Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
File:                     srV8B2efEIcOxTs576fQiwhXqRE.mft (raw, json)
Hash identifier:          AV9Lpscs66I1MB3XYHJesF0nCkAwllJCQRTJVYbIqeA=
Subject key identifier:   0B:0C:D1:24:E8:03:7B:EE:E1:B1:63:26:5A:0E:10:B9:6E:6C:81:90
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Certificate issuer:       /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial:       01962DF42858D9DF1F34B4219B8E7E4A0E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
Manifest number:          091F
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa (hash: FRWb8W/VjUKZi4bCa79dR9xehManyu8Gtrb5uK1Umc8=)
                          2: srV8B2efEIcOxTs576fQiwhXqRE.crl (hash: nUiEO6NKYckCmIkwOvFwnUeERfCxMYu2vjKTMXhW53o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:28:58:d9:df:1f:34:b4:21:9b:8e:7e:4a:0e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=0b0cd124e8037beee1b163265a0e10b96e6c8190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:97:bd:6d:98:ed:46:cd:09:a9:d6:26:f9:
                    9d:dd:5b:e6:af:81:e0:11:64:30:15:b8:cb:e9:19:
                    91:66:9d:54:cb:e7:92:99:9e:35:02:f3:d4:b5:ae:
                    fa:4d:94:e2:f4:02:ca:65:98:ce:6f:4c:47:65:50:
                    68:a2:1a:e5:06:6d:ff:29:df:7f:02:23:38:ae:fb:
                    e6:d4:bd:a2:54:79:c7:1e:d7:2b:e5:61:d0:3b:32:
                    f8:26:9d:21:59:0f:37:20:fa:48:5a:dd:b8:83:45:
                    ac:84:11:0d:6c:aa:bc:e0:61:e7:1e:e0:73:2f:bc:
                    47:7c:68:7c:19:08:1b:8b:6c:4d:e6:ff:65:81:09:
                    bd:57:f7:66:a1:64:ae:38:6d:94:58:6c:1e:68:4e:
                    16:96:c0:1f:2e:1a:1c:b8:f2:7c:7f:bc:1a:d5:5b:
                    e5:61:c6:4f:80:67:d6:0b:c5:d5:26:d8:01:76:3e:
                    4e:8a:62:8d:1c:7f:af:c1:c5:41:ff:22:83:bc:e5:
                    ab:c6:4e:6d:77:ce:e7:33:d9:da:fa:9d:1d:17:5c:
                    1a:af:81:85:df:3d:3e:ee:2e:c0:d5:66:19:42:c0:
                    d6:64:57:d6:59:da:7a:e5:9d:3e:06:51:07:e0:be:
                    84:29:21:b6:a8:12:8a:78:2f:71:ca:a7:52:24:ae:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:D1:24:E8:03:7B:EE:E1:B1:63:26:5A:0E:10:B9:6E:6C:81:90
            X509v3 Authority Key Identifier:
                keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:dd:ea:97:1c:86:44:6a:6e:d9:bf:bc:a8:b9:32:11:bc:
         dd:2e:e7:5a:8d:b9:46:f5:1c:75:43:63:a1:80:84:69:99:31:
         d1:61:43:7b:5e:5e:9e:6b:05:f0:04:74:fd:48:a2:f0:bf:ae:
         84:4c:36:16:d0:87:e2:9d:bc:a7:e5:7c:12:b5:52:10:25:49:
         00:ce:8f:39:da:8a:57:21:aa:7c:92:f5:39:63:6b:f8:f1:d8:
         6a:83:c2:a4:9c:49:87:74:6a:f1:89:d7:1c:63:52:80:f4:45:
         cc:d0:fb:69:fb:31:7e:24:61:bf:dd:3a:74:17:6e:3e:c1:20:
         23:43:f6:b5:86:64:cb:d2:e7:40:42:83:af:40:34:ba:9c:f7:
         19:75:34:df:12:91:ae:8c:bc:9e:5e:16:83:ec:68:73:89:bf:
         dd:15:46:7a:eb:43:65:fd:e0:a0:40:31:d3:93:a4:ed:e5:c8:
         d1:5a:68:26:14:94:27:fb:56:ba:75:72:d4:ee:06:de:fd:d9:
         3b:f4:75:fc:89:eb:ba:6e:c3:b1:6e:e1:60:f4:4d:78:ac:90:
         38:5b:80:9b:fa:ad:8a:0c:02:c7:34:1d:98:4e:15:3b:f7:a1:
         17:a8:6a:80:78:bd:7c:6e:94:e5:01:7a:90:4c:3c:dd:b1:af:
         95:26:54:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9ChY2d8fNLQhm45+Sg5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYjU3YzA3Njc5ZjEwODcwZWM1M2IzOWVmYTdkMDhiMDg1
N2E5MTEwHhcNMjUwNDEzMDcwMTM3WhcNMjUwNDE0MDcwMTM3WjAzMTEwLwYDVQQD
EygwYjBjZDEyNGU4MDM3YmVlZTFiMTYzMjY1YTBlMTBiOTZlNmM4MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+iXvW2Y7UbNCanWJvmd3Vvmr4Hg
EWQwFbjL6RmRZp1Uy+eSmZ41AvPUta76TZTi9ALKZZjOb0xHZVBoohrlBm3/Kd9/
AiM4rvvm1L2iVHnHHtcr5WHQOzL4Jp0hWQ83IPpIWt24g0WshBENbKq84GHnHuBz
L7xHfGh8GQgbi2xN5v9lgQm9V/dmoWSuOG2UWGweaE4WlsAfLhocuPJ8f7wa1Vvl
YcZPgGfWC8XVJtgBdj5OimKNHH+vwcVB/yKDvOWrxk5td87nM9na+p0dF1war4GF
3z0+7i7A1WYZQsDWZFfWWdp65Z0+BlEH4L6EKSG2qBKKeC9xyqdSJK7xCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsM0SToA3vu4bFjJloOELlubIGQMB8GA1UdIwQY
MBaAFLK1fAdnnxCHDsU7Oe+n0IsIV6kRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3JWOEIyZWZFSWNPeFRzNTc2ZlFpd2hYcVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82YTFjNmUtMDM5YS00YjdkLTkyNTMt
MGE1ZTZhMzY4MDFmLzEvc3JWOEIyZWZFSWNPeFRzNTc2ZlFpd2hYcVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82YTFjNmUtMDM5YS00YjdkLTkyNTMtMGE1ZTZhMzY4MDFm
LzEvc3JWOEIyZWZFSWNPeFRzNTc2ZlFpd2hYcVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizfd6pcc
hkRqbtm/vKi5MhG83S7nWo25RvUcdUNjoYCEaZkx0WFDe15enmsF8AR0/Uii8L+u
hEw2FtCH4p28p+V8ErVSECVJAM6POdqKVyGqfJL1OWNr+PHYaoPCpJxJh3Rq8YnX
HGNSgPRFzND7afsxfiRhv906dBduPsEgI0P2tYZky9LnQEKDr0A0upz3GXU03xKR
roy8nl4Wg+xoc4m/3RVGeutDZf3goEAx05Ok7eXI0VpoJhSUJ/tWunVy1O4G3v3Z
O/R1/Inrum7DsW7hYPRNeKyQOFuAm/qtigwCxzQdmE4VO/ehF6hqgHi9fG6U5QF6
kEw83bGvlSZUCQ==
-----END CERTIFICATE-----