Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File:                     d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier:          hX7/s/qGVvepZ2fZDAaO7VK/+jzgRdE9D9lGPb5VnWc=
Subject key identifier:   45:1F:CD:97:E6:45:9B:56:2E:A3:0F:65:73:70:7F:87:2C:01:3A:CD
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       01962FAB38157A6B0A15F32ABCB72A514EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number:          0C3C
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
                          2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
                          3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
                          4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
                          5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: qpELfSJWK4gx+3OPdHFPZlNp4qYA73WC1KDxAV4YegE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:38:15:7a:6b:0a:15:f3:2a:bc:b7:2a:51:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=451fcd97e6459b562ea30f6573707f872c013acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f8:94:0d:6e:fd:37:8c:f1:a8:4a:86:fa:b0:
                    9c:d3:1a:3e:c8:b6:84:1e:61:2d:62:81:c1:71:97:
                    1a:4d:65:bf:e0:2c:fa:9c:46:6b:27:ed:c1:76:15:
                    55:e9:8f:d8:e5:63:e3:58:59:e1:bc:d7:7d:6c:cf:
                    90:2b:e1:2c:37:0f:0f:a2:a6:aa:d8:28:fa:07:0b:
                    ab:ad:77:be:1e:f4:81:40:c9:27:d6:fb:53:04:56:
                    17:28:3d:59:8e:e6:d6:4c:22:23:e5:0f:13:c6:9b:
                    43:62:36:3a:52:5c:c1:ed:84:d1:17:75:31:de:80:
                    d7:f4:05:4b:29:f5:09:98:62:39:d7:fd:dc:99:8b:
                    60:27:c4:bc:b7:c5:00:35:6a:0a:2d:84:4a:6d:53:
                    36:b2:f2:32:38:51:8d:6d:5a:03:40:03:91:a8:fb:
                    8b:b6:57:c3:31:ae:0c:7e:b3:a6:f8:19:06:7e:eb:
                    47:cd:ec:27:97:07:3d:df:51:21:9f:65:fb:dc:1b:
                    ad:28:32:3e:bb:6d:9a:53:e3:41:af:6a:0b:b7:bd:
                    25:1a:85:58:f7:72:4c:a7:b6:a1:e4:34:f5:43:21:
                    67:90:2d:ec:df:08:db:e4:4c:32:48:aa:45:7e:83:
                    30:2e:43:3c:6c:a7:ea:4a:60:db:0b:2c:53:4d:4e:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1F:CD:97:E6:45:9B:56:2E:A3:0F:65:73:70:7F:87:2C:01:3A:CD
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:05:38:ec:71:6f:d7:70:62:72:be:af:70:f9:56:62:86:
         87:d9:4f:19:02:eb:fd:f2:8d:0b:56:20:74:1d:b1:df:9b:68:
         83:9b:ac:da:e9:ac:35:85:18:23:20:0a:c5:75:a7:17:d8:07:
         37:1d:82:d1:b0:3a:ca:76:5e:fb:d7:9a:7a:6c:ab:84:cc:72:
         34:a7:2a:61:4d:48:bf:12:6b:ee:c1:5a:22:d4:bd:74:1f:d8:
         d8:d3:34:14:32:09:18:7b:fb:eb:86:a5:7c:e8:4d:e2:1c:00:
         86:29:1b:1a:4d:33:0a:26:37:d9:b4:0b:db:ba:72:4a:bf:f2:
         e2:5c:99:bc:3d:0b:3f:81:ac:d4:bd:c4:4a:48:21:82:1c:4e:
         b1:82:1a:bd:4a:3d:1f:a2:75:61:5d:97:fe:19:d8:c9:5e:01:
         60:a2:1a:13:0a:b9:42:b8:be:01:8d:cf:f5:05:28:4b:34:22:
         00:38:64:69:28:72:c6:7f:87:55:ab:1a:44:7a:8f:7b:b0:8b:
         28:9b:d1:13:6a:75:e8:11:e9:7f:6f:2c:6a:b5:72:d4:c9:08:
         d2:e6:b9:35:a7:49:d1:13:6e:d8:44:5a:3a:bf:f8:cd:59:31:
         45:da:29:e6:2d:1c:52:68:17:70:b7:a2:4c:f3:74:33:46:21:
         4b:6a:ad:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzgVemsKFfMqvLcqUU62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1
MTA5NzIwHhcNMjUwNDEzMTUwMTEyWhcNMjUwNDE0MTUwMTEyWjAzMTEwLwYDVQQD
Eyg0NTFmY2Q5N2U2NDU5YjU2MmVhMzBmNjU3MzcwN2Y4NzJjMDEzYWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PiUDW79N4zxqEqG+rCc0xo+yLaE
HmEtYoHBcZcaTWW/4Cz6nEZrJ+3BdhVV6Y/Y5WPjWFnhvNd9bM+QK+EsNw8Poqaq
2Cj6BwurrXe+HvSBQMkn1vtTBFYXKD1ZjubWTCIj5Q8TxptDYjY6UlzB7YTRF3Ux
3oDX9AVLKfUJmGI51/3cmYtgJ8S8t8UANWoKLYRKbVM2svIyOFGNbVoDQAORqPuL
tlfDMa4MfrOm+BkGfutHzewnlwc931Ehn2X73ButKDI+u22aU+NBr2oLt70lGoVY
93JMp7ah5DT1QyFnkC3s3wjb5EwySKpFfoMwLkM8bKfqSmDbCyxTTU4V3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUfzZfmRZtWLqMPZXNwf4csATrNMB8GA1UdIwQY
MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt
ZDNjNTVkNGZkYTlkLzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk
LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtQFOOxx
b9dwYnK+r3D5VmKGh9lPGQLr/fKNC1YgdB2x35tog5us2umsNYUYIyAKxXWnF9gH
Nx2C0bA6ynZe+9eaemyrhMxyNKcqYU1IvxJr7sFaItS9dB/Y2NM0FDIJGHv764al
fOhN4hwAhikbGk0zCiY32bQL27pySr/y4lyZvD0LP4Gs1L3ESkghghxOsYIavUo9
H6J1YV2X/hnYyV4BYKIaEwq5Qri+AY3P9QUoSzQiADhkaShyxn+HVasaRHqPe7CL
KJvRE2p16BHpf28sarVy1MkI0ua5NadJ0RNu2ERaOr/4zVkxRdop5i0cUmgXcLei
TPN0M0YhS2qtrQ==
-----END CERTIFICATE-----