b1:a5:05:09:
                    69:f3:d4:1d:65:a0:1e:f0:95:73:da:f8:10:91:fd:
                    05:b6:ce:34:1c:0a:00:c4:d2:55:9b:87:df:53:26:
                    59:2d:1d:c0:51:2f:28:2d:f3:91:f5:98:5f:fa:6e:
                    c1:60:48:c5:a0:3f:97:4e:00:7d:e0:1b:60:9d:53:
                    02:a7:77:72:7a:0f:b1:8d:57:44:47:ac:ad:8c:15:
                    1c:71:dd:b2:29:8a:2b:2c:07:38:cb:e0:ab:b4:7d:
                    d6:5d:2c:98:2c:c3:99:c7:36:c3:c2:8e:4f:ee:82:
                    32:73:8d:d3:fd:a1:d2:d4:38:da:9b:30:a4:1a:c7:
                    2d:20:e3:96:f6:b7:6d:66:d1:d5:db:ca:9f:fd:6f:
                    77:8c:f6:35:2c:a4:bc:eb:4f:f3:04:23:9e:90:c2:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:C5:7A:78:77:0B:59:9B:E9:85:E9:A9:6A:9A:5B:AC:47:D8:BB
            X509v3 Authority Key Identifier:
                keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:47:6c:39:fa:db:ea:a0:b3:41:f6:22:f5:43:14:c5:a8:bb:
         fd:27:6a:17:46:89:1d:c0:e0:e3:ef:40:68:ef:0c:fb:b8:e1:
         48:af:2f:5a:56:f5:46:96:9a:da:3e:af:19:1b:d5:89:79:9f:
         a1:af:38:13:e9:9b:65:38:c2:9a:08:c1:75:8a:da:86:21:d3:
         34:c1:d1:90:96:45:d2:de:a9:2a:ff:ac:2f:8e:c5:0e:e2:24:
         21:e9:bf:51:07:4e:88:4f:fb:ed:21:1e:6f:44:c8:c9:f0:a3:
         67:ff:87:87:cc:79:a4:04:2d:2c:6c:87:4c:2d:f8:11:08:47:
         f2:f8:85:15:1b:72:4a:3d:4a:69:cd:b7:d9:a8:92:f1:5e:6b:
         8e:94:c8:60:d7:22:eb:99:59:00:4c:af:0d:3d:65:41:a4:b4:
         ac:a2:7e:b6:bb:9d:fb:51:3d:34:fe:ca:b9:6c:23:56:89:4f:
         01:92:8d:96:64:c4:4e:77:1f:cc:1d:a4:e8:8b:ec:87:96:a0:
         8f:38:40:c2:a1:9c:bb:f2:24:b6:95:88:70:23:1d:bf:6a:b0:
         66:37:d8:2d:05:27:3a:49:44:70:a0:cd:5e:a0:e9:20:45:73:
         80:1d:38:8f:af:03:f0:21:3b:e0:8d:e1:d4:87:7c:00:23:aa:
         51:9d:fc:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNSZnpozx3q1snyuUVUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4
ZWE3YzIwHhcNMjUwNDEzMTQwMTQ3WhcNMjUwNDE0MTQwMTQ3WjAzMTEwLwYDVQQD
Eyg5ZmZlYzU3YTc4NzcwYjU5OWJlOTg1ZTlhOTZhOWE1YmFjNDdkOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU5BwxuvfND5fZs0KayXv+a2YXwH
ISgmN057x2MDUrI3nfC16GczOaWtcJfyz+kNyVrWK8H2NzwMCBUdGjpX4OVdq2oS
uL4eovKdCrxQfNeNoAeJJHF6hyaWIqhvztUKkDOEUbGlBQlp89QdZaAe8JVz2vgQ
kf0Fts40HAoAxNJVm4ffUyZZLR3AUS8oLfOR9Zhf+m7BYEjFoD+XTgB94BtgnVMC
p3dyeg+xjVdER6ytjBUccd2yKYorLAc4y+CrtH3WXSyYLMOZxzbDwo5P7oIyc43T
/aHS1DjamzCkGsctIOOW9rdtZtHV28qf/W93jPY1LKS860/zBCOekMKpKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/+xXp4dwtZm+mF6alqmlusR9i7MB8GA1UdIwQY
MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt
YzllMTQxMzMzZDU4LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4
LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEdsOfrb
6qCzQfYi9UMUxai7/SdqF0aJHcDg4+9AaO8M+7jhSK8vWlb1Rpaa2j6vGRvViXmf
oa84E+mbZTjCmgjBdYrahiHTNMHRkJZF0t6pKv+sL47FDuIkIem/UQdOiE/77SEe
b0TIyfCjZ/+Hh8x5pAQtLGyHTC34EQhH8viFFRtySj1Kac232aiS8V5rjpTIYNci
65lZAEyvDT1lQaS0rKJ+trud+1E9NP7KuWwjVolPAZKNlmTETncfzB2k6Ivsh5ag
jzhAwqGcu/IktpWIcCMdv2qwZjfYLQUnOklEcKDNXqDpIEVzgB04j68D8CE74I3h
1Id8ACOqUZ38zg==
-----END CERTIFICATE-----