Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File:                     SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier:          1v8eMgkJTA6WmTkZE/y3XuhBItwwwopVW7PY+gAVUKI=
Subject key identifier:   BC:2A:0A:5C:96:D0:D8:6D:D2:E9:D5:97:36:30:C0:07:9E:33:1C:D9
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer:       /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial:       01962E99606CA0247CBC8DDFAE343DCD3D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number:          0FA2
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: gp2UFP66JeqbB/dH/SOXEku6mcZVZf38xctrsalU21k=)
                          2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:60:6c:a0:24:7c:bc:8d:df:ae:34:3d:cd:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=bc2a0a5c96d0d86dd2e9d5973630c0079e331cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:a5:a7:6a:b9:62:62:d8:28:94:85:58:13:
                    80:1f:5a:28:0f:20:c6:3f:1c:e0:14:93:b6:62:bf:
                    bf:73:72:20:01:21:ab:48:70:0f:42:80:83:25:7f:
                    d9:6a:b4:7d:8a:a6:d0:33:c5:5f:0b:ae:ea:2d:c8:
                    cd:91:f6:e9:a4:a9:e7:4c:c3:8f:e0:27:97:04:69:
                    57:b6:60:81:3e:f6:dc:a5:4f:19:3f:71:b7:93:27:
                    d4:91:bc:dd:d1:6c:ed:14:85:90:fd:d4:cb:0f:6f:
                    09:89:9f:53:f3:cb:88:fe:72:c6:1e:e5:22:cc:d4:
                    21:94:03:bd:5f:9a:d2:78:ee:5b:f6:aa:88:cf:f4:
                    bd:4c:6d:63:de:9a:4f:a4:42:43:00:cf:ba:20:a7:
                    11:04:ae:d0:57:87:88:33:75:35:7a:04:4b:3c:49:
                    5f:c1:7c:cc:45:11:22:03:22:2e:60:00:12:70:2a:
                    d3:93:14:53:d4:e4:e3:e1:72:ed:33:fd:47:fd:8a:
                    ae:06:1c:cb:81:57:22:8d:31:b4:5d:16:4a:cf:c7:
                    63:61:80:90:f3:18:34:0f:3b:db:ce:35:9f:a1:ed:
                    f0:a2:db:19:67:95:87:da:34:85:05:56:c2:76:0e:
                    d4:37:31:26:f3:d7:b5:f3:2e:db:ed:47:c4:9f:e6:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2A:0A:5C:96:D0:D8:6D:D2:E9:D5:97:36:30:C0:07:9E:33:1C:D9
            X509v3 Authority Key Identifier:
                keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a2:6e:98:c2:ee:43:49:0a:c6:1e:de:fc:da:fe:47:c1:94:
         68:bc:a3:2b:f2:67:34:ab:0f:0f:1b:19:8d:3f:25:60:06:21:
         d3:5f:86:ec:aa:8f:46:58:3b:3f:0d:9f:5d:22:c9:13:44:19:
         26:39:84:95:f1:f0:8b:f8:ce:9d:a1:99:b4:cd:12:16:c9:70:
         c2:51:18:6a:79:2e:5f:c5:68:d1:2f:f7:2f:c5:9e:fa:72:1a:
         53:8f:d7:ee:96:a9:c9:bd:cc:76:63:47:e7:36:3f:27:a9:26:
         d5:e2:97:88:1a:a5:ba:7c:dc:fa:b5:03:cc:2b:b2:ca:82:33:
         68:c7:87:c1:51:94:00:46:a3:79:6d:77:0d:e4:63:c3:2b:c1:
         94:13:35:db:0f:51:6e:1f:74:ff:73:a2:a9:a7:1d:15:73:c7:
         6c:a5:58:39:5a:6c:95:1b:ab:a2:e8:f7:da:45:e5:e5:e6:08:
         91:1e:d1:61:c5:0d:19:d8:7f:6f:cf:e5:0c:46:b1:7c:2c:e0:
         51:3c:87:89:34:d2:0e:67:ff:28:d1:fc:81:29:75:ce:12:64:
         cb:aa:98:b0:58:72:cb:3e:2d:30:1b:27:85:99:5c:7d:ee:22:
         ba:eb:73:f2:7c:79:50:41:ba:94:38:4a:57:ab:63:a8:55:a5:
         f2:91:2c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWBsoCR8vI3frjQ9zT2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDQyM2FhMTdkMDRmNTZjNjkwMDQwMzQ1ZDY3NjJiYmZk
MWY4OGIwHhcNMjUwNDEzMTAwMjA1WhcNMjUwNDE0MTAwMjA1WjAzMTEwLwYDVQQD
EyhiYzJhMGE1Yzk2ZDBkODZkZDJlOWQ1OTczNjMwYzAwNzllMzMxY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Olp2q5YmLYKJSFWBOAH1ooDyDG
PxzgFJO2Yr+/c3IgASGrSHAPQoCDJX/ZarR9iqbQM8VfC67qLcjNkfbppKnnTMOP
4CeXBGlXtmCBPvbcpU8ZP3G3kyfUkbzd0WztFIWQ/dTLD28JiZ9T88uI/nLGHuUi
zNQhlAO9X5rSeO5b9qqIz/S9TG1j3ppPpEJDAM+6IKcRBK7QV4eIM3U1egRLPElf
wXzMRREiAyIuYAAScCrTkxRT1OTj4XLtM/1H/YquBhzLgVcijTG0XRZKz8djYYCQ
8xg0DzvbzjWfoe3wotsZZ5WH2jSFBVbCdg7UNzEm89e18y7b7UfEn+ZSbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwqClyW0Nht0unVlzYwwAeeMxzZMB8GA1UdIwQY
MBaAFEgEI6oX0E9WxpAEA0XWdiu/0fiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEt
Y2RhNTc0MjZkZTIyLzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEtY2RhNTc0MjZkZTIy
LzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKJumMLu
Q0kKxh7e/Nr+R8GUaLyjK/JnNKsPDxsZjT8lYAYh01+G7KqPRlg7Pw2fXSLJE0QZ
JjmElfHwi/jOnaGZtM0SFslwwlEYankuX8Vo0S/3L8We+nIaU4/X7papyb3MdmNH
5zY/J6km1eKXiBqlunzc+rUDzCuyyoIzaMeHwVGUAEajeW13DeRjwyvBlBM12w9R
bh90/3OiqacdFXPHbKVYOVpslRurouj32kXl5eYIkR7RYcUNGdh/b8/lDEaxfCzg
UTyHiTTSDmf/KNH8gSl1zhJky6qYsFhyyz4tMBsnhZlcfe4iuutz8nx5UEG6lDhK
V6tjqFWl8pEsoQ==
-----END CERTIFICATE-----