Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File:                     DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier:          WDMEhozZkXSTpB92Sy+zM8sFronBc/6ib0OjpoC2UJA=
Subject key identifier:   A2:10:7C:86:60:0B:42:A0:2E:89:99:5C:E8:1E:56:7A:50:B2:7E:80
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer:       /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial:       01962F3DE2AC78ADF1765487C42FDCBF96B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number:          0FEE
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
                          2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: mBQgWVXGWuR7BjwZw15kenqjdYIcUem+EhErPM7tbMU=)
                          3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e2:ac:78:ad:f1:76:54:87:c4:2f:dc:bf:96:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=a2107c86600b42a02e89995ce81e567a50b27e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:f3:29:7a:cc:33:64:6c:b3:d9:c1:dc:13:
                    95:dd:14:c8:3e:50:dd:2e:ca:0f:c7:fb:9b:89:6d:
                    ab:89:fb:44:e2:1d:39:b6:18:ec:f6:12:20:4d:fd:
                    a5:6d:97:06:fd:07:07:36:85:a4:ea:9b:d5:31:34:
                    58:6f:2b:2b:45:51:8d:c6:05:94:77:e3:1f:85:0a:
                    4a:52:68:74:8d:f3:30:14:19:97:39:02:1b:9e:71:
                    0c:82:3b:9c:37:4a:89:d2:43:32:73:2f:26:dd:b9:
                    77:86:4d:84:9c:43:b8:17:72:86:e0:26:7d:73:6b:
                    cd:a2:bb:b1:d8:e2:69:69:20:be:bb:89:f4:fa:b7:
                    fa:d8:93:42:d2:fd:67:b6:cb:1f:5f:ce:aa:76:bd:
                    d2:20:33:e1:15:fa:10:5d:da:65:dc:4e:39:b0:a7:
                    52:dc:0f:95:9b:62:a9:0c:1f:76:07:cf:37:20:b5:
                    2e:f6:84:14:a4:a6:9e:16:f9:e3:3b:cb:e6:27:73:
                    40:3c:c7:07:ef:47:13:a6:ec:44:e4:12:fa:68:db:
                    e5:31:8f:13:59:e3:36:7d:ef:24:97:59:a2:9d:ed:
                    f2:5a:7d:2a:e1:9c:97:b2:75:2e:25:8b:c8:7a:60:
                    4b:53:df:cb:61:33:e7:97:1a:c3:64:b2:d9:1c:04:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:10:7C:86:60:0B:42:A0:2E:89:99:5C:E8:1E:56:7A:50:B2:7E:80
            X509v3 Authority Key Identifier:
                keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bd:b2:2b:a5:33:7d:cd:ef:ac:63:57:46:0a:9a:5a:ea:70:
         5f:8e:c6:a8:72:1e:b9:85:de:3f:3e:04:a6:eb:7e:fe:f1:13:
         7d:99:91:53:0b:06:5d:68:28:7e:bd:da:8d:68:f1:bc:3f:5b:
         d9:36:72:09:69:40:6f:38:5a:b9:96:a7:f7:d1:8a:f6:f3:b7:
         05:da:97:39:92:f6:8f:b8:fd:a7:fd:76:dd:c0:2f:8f:a0:98:
         cc:fc:0f:b3:a9:0c:84:40:12:2c:58:1f:ec:45:5c:b2:7a:9e:
         63:be:d5:a1:e3:1d:2c:48:72:4b:1e:3f:90:ce:c5:8a:67:af:
         f9:ab:9a:6f:c3:93:dc:fb:44:13:05:04:4c:79:2c:8c:67:dd:
         ca:c9:8b:bb:a7:bb:28:26:5b:5a:87:30:5b:2a:9f:43:b9:7b:
         97:df:5c:91:2f:77:8d:1a:6a:b7:6c:9b:b6:4c:cb:3a:29:13:
         22:ec:08:6a:f9:69:28:4f:d2:56:79:16:cf:80:fd:8f:ca:c7:
         c3:cc:8a:53:9f:91:7e:7f:1e:88:97:dd:cf:59:db:f7:18:df:
         a4:91:1d:85:18:1b:d6:b3:9f:c1:93:05:84:c8:2f:ec:ae:85:
         8a:26:bb:3d:48:e4:8d:f6:51:94:8f:fa:34:9c:81:b8:7f:92:
         75:8b:53:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeKseK3xdlSHxC/cv5a2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjUwNDEzMTMwMTQ2WhcNMjUwNDE0MTMwMTQ2WjAzMTEwLwYDVQQD
EyhhMjEwN2M4NjYwMGI0MmEwMmU4OTk5NWNlODFlNTY3YTUwYjI3ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+PzKXrMM2Rss9nB3BOV3RTIPlDd
LsoPx/ubiW2riftE4h05thjs9hIgTf2lbZcG/QcHNoWk6pvVMTRYbysrRVGNxgWU
d+MfhQpKUmh0jfMwFBmXOQIbnnEMgjucN0qJ0kMycy8m3bl3hk2EnEO4F3KG4CZ9
c2vNorux2OJpaSC+u4n0+rf62JNC0v1ntssfX86qdr3SIDPhFfoQXdpl3E45sKdS
3A+Vm2KpDB92B883ILUu9oQUpKaeFvnjO8vmJ3NAPMcH70cTpuxE5BL6aNvlMY8T
WeM2fe8kl1mine3yWn0q4ZyXsnUuJYvIemBLU9/LYTPnlxrDZLLZHAQsywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIQfIZgC0KgLomZXOgeVnpQsn6AMB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr2yK6Uz
fc3vrGNXRgqaWupwX47GqHIeuYXePz4Eput+/vETfZmRUwsGXWgofr3ajWjxvD9b
2TZyCWlAbzhauZan99GK9vO3BdqXOZL2j7j9p/123cAvj6CYzPwPs6kMhEASLFgf
7EVcsnqeY77VoeMdLEhySx4/kM7Fimev+auab8OT3PtEEwUETHksjGfdysmLu6e7
KCZbWocwWyqfQ7l7l99ckS93jRpqt2ybtkzLOikTIuwIavlpKE/SVnkWz4D9j8rH
w8yKU5+Rfn8eiJfdz1nb9xjfpJEdhRgb1rOfwZMFhMgv7K6Fiia7PUjkjfZRlI/6
NJyBuH+SdYtTUQ==
-----END CERTIFICATE-----