Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File:                     aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier:          fhRsGC0gImec5HtL+07lnIF4JxgfFcyQ2o6Q844IKxQ=
Subject key identifier:   FE:90:6E:D6:77:F9:2D:38:DD:26:CE:5A:B7:88:8C:43:76:10:57:69
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer:       /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial:       01962FAB2D875E5B4647B0EDA8CAE230D36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: OjcVy0GD8k4hcL8TqatzrwvfKI4.roa (hash: F/NOwGH5uq3Ta1hkwK8ONz25FZMJkk1iczAs1jYB4bA=)
                          2: X0zgOdGzFbnbluRhuXpZjJlGcaE.roa (hash: OadwEgcvezDEMKG2XzDYD2AjQVOO23z1M1gu9Hpi6DI=)
                          3: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: ChS4/USDdMBfMmo50XdNAZOYVxevMcd9ZNPo1WYl3cI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2d:87:5e:5b:46:47:b0:ed:a8:ca:e2:30:d3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=fe906ed677f92d38dd26ce5ab7888c4376105769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:f4:99:b7:5d:ae:1d:fe:75:5b:ff:19:d5:
                    28:56:25:c2:c6:7e:6c:c1:95:d4:b1:83:af:2e:92:
                    73:04:6f:df:a5:80:c6:99:cd:7a:e0:b9:47:6b:a3:
                    23:2c:47:00:93:68:af:d9:f2:7f:30:d7:74:db:5b:
                    24:b4:04:f0:ba:59:d2:b2:8f:07:c3:98:7e:79:27:
                    d2:e9:38:ef:f8:15:7f:bc:74:20:d3:05:41:fc:ea:
                    65:e5:cb:54:62:61:02:e0:8b:ea:24:a8:c5:72:98:
                    57:5c:2e:b0:5d:92:0b:45:a4:ed:5c:8b:c9:54:5d:
                    0a:60:1c:54:22:fd:be:d9:c3:44:9f:24:cf:82:f5:
                    16:02:ac:0b:9d:37:43:ee:b7:49:48:f9:43:9e:9b:
                    76:89:52:5e:a9:4b:fa:bd:6f:e2:d4:0e:e4:80:ce:
                    6d:44:32:66:ed:7b:00:36:b5:41:d2:24:fc:40:37:
                    13:7f:4c:ed:78:53:5f:df:79:b9:53:5b:76:9b:1e:
                    f1:2b:40:b4:56:b5:01:d3:7f:1f:67:09:46:df:50:
                    6e:b5:b0:a2:32:df:a0:fd:d3:7c:01:22:18:18:18:
                    5c:d6:f1:ab:c0:33:10:1c:49:1e:9b:a5:ca:65:9f:
                    6d:6f:fd:e3:73:48:8c:b0:10:7a:71:ba:d0:ee:f8:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:6E:D6:77:F9:2D:38:DD:26:CE:5A:B7:88:8C:43:76:10:57:69
            X509v3 Authority Key Identifier:
                keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c1:88:9d:b3:6b:b0:64:98:ee:5b:5a:ee:3b:62:fd:ce:d3:
         08:ec:01:c8:69:8b:17:9c:81:fe:3b:f6:08:b8:b6:df:c8:c5:
         56:f1:3b:c4:96:53:63:e8:3f:a2:77:88:99:f3:14:05:d2:a8:
         b4:a5:82:f1:2e:3b:25:e0:69:5b:1e:8f:46:7c:06:89:28:95:
         d0:5d:b3:a3:f1:68:29:21:0f:4f:88:a2:55:97:db:c6:32:40:
         4c:c1:55:ff:8e:3a:88:2a:f9:a8:5c:43:7a:21:f8:48:57:8e:
         5d:db:63:6c:e6:44:1b:33:c4:3f:47:fa:4c:b1:28:1d:88:af:
         7c:72:84:50:8a:2d:9d:6b:3e:32:de:e6:c0:f9:48:bd:72:83:
         3f:54:91:9d:37:bb:8e:a0:b6:74:26:7a:bc:93:fe:5e:dc:68:
         e9:6b:d9:1c:13:02:9f:fa:5e:21:6a:ed:e6:3d:11:59:6c:5d:
         a7:91:29:f2:72:21:05:14:33:1b:db:5a:c5:02:a9:24:5e:6d:
         a1:ee:75:ca:aa:1b:24:18:26:88:77:41:87:e2:17:05:b1:01:
         21:dd:53:eb:e4:ac:9f:86:b2:5d:a3:8d:ed:90:fe:7e:06:b4:
         6b:a3:19:b8:c2:6b:94:e9:f5:94:f1:c4:80:db:a2:63:d9:8d:
         47:01:2f:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqy2HXltGR7DtqMriMNNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YThlOTNkM2Y1OTBmNDQ1MGQxZGIzYzIwNzQ1OTgyNDQz
NTNlOTMwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
EyhmZTkwNmVkNjc3ZjkyZDM4ZGQyNmNlNWFiNzg4OGM0Mzc2MTA1NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZz0mbddrh3+dVv/GdUoViXCxn5s
wZXUsYOvLpJzBG/fpYDGmc164LlHa6MjLEcAk2iv2fJ/MNd021sktATwulnSso8H
w5h+eSfS6Tjv+BV/vHQg0wVB/Opl5ctUYmEC4IvqJKjFcphXXC6wXZILRaTtXIvJ
VF0KYBxUIv2+2cNEnyTPgvUWAqwLnTdD7rdJSPlDnpt2iVJeqUv6vW/i1A7kgM5t
RDJm7XsANrVB0iT8QDcTf0zteFNf33m5U1t2mx7xK0C0VrUB038fZwlG31ButbCi
Mt+g/dN8ASIYGBhc1vGrwDMQHEkem6XKZZ9tb/3jc0iMsBB6cbrQ7vh8SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6QbtZ3+S043SbOWreIjEN2EFdpMB8GA1UdIwQY
MBaAFGio6T0/WQ9EUNHbPCB0WYJENT6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYjNiMjktODFlNS00NWEyLTgxZWMt
MjVkZDRjYmIzNjk4LzEvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYjNiMjktODFlNS00NWEyLTgxZWMtMjVkZDRjYmIzNjk4
LzEvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8GInbNr
sGSY7lta7jti/c7TCOwByGmLF5yB/jv2CLi238jFVvE7xJZTY+g/oneImfMUBdKo
tKWC8S47JeBpWx6PRnwGiSiV0F2zo/FoKSEPT4iiVZfbxjJATMFV/446iCr5qFxD
eiH4SFeOXdtjbOZEGzPEP0f6TLEoHYivfHKEUIotnWs+Mt7mwPlIvXKDP1SRnTe7
jqC2dCZ6vJP+Xtxo6WvZHBMCn/peIWrt5j0RWWxdp5Ep8nIhBRQzG9taxQKpJF5t
oe51yqobJBgmiHdBh+IXBbEBId1T6+Ssn4ayXaON7ZD+fga0a6MZuMJrlOn1lPHE
gNuiY9mNRwEvfg==
-----END CERTIFICATE-----