Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File:                     iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier:          HdC2+TGWH45s7hN7faw1+FbA38jop54LHy1L4joG/3w=
Subject key identifier:   6E:CB:54:0E:AD:C1:0C:9A:55:29:58:2F:6A:6A:09:1F:4A:24:29:55
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer:       /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial:       01962DF445A9C366891ADBB465615E456672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number:          11F1
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=)
                          2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: HLRjZPkxafjg6dzmEpEuu0KB9R11jjrAwpcO2IStsTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:45:a9:c3:66:89:1a:db:b4:65:61:5e:45:66:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=6ecb540eadc10c9a5529582f6a6a091f4a242955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:64:ff:2c:96:08:f8:6c:77:e1:1d:db:08:
                    f8:49:f5:1d:b4:40:59:81:c3:ae:e7:7e:37:92:cf:
                    3f:58:e3:5a:ff:13:82:55:77:03:6a:3e:be:d3:06:
                    10:d6:58:65:43:1f:ba:05:53:92:46:7b:eb:74:07:
                    6b:6a:1d:9f:10:8a:22:13:2e:95:42:b1:ff:2f:83:
                    dd:0c:d5:9b:39:42:5e:e4:b0:48:d8:f5:3b:c0:47:
                    92:e5:bd:94:e1:c4:e1:d2:40:5f:7c:db:53:16:69:
                    e9:2a:f0:cb:07:10:b8:79:57:8f:d8:70:9e:c2:ce:
                    f7:f7:21:0b:d2:ed:d8:67:22:85:d0:7f:67:c5:58:
                    c9:52:b6:78:da:f0:8f:a3:0f:07:c4:8a:e7:57:51:
                    96:45:27:98:6a:60:e5:fc:c0:35:02:d0:0d:e2:a0:
                    b0:ff:b7:ca:bc:9e:50:b2:37:d1:38:5b:86:41:b2:
                    9e:30:23:7a:5d:0e:5c:f3:16:4f:10:99:43:de:45:
                    da:65:d4:c7:e2:a3:67:5e:78:bc:c3:53:db:8d:55:
                    4f:e3:d7:a7:7d:5f:13:16:dd:9d:0d:6b:b7:13:8e:
                    cc:da:78:b8:e0:6c:20:52:a1:33:f1:2d:5b:b7:b6:
                    a9:f8:fc:00:7f:55:a8:af:62:92:3a:c3:80:09:da:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CB:54:0E:AD:C1:0C:9A:55:29:58:2F:6A:6A:09:1F:4A:24:29:55
            X509v3 Authority Key Identifier:
                keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:c9:4d:29:f3:10:63:ba:b0:66:6a:98:18:e1:1f:0a:4e:
         38:84:f5:2b:19:93:49:51:aa:06:56:65:10:36:09:00:0b:a1:
         94:42:57:63:45:1c:5b:e8:a1:49:09:4b:c7:b2:4a:71:b6:b8:
         ad:8a:89:c2:ca:e4:dd:52:80:80:1d:93:d5:16:83:3f:13:85:
         e6:dc:78:62:11:60:03:91:07:1f:2e:f6:8d:cb:fc:a3:42:2c:
         59:13:42:b3:c2:59:ff:22:19:b7:2b:d3:e6:d6:56:5e:72:42:
         f9:54:9a:a9:4d:c3:fe:7e:69:44:14:f4:77:1e:b9:a6:87:ed:
         4f:eb:02:4b:98:d8:83:8c:8a:df:02:9e:07:dc:66:59:21:c4:
         c2:1b:a7:1a:62:24:6d:2b:40:43:d9:5d:6a:82:72:d4:18:29:
         8b:b3:33:6c:68:d2:a6:af:0d:46:2e:cc:cd:0a:bd:66:9c:e7:
         ef:fc:0f:ad:aa:be:56:d2:92:4e:7c:c5:c2:af:03:c4:de:c6:
         d0:5a:d1:2b:34:cf:47:e5:ee:7e:75:54:cb:6b:20:04:11:a1:
         35:ad:21:c8:68:7c:c6:a1:fa:14:fd:69:fd:4e:f5:c9:1e:23:
         41:9d:d9:b6:7b:0d:53:33:2d:30:cf:99:65:a3:1e:0b:17:b9:
         fe:b0:cd:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EWpw2aJGtu0ZWFeRWZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjI3YzM1ZjkyOGQ5YzhiOGZmN2MyNTcyMWVmZDQ3YTkw
ZGNiNjcwHhcNMjUwNDEzMDcwMTQ1WhcNMjUwNDE0MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg2ZWNiNTQwZWFkYzEwYzlhNTUyOTU4MmY2YTZhMDkxZjRhMjQyOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMxk/yyWCPhsd+Ed2wj4SfUdtEBZ
gcOu5343ks8/WONa/xOCVXcDaj6+0wYQ1lhlQx+6BVOSRnvrdAdrah2fEIoiEy6V
QrH/L4PdDNWbOUJe5LBI2PU7wEeS5b2U4cTh0kBffNtTFmnpKvDLBxC4eVeP2HCe
ws739yEL0u3YZyKF0H9nxVjJUrZ42vCPow8HxIrnV1GWRSeYamDl/MA1AtAN4qCw
/7fKvJ5QsjfROFuGQbKeMCN6XQ5c8xZPEJlD3kXaZdTH4qNnXni8w1PbjVVP49en
fV8TFt2dDWu3E47M2ni44GwgUqEz8S1bt7ap+PwAf1Wor2KSOsOACdoSHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7LVA6twQyaVSlYL2pqCR9KJClVMB8GA1UdIwQY
MBaAFIoifDX5KNnIuP98JXIe/UepDctnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUt
MzdiMGEyYWIzY2Q2LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUtMzdiMGEyYWIzY2Q2
LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEDJTSnz
EGO6sGZqmBjhHwpOOIT1KxmTSVGqBlZlEDYJAAuhlEJXY0UcW+ihSQlLx7JKcba4
rYqJwsrk3VKAgB2T1RaDPxOF5tx4YhFgA5EHHy72jcv8o0IsWRNCs8JZ/yIZtyvT
5tZWXnJC+VSaqU3D/n5pRBT0dx65poftT+sCS5jYg4yK3wKeB9xmWSHEwhunGmIk
bStAQ9ldaoJy1Bgpi7MzbGjSpq8NRi7MzQq9Zpzn7/wPraq+VtKSTnzFwq8DxN7G
0FrRKzTPR+XufnVUy2sgBBGhNa0hyGh8xqH6FP1p/U71yR4jQZ3ZtnsNUzMtMM+Z
ZaMeCxe5/rDNiw==
-----END CERTIFICATE-----