Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File:                     dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier:          C8xzWA0kqSon/fvl7P7nohyA7rAJopsHupOZiv/TFd4=
Subject key identifier:   F0:1E:AF:67:42:A7:E5:A2:4E:44:E1:C4:98:C8:C5:17:EC:2C:07:3B
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer:       /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial:       01962FAB478E7FF41A6F94721FD6B27EBED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number:          0A07
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
                          2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: eMhYGeLTUEFeiwY8toRkKaAfJjEt2hW0y6SRrFYnJAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:47:8e:7f:f4:1a:6f:94:72:1f:d6:b2:7e:be:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=f01eaf6742a7e5a24e44e1c498c8c517ec2c073b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:b7:04:ae:23:48:18:48:ff:4b:8a:5b:43:
                    41:5e:05:bc:8d:2b:b5:3d:10:24:cd:b7:a1:2e:e8:
                    d0:35:91:f6:e5:62:b5:93:98:c5:68:56:9a:1a:b1:
                    f3:98:98:d1:28:29:23:fc:d8:84:34:c6:28:8b:75:
                    a2:9e:9b:67:15:b4:90:48:48:81:89:25:df:1d:ed:
                    85:76:e4:de:73:fb:79:83:5a:5a:e0:be:c4:d7:1a:
                    9f:ee:3b:fc:23:db:65:c8:57:f9:9a:f7:d9:67:03:
                    27:4b:8a:0b:eb:e8:97:fe:0a:a7:1e:a3:1f:87:35:
                    d7:d7:1f:81:03:09:08:66:2e:af:7e:40:f3:a7:a8:
                    b4:94:60:29:c7:3f:83:3a:0d:fa:76:8c:90:7e:1b:
                    16:5a:e0:bb:3b:b7:cf:c1:d2:4f:01:65:25:ac:73:
                    bf:a0:66:e2:ad:1f:bc:b0:61:a7:50:b5:f6:be:61:
                    ef:af:b7:64:25:28:69:17:9d:34:49:a5:04:78:ad:
                    d2:b3:fd:75:45:a3:6c:f4:50:98:07:cc:86:f2:a6:
                    4c:d8:13:66:25:fe:ff:7e:7e:36:40:45:1d:ee:40:
                    77:48:61:05:b7:10:cc:e3:64:73:4d:1a:f3:72:2f:
                    00:eb:2a:21:a9:b0:7d:07:a8:01:e4:02:c4:73:c4:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:AF:67:42:A7:E5:A2:4E:44:E1:C4:98:C8:C5:17:EC:2C:07:3B
            X509v3 Authority Key Identifier:
                keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:33:39:73:40:5d:24:d9:da:5e:40:a7:71:96:10:4f:d2:cf:
         2a:58:61:25:d6:e4:d1:d1:e4:f7:23:b8:14:b8:5f:c1:32:18:
         61:9f:e0:03:41:e6:1a:97:3e:93:dd:02:29:d1:85:b0:60:83:
         19:de:9d:a9:9e:fd:a4:de:2b:b2:c1:e7:5b:81:53:fb:be:81:
         47:d5:86:3f:9c:89:5e:50:c2:1a:7f:3e:69:c2:96:bf:27:fb:
         64:23:26:e4:88:4b:cc:28:b1:51:3b:05:f0:61:55:57:f9:96:
         bb:cd:2e:c1:5f:5f:ad:eb:e9:18:18:d9:ba:e2:59:a5:25:a8:
         e4:8f:96:60:06:ff:f2:35:29:b2:4d:aa:1b:60:4e:39:8f:08:
         7c:fa:31:0a:9c:63:9a:31:07:fa:84:5d:35:42:db:58:86:d6:
         ce:e3:bf:49:ae:16:25:af:3d:3c:76:a6:b2:73:ab:a8:ef:86:
         a1:1c:68:ef:83:0a:9a:90:d0:6d:09:9a:23:cd:1f:1f:77:45:
         fb:df:5a:12:3d:ba:a4:69:ae:d2:e7:20:fe:4d:c5:30:fc:9f:
         60:0a:48:50:fb:58:8b:1d:6c:5b:4b:b0:47:70:0a:5b:fd:7b:
         01:ad:4a:6a:a2:99:ef:19:1e:86:fe:e1:35:13:a8:5b:f2:b8:
         47:6e:03:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0eOf/Qab5RyH9ayfr7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODhhYzNjZTdlOTFlMjQwY2FmZjIxOWNiZTM4ZmNmMDIz
YmYyYjYwHhcNMjUwNDEzMTUwMTE2WhcNMjUwNDE0MTUwMTE2WjAzMTEwLwYDVQQD
EyhmMDFlYWY2NzQyYTdlNWEyNGU0NGUxYzQ5OGM4YzUxN2VjMmMwNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS23BK4jSBhI/0uKW0NBXgW8jSu1
PRAkzbehLujQNZH25WK1k5jFaFaaGrHzmJjRKCkj/NiENMYoi3WinptnFbSQSEiB
iSXfHe2FduTec/t5g1pa4L7E1xqf7jv8I9tlyFf5mvfZZwMnS4oL6+iX/gqnHqMf
hzXX1x+BAwkIZi6vfkDzp6i0lGApxz+DOg36doyQfhsWWuC7O7fPwdJPAWUlrHO/
oGbirR+8sGGnULX2vmHvr7dkJShpF500SaUEeK3Ss/11RaNs9FCYB8yG8qZM2BNm
Jf7/fn42QEUd7kB3SGEFtxDM42RzTRrzci8A6yohqbB9B6gB5ALEc8Q4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAer2dCp+WiTkThxJjIxRfsLAc7MB8GA1UdIwQY
MBaAFHSIrDzn6R4kDK/yGcvjj88CO/K2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQt
ZDU3NjNmZWNkNjA1LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQtZDU3NjNmZWNkNjA1
LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozM5c0Bd
JNnaXkCncZYQT9LPKlhhJdbk0dHk9yO4FLhfwTIYYZ/gA0HmGpc+k90CKdGFsGCD
Gd6dqZ79pN4rssHnW4FT+76BR9WGP5yJXlDCGn8+acKWvyf7ZCMm5IhLzCixUTsF
8GFVV/mWu80uwV9frevpGBjZuuJZpSWo5I+WYAb/8jUpsk2qG2BOOY8IfPoxCpxj
mjEH+oRdNULbWIbWzuO/Sa4WJa89PHamsnOrqO+GoRxo74MKmpDQbQmaI80fH3dF
+99aEj26pGmu0ucg/k3FMPyfYApIUPtYix1sW0uwR3AKW/17Aa1KaqKZ7xkehv7h
NROoW/K4R24D8g==
-----END CERTIFICATE-----