Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
File:                     tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json)
Hash identifier:          FUlM3zED7Lkb8rVK1jtMxC9tlVwyr3Me4zzAm1SMj8Y=
Subject key identifier:   FE:3E:6F:30:A2:77:41:A2:97:7D:BC:B4:7D:BD:3B:9E:A3:D0:88:77
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Certificate issuer:       /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial:       01962F7478CEC7AA31F42554595B4EEB6B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 0geUHc19NNaDsvmjgLb1gNOrEbQ.roa (hash: NWxuANUmBjc/z+ICKyxtOl6ZHIhQCmMbyKrbsYf09/k=)
                          2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: +Lf0SXvY9ux2PeQD4UCr1dX94mvVdiFWvztVFkjD3iQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:ce:c7:aa:31:f4:25:54:59:5b:4e:eb:6b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=fe3e6f30a27741a2977dbcb47dbd3b9ea3d08877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:2a:4e:b3:78:bd:bf:6e:a9:b2:83:04:58:
                    a8:3a:e0:e5:9e:67:20:d3:aa:de:5e:3d:92:f4:84:
                    96:99:50:25:1b:f1:9f:77:f4:94:e0:18:82:ae:6c:
                    f1:67:c8:fc:f1:93:b8:01:51:dd:b6:a5:04:e1:61:
                    33:56:11:aa:63:2e:e9:ce:e2:69:f1:ba:ff:c0:d2:
                    9b:db:83:f3:f9:a2:81:56:4b:26:d7:8b:7b:25:74:
                    30:dd:e1:1c:17:6f:72:64:a3:3c:9c:20:44:ab:a8:
                    cd:26:df:75:2c:7f:9b:85:95:49:35:d0:d3:45:ed:
                    61:d5:a1:38:be:3a:d9:09:d3:9a:5e:e0:47:e7:b6:
                    02:b1:9d:74:c1:17:a1:d5:58:af:5a:78:eb:61:cd:
                    6c:20:9e:b0:0b:d0:c3:b0:0f:19:d1:1e:77:19:b8:
                    30:03:8a:b6:bb:39:b8:06:20:15:2d:ad:ff:c8:3f:
                    5d:c0:97:85:cf:4f:95:77:6e:86:8a:e1:32:be:8c:
                    9a:af:d2:37:9b:aa:0c:8d:df:cf:c0:45:a3:c3:22:
                    db:bf:20:5e:0e:31:4d:68:25:f4:c0:0d:36:45:8a:
                    fc:15:bc:34:bb:b1:15:93:f5:db:89:da:20:de:3d:
                    67:d0:52:9e:48:c8:2a:4e:67:a6:9b:4e:27:1a:e5:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:6F:30:A2:77:41:A2:97:7D:BC:B4:7D:BD:3B:9E:A3:D0:88:77
            X509v3 Authority Key Identifier:
                keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f0:eb:a4:d2:f0:f7:0a:cf:4b:7d:96:fe:e1:ba:2c:61:51:
         05:ec:5a:fa:ad:72:62:94:e9:7e:1e:21:0c:cb:93:d3:17:ca:
         82:29:02:45:47:ae:af:1a:b9:35:bc:69:41:ea:e8:c9:cc:09:
         ce:5b:00:0c:ed:3e:0e:32:50:bd:24:23:66:eb:0a:09:4e:ed:
         9c:a7:e4:46:fc:4d:f6:d6:ee:21:df:ae:61:ea:49:95:6f:4c:
         03:b7:87:9f:b9:28:91:c0:5a:3d:a9:7d:f4:11:27:20:38:6a:
         82:b8:df:e8:ca:58:51:2a:82:f4:0b:a1:91:e5:a3:ae:92:43:
         86:f5:ef:c8:ea:56:ae:7c:fc:ae:75:84:b9:b5:78:3c:ae:64:
         1a:66:4e:bf:7c:96:af:c7:98:f7:39:34:52:da:32:f2:0e:9f:
         b1:67:94:ff:1f:03:18:af:11:8d:88:0c:f3:ea:96:54:fa:64:
         bb:5c:4b:0c:65:27:58:17:96:50:7a:c1:e9:6b:f6:4c:f3:34:
         31:06:47:0a:9c:5c:a2:c3:f0:7b:95:8e:20:72:b1:d6:31:55:
         78:54:a0:5d:a5:09:5e:ae:54:32:75:af:8e:1f:87:2f:07:2f:
         58:c0:6d:31:c8:d2:11:2e:cf:99:84:74:dc:63:8d:26:07:ea:
         b0:f0:2d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHjOx6ox9CVUWVtO62tOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTViZWVmOWVhMWRkNDc3MmMyZWU5NTI3NjFkNjU1ZDk4
NjUwMjYwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhmZTNlNmYzMGEyNzc0MWEyOTc3ZGJjYjQ3ZGJkM2I5ZWEzZDA4ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe0qTrN4vb9uqbKDBFioOuDlnmcg
06reXj2S9ISWmVAlG/Gfd/SU4BiCrmzxZ8j88ZO4AVHdtqUE4WEzVhGqYy7pzuJp
8br/wNKb24Pz+aKBVksm14t7JXQw3eEcF29yZKM8nCBEq6jNJt91LH+bhZVJNdDT
Re1h1aE4vjrZCdOaXuBH57YCsZ10wReh1VivWnjrYc1sIJ6wC9DDsA8Z0R53Gbgw
A4q2uzm4BiAVLa3/yD9dwJeFz0+Vd26GiuEyvoyar9I3m6oMjd/PwEWjwyLbvyBe
DjFNaCX0wA02RYr8Fbw0u7EVk/Xbidog3j1n0FKeSMgqTmemm04nGuVhOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4+bzCid0Gil328tH29O56j0Ih3MB8GA1UdIwQY
MBaAFLQVvu+eod1HcsLulSdh1lXZhlAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDkt
MGUxOTVlYzY1YjcyLzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDktMGUxOTVlYzY1Yjcy
LzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/DrpNLw
9wrPS32W/uG6LGFRBexa+q1yYpTpfh4hDMuT0xfKgikCRUeurxq5NbxpQeroycwJ
zlsADO0+DjJQvSQjZusKCU7tnKfkRvxN9tbuId+uYepJlW9MA7eHn7kokcBaPal9
9BEnIDhqgrjf6MpYUSqC9AuhkeWjrpJDhvXvyOpWrnz8rnWEubV4PK5kGmZOv3yW
r8eY9zk0Utoy8g6fsWeU/x8DGK8RjYgM8+qWVPpku1xLDGUnWBeWUHrB6Wv2TPM0
MQZHCpxcosPwe5WOIHKx1jFVeFSgXaUJXq5UMnWvjh+HLwcvWMBtMcjSES7PmYR0
3GONJgfqsPAtMQ==
-----END CERTIFICATE-----