Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File:                     spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier:          /ABAcJRpG7fw8eA3fevK7gKbwzR3A+vatx/lYVHZo0s=
Subject key identifier:   1F:FC:29:A8:8A:FA:5E:9D:C3:55:69:55:D9:22:0F:05:15:0B:7A:F3
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer:       /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial:       01962E990831533CC9EC0F26B376ECB58237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number:          13EF
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
                          2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: k5etBzypHGn+Rt2PA3k7bEzcUi3IbAcRXurTauUQHdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:08:31:53:3c:c9:ec:0f:26:b3:76:ec:b5:82:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=1ffc29a88afa5e9dc3556955d9220f05150b7af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:03:39:a6:1d:bc:93:70:b1:6b:2a:da:5a:
                    e4:26:a1:89:06:ed:00:91:76:36:14:5f:f5:33:fc:
                    e7:b0:c9:be:e1:9a:73:76:cd:bc:4f:4e:0b:2d:fc:
                    a9:97:92:73:9e:ae:d9:9f:bf:ab:57:2c:4b:0f:45:
                    27:41:e6:f0:13:64:cb:b7:c7:77:12:6d:26:24:87:
                    6e:75:93:3f:26:86:d2:2e:6e:87:84:fc:7e:d0:95:
                    77:aa:d0:46:ff:68:db:93:af:ad:87:a4:1d:e5:ba:
                    7e:c1:04:81:7a:8a:17:60:da:1c:dd:d2:b1:97:c0:
                    ba:e4:ef:d7:91:21:65:bd:55:cf:bb:1f:1f:75:82:
                    84:99:b9:62:83:f3:97:cc:ca:72:6c:02:06:97:df:
                    49:df:10:32:6c:a3:65:45:fb:8e:de:44:11:8b:3e:
                    50:4a:e0:b1:40:da:95:08:b5:95:3d:a0:a3:7a:69:
                    29:e3:3d:18:1e:6c:92:5b:0f:8b:5e:9f:47:fa:29:
                    18:93:73:54:a4:ca:58:00:71:40:8b:4f:92:1b:05:
                    e7:2d:bf:bd:88:65:63:3e:d2:35:db:e1:a6:84:67:
                    0a:7d:9e:83:c0:28:19:30:42:2b:e2:e9:fa:4b:35:
                    96:c4:2b:a1:95:80:32:78:97:4c:ae:25:43:25:f6:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FC:29:A8:8A:FA:5E:9D:C3:55:69:55:D9:22:0F:05:15:0B:7A:F3
            X509v3 Authority Key Identifier:
                keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:0e:73:e1:99:69:72:30:6e:3b:25:7d:10:b5:b0:ed:9e:
         51:e8:f2:26:4f:c2:d2:65:fd:41:9f:79:82:5d:3c:55:09:be:
         b4:d8:ff:9d:c2:ca:f4:5f:2b:ee:44:19:75:df:12:e3:62:8a:
         4b:19:12:52:1f:59:1e:a7:65:29:f6:35:a1:f9:77:1e:79:45:
         8b:d4:63:db:1d:34:92:a9:ed:be:4b:8f:58:87:a3:f9:4e:59:
         37:4e:27:18:61:36:2a:b4:df:3b:ea:7c:d5:e6:d3:2c:6b:1f:
         30:e3:7a:5e:72:f3:a0:c0:b5:23:fe:b5:17:89:63:df:f3:82:
         9e:db:51:c2:f1:ef:1c:10:ad:c4:5c:a4:7e:ca:b8:32:45:72:
         e5:3f:32:2f:b0:db:a1:6c:e7:dd:7c:45:81:ea:8f:69:ae:13:
         52:4e:f2:bb:3c:77:a2:6b:9f:ef:31:ec:01:1d:e8:8e:0e:0c:
         dc:8d:9c:18:bc:dc:da:df:33:f6:ef:fb:9e:1d:b6:5e:7c:57:
         fd:4e:91:92:f0:5f:f5:2b:49:2b:64:27:c1:b6:82:c6:61:bc:
         cb:fc:17:3a:8b:53:1b:76:2b:d1:50:71:6f:9d:cb:51:12:68:
         65:e9:17:9d:ef:5a:f0:fb:96:0f:18:c2:db:39:42:28:fc:82:
         32:b8:b5:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQgxUzzJ7A8ms3bstYI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyOTIwOTRkNjkxZGY0YTdjMzhmMTZiNzU1NTdlOWMyNmQ0
YWM2OTIwHhcNMjUwNDEzMTAwMTQyWhcNMjUwNDE0MTAwMTQyWjAzMTEwLwYDVQQD
EygxZmZjMjlhODhhZmE1ZTlkYzM1NTY5NTVkOTIyMGYwNTE1MGI3YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsswDOaYdvJNwsWsq2lrkJqGJBu0A
kXY2FF/1M/znsMm+4Zpzds28T04LLfypl5Jznq7Zn7+rVyxLD0UnQebwE2TLt8d3
Em0mJIdudZM/JobSLm6HhPx+0JV3qtBG/2jbk6+th6Qd5bp+wQSBeooXYNoc3dKx
l8C65O/XkSFlvVXPux8fdYKEmblig/OXzMpybAIGl99J3xAybKNlRfuO3kQRiz5Q
SuCxQNqVCLWVPaCjemkp4z0YHmySWw+LXp9H+ikYk3NUpMpYAHFAi0+SGwXnLb+9
iGVjPtI12+GmhGcKfZ6DwCgZMEIr4un6SzWWxCuhlYAyeJdMriVDJfbOwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/8KaiK+l6dw1VpVdkiDwUVC3rzMB8GA1UdIwQY
MBaAFLKSCU1pHfSnw48Wt1VX6cJtSsaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAt
MTVhMDkzZTJiYjhmLzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAtMTVhMDkzZTJiYjhm
LzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzMOc+GZ
aXIwbjslfRC1sO2eUejyJk/C0mX9QZ95gl08VQm+tNj/ncLK9F8r7kQZdd8S42KK
SxkSUh9ZHqdlKfY1ofl3HnlFi9Rj2x00kqntvkuPWIej+U5ZN04nGGE2KrTfO+p8
1ebTLGsfMON6XnLzoMC1I/61F4lj3/OCnttRwvHvHBCtxFykfsq4MkVy5T8yL7Db
oWzn3XxFgeqPaa4TUk7yuzx3omuf7zHsAR3ojg4M3I2cGLzc2t8z9u/7nh22XnxX
/U6RkvBf9StJK2QnwbaCxmG8y/wXOotTG3Yr0VBxb53LURJoZekXne9a8PuWDxjC
2zlCKPyCMri1Dw==
-----END CERTIFICATE-----