Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File:                     uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier:          lutLI/qUfmdys8xYaUrDFvasxr3IfxQZx0oLLo5hx/o=
Subject key identifier:   9A:09:8C:09:64:23:41:50:AA:BA:12:79:1D:45:19:21:8D:57:F7:49
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer:       /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial:       01962F3DCC200D606485D6C0A2D2248D1066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number:          0D6D
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
                          2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: T1n+5NCesxMyYFXHyIM/nbt4sFWrDx6sZ0KxYnBE+V0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:20:0d:60:64:85:d6:c0:a2:d2:24:8d:10:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=9a098c0964234150aaba12791d4519218d57f749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:ac:61:45:0e:e0:c8:98:8e:ab:19:21:e3:
                    7d:db:e0:ea:88:67:f7:80:61:85:d8:72:c9:86:c6:
                    e7:57:bd:a8:ad:cf:a8:9f:15:1e:11:d4:ef:5a:fa:
                    8f:ef:5d:e1:d2:ad:8f:02:24:a9:29:eb:e5:19:be:
                    1f:22:ae:43:c6:95:3a:7b:d2:d8:57:be:ed:d1:5b:
                    85:e5:22:78:e3:95:8a:d7:73:51:43:9f:5f:77:ca:
                    c3:7b:91:7d:91:89:f0:6a:a7:31:b4:7b:0e:e0:2d:
                    9b:2c:ed:f5:85:e5:cc:95:1e:85:c3:3f:82:f1:ee:
                    e5:5f:44:56:01:df:d2:98:5e:99:c4:d0:9a:90:dd:
                    50:39:43:03:2e:e6:1b:ef:6e:96:8c:9b:9b:82:cf:
                    00:fd:6b:f9:78:37:b4:ed:5f:71:9e:62:5f:b1:0f:
                    ce:e9:6b:5c:41:b1:84:32:bc:45:5f:b2:29:31:30:
                    0c:4f:f2:10:64:4f:6f:22:34:de:79:14:af:ce:74:
                    52:cd:30:cd:ed:51:d8:f6:52:15:cd:d0:32:ac:c0:
                    27:d0:8f:cf:10:98:dd:15:1b:5a:6b:bb:89:7a:f7:
                    c6:77:37:ac:57:63:cf:89:e5:6c:ad:78:f3:c8:2f:
                    d9:20:74:05:1b:3b:c4:90:bc:af:94:44:cd:9b:16:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:09:8C:09:64:23:41:50:AA:BA:12:79:1D:45:19:21:8D:57:F7:49
            X509v3 Authority Key Identifier:
                keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:8e:4a:3b:0d:09:52:07:cb:ab:46:6c:70:11:2c:29:a8:
         81:58:d1:c4:4f:cc:3c:2a:ad:aa:64:6b:77:a0:6d:17:2c:9e:
         72:6a:c9:ec:d4:c5:cb:d6:d7:32:7a:77:5a:c4:6e:e6:b4:2c:
         fc:f9:de:c7:3a:85:6f:7a:c3:a6:25:7b:da:73:4b:93:cb:f6:
         75:9b:b6:81:76:4e:af:e7:27:f2:1a:c0:84:5c:f2:af:81:6d:
         b7:89:5f:47:97:db:8c:a5:3f:7f:52:14:41:03:d6:30:5c:ea:
         a7:56:b8:b9:9e:b7:fa:ea:3f:f4:b9:fb:09:a4:47:7d:e9:e3:
         1d:33:7a:33:71:d9:29:b1:06:a1:42:2b:c1:d1:86:59:95:d5:
         93:e6:f0:d2:78:94:15:dc:de:e2:a5:cc:98:1d:d3:60:76:49:
         82:2d:f9:8d:92:8c:c1:f0:55:ed:9a:f9:03:7d:85:d5:f3:ef:
         17:58:4b:42:43:d2:9e:a7:e8:d0:ee:2f:80:4b:51:fd:89:b6:
         55:93:0e:8d:e5:42:21:04:56:1f:af:58:3e:15:75:fd:c0:96:
         46:c2:95:d9:f5:47:65:a4:6f:80:1a:56:d4:8f:61:62:c0:7a:
         bd:c1:d8:15:94:39:a5:e1:d4:e1:65:50:f3:a7:24:bc:ce:c0:
         64:e0:8f:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcwgDWBkhdbAotIkjRBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3
MmVkZGQwHhcNMjUwNDEzMTMwMTQxWhcNMjUwNDE0MTMwMTQxWjAzMTEwLwYDVQQD
Eyg5YTA5OGMwOTY0MjM0MTUwYWFiYTEyNzkxZDQ1MTkyMThkNTdmNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyGsYUUO4MiYjqsZIeN92+DqiGf3
gGGF2HLJhsbnV72orc+onxUeEdTvWvqP713h0q2PAiSpKevlGb4fIq5DxpU6e9LY
V77t0VuF5SJ445WK13NRQ59fd8rDe5F9kYnwaqcxtHsO4C2bLO31heXMlR6Fwz+C
8e7lX0RWAd/SmF6ZxNCakN1QOUMDLuYb726WjJubgs8A/Wv5eDe07V9xnmJfsQ/O
6WtcQbGEMrxFX7IpMTAMT/IQZE9vIjTeeRSvznRSzTDN7VHY9lIVzdAyrMAn0I/P
EJjdFRtaa7uJevfGdzesV2PPieVsrXjzyC/ZIHQFGzvEkLyvlETNmxZHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoJjAlkI0FQqroSeR1FGSGNV/dJMB8GA1UdIwQY
MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct
ZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5
LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP56OSjsN
CVIHy6tGbHARLCmogVjRxE/MPCqtqmRrd6BtFyyecmrJ7NTFy9bXMnp3WsRu5rQs
/PnexzqFb3rDpiV72nNLk8v2dZu2gXZOr+cn8hrAhFzyr4Ftt4lfR5fbjKU/f1IU
QQPWMFzqp1a4uZ63+uo/9Ln7CaRHfenjHTN6M3HZKbEGoUIrwdGGWZXVk+bw0niU
Fdze4qXMmB3TYHZJgi35jZKMwfBV7Zr5A32F1fPvF1hLQkPSnqfo0O4vgEtR/Ym2
VZMOjeVCIQRWH69YPhV1/cCWRsKV2fVHZaRvgBpW1I9hYsB6vcHYFZQ5peHU4WVQ
86ckvM7AZOCP/A==
-----END CERTIFICATE-----