Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File:                     r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier:          blrsUem59ejg8hbtfFGipslmGFXq1xuNafis9fDU9xA=
Subject key identifier:   46:7F:D7:4B:E8:EC:CB:42:1B:7F:F3:79:9F:8B:A3:CB:6B:8E:22:AE
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer:       /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial:       01962E61F3D0C887A32A159247A278760033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: ytZyiu8bFCd1e4BJdTTtgIjoBNs3R4gv+GH5Ejfp1MU=)
                          2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:d0:c8:87:a3:2a:15:92:47:a2:78:76:00:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=467fd74be8eccb421b7ff3799f8ba3cb6b8e22ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:93:4a:c1:8c:6e:56:f6:aa:a9:f6:e6:f0:
                    57:af:20:aa:66:65:7f:a7:6c:d4:69:60:4a:24:7c:
                    4f:e2:1d:b8:dc:74:89:4f:94:2d:9d:55:05:f1:59:
                    b1:57:c0:31:bc:3b:48:3b:04:f7:ba:8c:aa:c0:7e:
                    57:67:5e:fa:66:f8:97:78:d5:c4:ec:7c:b5:88:c8:
                    d8:a9:d2:d0:87:cb:db:7e:65:0f:88:04:91:12:a3:
                    1a:d8:c5:7f:91:59:d4:92:68:b9:65:8d:ab:3a:3c:
                    3c:dd:59:28:5f:a7:7e:78:03:5d:52:a0:40:24:86:
                    09:14:21:ea:16:9a:75:e1:bb:8f:8b:c8:78:64:f8:
                    3e:da:e3:a7:47:b3:98:02:9d:ee:62:f7:a2:3a:5a:
                    47:85:23:ee:15:c9:16:fb:30:30:e0:7f:03:df:80:
                    25:11:29:d7:f2:94:4e:86:69:54:a3:a8:98:76:6d:
                    e5:de:25:f6:ba:f5:14:79:24:22:07:9d:91:d4:50:
                    36:42:5a:9c:f0:86:64:d8:de:55:db:ad:86:ef:79:
                    28:28:c4:3b:f2:43:73:c0:02:e6:17:73:57:c7:34:
                    bc:d5:0a:97:f5:97:88:df:d7:18:c4:c1:31:19:d7:
                    f0:fc:8d:72:f1:b9:76:02:c1:3c:d8:32:4c:8f:3f:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7F:D7:4B:E8:EC:CB:42:1B:7F:F3:79:9F:8B:A3:CB:6B:8E:22:AE
            X509v3 Authority Key Identifier:
                keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:23:6b:bc:ac:1e:d3:62:67:a5:04:da:58:93:87:7e:f4:6d:
         bb:a6:2c:d3:ab:8e:01:6c:f6:46:f4:47:61:20:f5:df:8c:d8:
         d4:63:bf:ea:11:34:45:1c:a4:a0:4f:62:e7:3d:ff:99:24:9f:
         dd:09:46:f6:99:8f:15:9c:cb:29:92:3b:64:fd:51:0e:94:fe:
         26:50:42:bd:68:ae:85:6c:3c:ef:c3:bc:d1:73:f6:26:b0:85:
         83:1f:bd:84:dc:a3:63:56:fb:9a:2e:e2:7f:7f:e5:cd:9f:26:
         0a:ec:6a:16:07:a2:cd:43:86:03:f4:51:85:47:7a:fc:96:35:
         ca:79:05:87:9a:73:41:e5:c6:e6:93:50:89:15:d4:e6:bf:11:
         a9:3c:04:7e:0f:26:79:18:ac:47:15:74:e8:a2:2d:a7:d5:b5:
         bd:14:32:9f:03:a0:e1:9e:fb:6e:16:cc:97:c5:44:6f:21:4b:
         66:2a:81:cc:35:e5:a6:f2:c2:80:7e:31:5d:bf:46:4e:5e:50:
         34:dd:e7:c5:6e:fe:e9:fc:99:32:8d:45:76:9d:50:a6:17:0f:
         85:1b:87:b7:0b:80:c5:84:f0:a4:cd:41:0a:8a:ba:6d:fb:a9:
         3f:b4:9a:44:33:15:8c:a8:c9:11:9a:09:2a:61:f7:60:11:76:
         4f:6e:74:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfPQyIejKhWSR6J4dgAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzgyZGFlM2Q0MGNhZjIyMjMyNjI1NDFjNDA1NGU2Mjk0
NWQ5MzMwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
Eyg0NjdmZDc0YmU4ZWNjYjQyMWI3ZmYzNzk5ZjhiYTNjYjZiOGUyMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvCTSsGMblb2qqn25vBXryCqZmV/
p2zUaWBKJHxP4h243HSJT5QtnVUF8VmxV8AxvDtIOwT3uoyqwH5XZ176ZviXeNXE
7Hy1iMjYqdLQh8vbfmUPiASREqMa2MV/kVnUkmi5ZY2rOjw83VkoX6d+eANdUqBA
JIYJFCHqFpp14buPi8h4ZPg+2uOnR7OYAp3uYveiOlpHhSPuFckW+zAw4H8D34Al
ESnX8pROhmlUo6iYdm3l3iX2uvUUeSQiB52R1FA2Qlqc8IZk2N5V262G73koKMQ7
8kNzwALmF3NXxzS81QqX9ZeI39cYxMExGdfw/I1y8bl2AsE82DJMjz+iqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZ/10vo7MtCG3/zeZ+Lo8trjiKuMB8GA1UdIwQY
MBaAFK94La49QMryIjJiVBxAVOYpRdkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMt
ZjAxMjVkMDJlMjYyLzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMtZjAxMjVkMDJlMjYy
LzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCNrvKwe
02JnpQTaWJOHfvRtu6Ys06uOAWz2RvRHYSD134zY1GO/6hE0RRykoE9i5z3/mSSf
3QlG9pmPFZzLKZI7ZP1RDpT+JlBCvWiuhWw878O80XP2JrCFgx+9hNyjY1b7mi7i
f3/lzZ8mCuxqFgeizUOGA/RRhUd6/JY1ynkFh5pzQeXG5pNQiRXU5r8RqTwEfg8m
eRisRxV06KItp9W1vRQynwOg4Z77bhbMl8VEbyFLZiqBzDXlpvLCgH4xXb9GTl5Q
NN3nxW7+6fyZMo1Fdp1QphcPhRuHtwuAxYTwpM1BCoq6bfupP7SaRDMVjKjJEZoJ
KmH3YBF2T2502Q==
-----END CERTIFICATE-----