Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File:                     S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier:          D/Slh4U09MSjGyHfG4YeCv9uuWC6Ps6+95jDIo2zSrU=
Subject key identifier:   84:EC:E7:9A:88:8D:DF:2F:85:8D:B0:A3:DC:96:95:D0:76:A1:4B:F3
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer:       /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial:       01962ECFBC4C792B46A2A36FA2F2B748D279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: A2IISeS5/4n++160sBWyhXktFRz5Pm33rRndpTTwMXU=)
                          2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bc:4c:79:2b:46:a2:a3:6f:a2:f2:b7:48:d2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=84ece79a888ddf2f858db0a3dc9695d076a14bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:cb:17:de:f7:e9:95:43:29:05:39:2b:2d:
                    72:d8:0f:c9:41:6d:04:06:48:4a:b8:2a:83:40:75:
                    eb:45:1b:42:91:3a:ec:bf:af:d0:38:ba:77:36:b6:
                    fa:f7:35:83:60:4e:19:9c:68:6e:ec:a7:76:42:77:
                    54:ff:61:72:e8:2d:e6:ec:7c:ed:58:b1:b1:b7:98:
                    97:f9:ab:a0:eb:1a:bb:38:9f:bd:e4:4e:5d:ec:70:
                    a8:c0:c7:9d:96:8d:bb:d4:8d:e3:15:0c:16:d5:4d:
                    08:95:21:17:24:0c:cd:50:87:22:24:59:ed:2b:24:
                    7e:59:63:4f:1a:ab:0a:df:d6:4f:f6:a4:63:6d:7e:
                    fc:0a:40:c1:51:d4:82:6c:65:f1:2b:ec:25:f6:f0:
                    f3:f4:62:84:d6:77:4c:74:25:cd:39:f6:0c:b6:3b:
                    af:f3:bb:03:4c:d0:04:bc:12:b2:37:0b:88:1a:ff:
                    d0:4b:12:c2:7c:0f:e6:bd:12:ce:d1:18:e4:96:3f:
                    03:f8:a0:fe:fa:56:5f:5f:cd:a4:4a:53:5a:df:53:
                    b9:55:12:ef:bb:a4:7c:10:ac:c9:de:e8:ef:c6:b6:
                    1b:bc:f9:5a:1c:49:29:d1:2a:47:5d:98:84:77:f2:
                    9b:d3:2d:84:05:c6:05:db:45:0c:29:78:97:46:43:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:E7:9A:88:8D:DF:2F:85:8D:B0:A3:DC:96:95:D0:76:A1:4B:F3
            X509v3 Authority Key Identifier:
                keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:f4:4f:9d:6b:0c:de:bb:db:86:c4:87:92:49:76:6b:b8:
         03:83:84:3b:50:81:08:87:0f:0d:2e:40:9c:60:0f:80:cb:fd:
         94:96:88:e0:40:12:d8:1a:fa:f1:d2:31:5e:47:fb:fd:2c:5d:
         a8:74:32:b8:68:7c:20:62:54:6e:cf:8d:53:30:7b:fc:0e:1e:
         79:81:cb:19:9c:a3:36:fc:61:6c:b1:b4:37:eb:2d:90:4d:c5:
         94:d2:d7:8b:a9:b2:f2:52:eb:d9:77:c9:7a:b8:3b:fe:c5:5f:
         6a:89:3d:e3:d4:a5:17:8d:d7:91:be:3f:05:35:e9:8f:43:78:
         3a:98:d7:3d:dd:b6:92:b3:70:bd:66:b0:50:28:06:dd:0b:72:
         45:12:26:7d:4d:5a:f3:0b:96:3c:a3:f2:9f:50:e0:5b:65:6d:
         74:1e:ca:19:d8:26:97:8d:09:a5:b6:bf:fd:5e:37:00:80:9d:
         41:b6:8d:70:97:32:ee:32:0e:e7:1a:57:3d:9d:08:4e:86:bc:
         23:b4:7d:3b:2a:45:4b:db:b5:2d:d0:b3:30:36:50:bb:0f:6a:
         c4:6e:16:ff:d5:cf:0a:41:ca:a7:0e:52:62:ec:6c:51:26:9e:
         a8:43:63:a6:23:14:d0:c5:d7:ee:d7:e5:de:08:9d:79:6f:af:
         fc:21:f2:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7xMeStGoqNvovK3SNJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl
ZDI2NmQwHhcNMjUwNDEzMTEwMTI4WhcNMjUwNDE0MTEwMTI4WjAzMTEwLwYDVQQD
Eyg4NGVjZTc5YTg4OGRkZjJmODU4ZGIwYTNkYzk2OTVkMDc2YTE0YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjLF9736ZVDKQU5Ky1y2A/JQW0E
BkhKuCqDQHXrRRtCkTrsv6/QOLp3Nrb69zWDYE4ZnGhu7Kd2QndU/2Fy6C3m7Hzt
WLGxt5iX+aug6xq7OJ+95E5d7HCowMedlo271I3jFQwW1U0IlSEXJAzNUIciJFnt
KyR+WWNPGqsK39ZP9qRjbX78CkDBUdSCbGXxK+wl9vDz9GKE1ndMdCXNOfYMtjuv
87sDTNAEvBKyNwuIGv/QSxLCfA/mvRLO0Rjklj8D+KD++lZfX82kSlNa31O5VRLv
u6R8EKzJ3ujvxrYbvPlaHEkp0SpHXZiEd/Kb0y2EBcYF20UMKXiXRkOa7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITs55qIjd8vhY2wo9yWldB2oUvzMB8GA1UdIwQY
MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt
YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5
LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaj0T51r
DN6724bEh5JJdmu4A4OEO1CBCIcPDS5AnGAPgMv9lJaI4EAS2Br68dIxXkf7/Sxd
qHQyuGh8IGJUbs+NUzB7/A4eeYHLGZyjNvxhbLG0N+stkE3FlNLXi6my8lLr2XfJ
erg7/sVfaok949SlF43Xkb4/BTXpj0N4OpjXPd22krNwvWawUCgG3QtyRRImfU1a
8wuWPKPyn1DgW2VtdB7KGdgml40Jpba//V43AICdQbaNcJcy7jIO5xpXPZ0IToa8
I7R9OypFS9u1LdCzMDZQuw9qxG4W/9XPCkHKpw5SYuxsUSaeqENjpiMU0MXX7tfl
3gideW+v/CHyBQ==
-----END CERTIFICATE-----