Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          wM6h85mt0GGuyhorWX/5BmWXHoUU2B+UemlzJ0uN07I=
Subject key identifier:   BB:06:99:9E:ED:5D:E6:C3:C8:9D:50:1E:0A:62:41:A5:3A:4A:01:89
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       01962E61A3D1388E38114C6E55AE3CD76560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1514
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: P9YDugl+lu22un/AJmwQ+cvky1EHtJ4NVGQNG2wqtFE=)
                          2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=)
                          3: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=)
                          4: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=)
                          5: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=)
                          6: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=)
                          7: NfUnQ-O42D51XKIYtUM-enrgq28.roa (hash: QhgxpbRg3wpHFfse32zYgTIu0IaNj22usVCm4EOvDbg=)
                          8: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=)
                          9: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=)
                          10: S10UUzDOnmeeWWxvUaONEcXQAi8.roa (hash: ujWfJ7GyqiNWgO9jJtSvnGZuJ7465paQyIDlxKBrdko=)
                          11: T7jb3VKQmKxb_hUshflvh5MIDCs.roa (hash: jbLxURfMGrqFJlERtfyC3AuM42PXRkscle6+mhW8AX0=)
                          12: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=)
                          13: UL_XqoqGTTWGEVhImq5X-9zOVrE.roa (hash: g+ulsD4HEDP8q2GNuKa/nIFiaIn0ZbF6fYEGT+Sdri0=)
                          14: VWY8XiWq4Jote7W-6rigfrKoiY4.roa (hash: ON7HuggQtcTWGIVCoLH7d6Q/DUJJsZCop+RTdEiL82o=)
                          15: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=)
                          16: ZDrZ1mjoS2voGn-ACVQHaHdTwkM.roa (hash: ZGiNQJZYPw7E0PhOtB1tG4vpo/4veSkL6bOJ9GvYWRE=)
                          17: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=)
                          18: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=)
                          19: agXt9_lVvCGbqZ8zrKKiS_mUy2E.roa (hash: 3LDkltUt39lyuNt50RL0JrUq8hhCsHNy15R/1YCL/Vw=)
                          20: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=)
                          21: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=)
                          22: f-HfYE3tX08g41YUmhXPV2WaVRA.roa (hash: R8ct2mrJ7mgy8m10CdOIH7/hc01eqWXKbXHIQEYh2JM=)
                          23: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=)
                          24: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=)
                          25: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=)
                          26: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=)
                          27: nmXKG7O5Y4Y-3VQd-oJvUHMEIEY.roa (hash: qsL3cjqC+DzRSqTDxZdudYHZ+K/KlZvY/xyn2uR0PZU=)
                          28: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=)
                          29: wDzexJPbmuXoTEUF9T28nMF6mio.roa (hash: fjGLTzQvNG3nbcT8P7SnuHvQjGewBX6Eu/zyAfDOMnU=)
                          30: xUXBE40oIxonI2rdk7VzQpzz0LE.roa (hash: ntMdjj60VVTzKWDb11pY1Uxeklwz6iMkL+l3QqN6Y/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a3:d1:38:8e:38:11:4c:6e:55:ae:3c:d7:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=bb06999eed5de6c3c89d501e0a6241a53a4a0189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:34:7b:41:b9:76:47:e3:4c:82:d3:65:1c:
                    81:f0:21:bc:86:a2:09:e5:4a:fb:53:aa:a4:e1:ea:
                    93:b8:c7:ea:3a:8b:f1:5b:fe:fa:9c:6d:28:34:84:
                    f2:d1:39:36:63:8b:a9:cf:8a:76:86:73:65:9f:ce:
                    cf:20:f9:e6:22:ef:c9:81:74:3c:8b:82:4f:7d:a1:
                    b1:0b:7f:cd:41:15:31:f4:27:c1:ec:e0:6c:e7:42:
                    a8:1b:17:d1:b1:c7:d7:58:4d:97:f9:11:61:24:67:
                    64:1a:95:cd:aa:5e:b2:b8:3f:f4:5b:7a:97:c6:9e:
                    f3:50:cc:64:27:a9:90:c3:1f:9c:e9:4e:19:68:f7:
                    90:45:d5:0b:2a:06:72:b4:7c:71:ac:fc:e5:3d:61:
                    32:8e:d2:bf:97:c9:97:ff:12:4a:3e:ff:a0:f6:95:
                    2d:bd:6f:d9:44:97:d3:50:ec:4d:60:06:d0:89:43:
                    d3:71:3c:ca:27:e2:43:30:40:c5:86:f1:6f:f3:5b:
                    e1:1d:de:75:70:ba:e1:1a:07:b7:29:7e:d2:fb:91:
                    80:41:06:ed:a9:e4:b8:45:af:92:9c:66:a2:c5:1e:
                    b9:3e:60:e7:d8:36:34:e5:96:f9:84:b1:ce:1f:3c:
                    e6:da:fe:68:0f:ad:ab:d5:fe:b5:5f:1e:98:4b:7e:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:06:99:9E:ED:5D:E6:C3:C8:9D:50:1E:0A:62:41:A5:3A:4A:01:89
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f5:eb:c4:b9:c9:ac:02:df:2a:6c:cf:a3:86:13:18:a0:3e:
         51:cc:28:c8:0a:e1:b6:ae:ea:45:82:bd:f5:91:9a:7e:3e:d9:
         e7:74:ab:37:af:40:71:3c:2b:07:6b:50:ae:eb:a0:79:27:c1:
         a6:14:e6:41:83:69:2c:66:66:18:ef:99:6c:9f:f8:2c:48:bf:
         69:43:d1:fb:bd:4a:92:c3:10:f0:41:67:1a:2e:5a:fd:bf:18:
         8f:bb:59:27:cc:e3:25:9b:f4:5c:5a:ac:1c:c8:8b:cc:d2:8d:
         4b:68:d1:f9:4c:ee:7d:07:5a:c9:2f:37:cd:39:da:3c:0d:91:
         75:f2:88:d1:45:f7:43:a0:cf:e5:1a:5f:fd:45:86:50:77:e3:
         14:d0:38:04:cf:e5:1e:cb:ed:2b:a8:2c:6a:b7:cf:32:1b:12:
         d2:0c:8e:9f:82:8d:e2:8e:d1:cc:5b:d5:a0:5c:82:07:82:6a:
         9a:36:bb:1a:d7:7a:ad:f9:e0:00:43:1b:c6:e4:d3:f4:da:b4:
         08:29:58:95:f6:10:c6:8a:fe:d1:f3:6d:17:ac:b4:f0:2a:ee:
         a6:bc:a3:3f:61:19:9f:e3:23:d2:df:4d:c2:57:54:2f:1e:ac:
         52:d1:a7:cc:14:b9:23:88:7d:d6:9c:b1:d7:5f:bb:37:3e:21:
         75:fa:46:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaPROI44EUxuVa4812VgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwNDEzMDkwMTEyWhcNMjUwNDE0MDkwMTEyWjAzMTEwLwYDVQQD
EyhiYjA2OTk5ZWVkNWRlNmMzYzg5ZDUwMWUwYTYyNDFhNTNhNGEwMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGY0e0G5dkfjTILTZRyB8CG8hqIJ
5Ur7U6qk4eqTuMfqOovxW/76nG0oNITy0Tk2Y4upz4p2hnNln87PIPnmIu/JgXQ8
i4JPfaGxC3/NQRUx9CfB7OBs50KoGxfRscfXWE2X+RFhJGdkGpXNql6yuD/0W3qX
xp7zUMxkJ6mQwx+c6U4ZaPeQRdULKgZytHxxrPzlPWEyjtK/l8mX/xJKPv+g9pUt
vW/ZRJfTUOxNYAbQiUPTcTzKJ+JDMEDFhvFv81vhHd51cLrhGge3KX7S+5GAQQbt
qeS4Ra+SnGaixR65PmDn2DY05Zb5hLHOHzzm2v5oD62r1f61Xx6YS363uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsGmZ7tXebDyJ1QHgpiQaU6SgGJMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvXrxLnJ
rALfKmzPo4YTGKA+UcwoyArhtq7qRYK99ZGafj7Z53SrN69AcTwrB2tQruugeSfB
phTmQYNpLGZmGO+ZbJ/4LEi/aUPR+71KksMQ8EFnGi5a/b8Yj7tZJ8zjJZv0XFqs
HMiLzNKNS2jR+UzufQdayS83zTnaPA2RdfKI0UX3Q6DP5Rpf/UWGUHfjFNA4BM/l
HsvtK6gsarfPMhsS0gyOn4KN4o7RzFvVoFyCB4Jqmja7Gtd6rfngAEMbxuTT9Nq0
CClYlfYQxor+0fNtF6y08CrupryjP2EZn+Mj0t9NwldULx6sUtGnzBS5I4h91pyx
11+7Nz4hdfpG0Q==
-----END CERTIFICATE-----