Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File:                     RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier:          HVgzwR2Y9fli+EYvbOgS+FYcKJ4rdf9oHh5Jqax3pS4=
Subject key identifier:   DA:89:26:3A:39:BE:31:03:01:E8:85:5F:A1:5E:D1:A6:4E:BE:63:A5
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer:       /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial:       01962F06B18E9A921D4AD0338E8290BFE9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number:          0E5F
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
                          2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: 4EGEcyoaEjFUp194ptp4Ql5GSJ3tI5puAe25tMZNemQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b1:8e:9a:92:1d:4a:d0:33:8e:82:90:bf:e9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=da89263a39be310301e8855fa15ed1a64ebe63a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:50:27:77:a5:3b:32:cd:1c:8e:c4:de:8f:
                    62:3a:59:72:77:a7:21:8f:a4:df:a4:20:ce:d6:32:
                    95:51:62:86:bb:36:fc:7c:68:18:22:10:65:15:99:
                    8f:fb:e2:c4:11:01:03:f5:16:83:e3:76:c8:da:c2:
                    61:1b:03:ba:32:b8:d8:e8:7c:f0:1c:84:5b:c0:af:
                    7a:7d:2d:6d:e6:93:c6:64:d2:69:b3:82:a8:68:17:
                    5d:1f:08:8c:a7:2f:c3:7e:95:00:c5:36:60:96:4c:
                    b6:3f:5c:c1:7a:46:79:dd:9a:91:69:77:02:e1:25:
                    ab:4d:a3:a2:ae:06:fc:d9:d3:6e:70:8d:24:bc:72:
                    26:57:1a:da:76:f2:c5:4a:4e:35:41:95:b4:69:43:
                    88:e6:02:59:5e:28:13:37:7e:0c:1a:04:0b:4c:68:
                    9e:a2:de:34:ee:fe:6a:43:4e:15:c9:f4:fb:06:4a:
                    c8:c8:a0:14:ca:33:33:3e:22:73:16:72:ca:e0:66:
                    91:e8:db:d5:c8:51:00:11:69:05:1c:af:88:5a:11:
                    57:d7:a4:3c:e0:02:39:fe:49:2b:18:08:b5:38:75:
                    85:46:45:05:43:b5:d6:a8:aa:ea:77:c8:6f:e4:61:
                    4f:6c:66:ca:fa:10:0e:e9:fc:8e:00:3e:74:80:0f:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:89:26:3A:39:BE:31:03:01:E8:85:5F:A1:5E:D1:A6:4E:BE:63:A5
            X509v3 Authority Key Identifier:
                keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:10:dc:db:b6:ac:b7:c7:93:ce:d7:6e:0c:22:c3:32:39:
         6d:90:d7:ad:58:3a:47:e2:8d:c2:5d:76:e1:d2:28:d3:a9:a1:
         11:9c:79:92:23:18:ee:21:85:6d:cf:fb:d8:63:dc:18:bd:e3:
         6d:ed:74:35:78:70:be:d4:26:e7:eb:bb:c9:fa:c2:2a:b9:99:
         9e:cd:69:18:4e:13:64:3e:10:85:8f:91:4a:df:e3:4b:11:4f:
         09:13:94:04:c8:e1:b6:81:ed:25:fa:ea:54:2d:db:29:44:c8:
         34:99:20:be:45:2c:56:42:ea:a9:b7:af:61:ff:a6:0d:ab:35:
         9f:97:02:df:65:3e:c9:50:95:03:e7:75:27:0a:f1:10:b9:1c:
         04:46:76:60:21:3a:8d:48:3d:42:2a:49:15:17:25:9c:07:71:
         e6:2e:c0:4f:39:bc:08:47:9b:63:17:1f:d9:ec:f9:83:20:12:
         3f:3e:f1:10:34:41:73:73:4e:17:12:8f:71:d5:b0:da:3e:c4:
         77:f5:b9:16:1a:97:12:66:1d:00:e2:03:f8:11:a8:0f:ec:7b:
         7a:a8:5a:e6:db:6e:a4:78:1f:4c:95:44:46:52:89:d5:04:fe:
         11:0d:25:b0:21:8f:6e:9d:d3:af:f7:17:45:c6:c6:e1:65:e0:
         57:49:7f:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrGOmpIdStAzjoKQv+nMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2VkNGFlNDNmYTE5MGMxMGZkMmM1M2ExMGUzZGUwYWJk
OThiNzgwHhcNMjUwNDEzMTIwMTI5WhcNMjUwNDE0MTIwMTI5WjAzMTEwLwYDVQQD
EyhkYTg5MjYzYTM5YmUzMTAzMDFlODg1NWZhMTVlZDFhNjRlYmU2M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxBQJ3elOzLNHI7E3o9iOllyd6ch
j6TfpCDO1jKVUWKGuzb8fGgYIhBlFZmP++LEEQED9RaD43bI2sJhGwO6MrjY6Hzw
HIRbwK96fS1t5pPGZNJps4KoaBddHwiMpy/DfpUAxTZglky2P1zBekZ53ZqRaXcC
4SWrTaOirgb82dNucI0kvHImVxradvLFSk41QZW0aUOI5gJZXigTN34MGgQLTGie
ot407v5qQ04VyfT7BkrIyKAUyjMzPiJzFnLK4GaR6NvVyFEAEWkFHK+IWhFX16Q8
4AI5/kkrGAi1OHWFRkUFQ7XWqKrqd8hv5GFPbGbK+hAO6fyOAD50gA8hQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqJJjo5vjEDAeiFX6Fe0aZOvmOlMB8GA1UdIwQY
MBaAFEQ+1K5D+hkMEP0sU6EOPeCr2Yt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYt
MjFmZTVhZTllZjNiLzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYtMjFmZTVhZTllZjNi
LzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG48Q3Nu2
rLfHk87XbgwiwzI5bZDXrVg6R+KNwl124dIo06mhEZx5kiMY7iGFbc/72GPcGL3j
be10NXhwvtQm5+u7yfrCKrmZns1pGE4TZD4QhY+RSt/jSxFPCROUBMjhtoHtJfrq
VC3bKUTINJkgvkUsVkLqqbevYf+mDas1n5cC32U+yVCVA+d1JwrxELkcBEZ2YCE6
jUg9QipJFRclnAdx5i7ATzm8CEebYxcf2ez5gyASPz7xEDRBc3NOFxKPcdWw2j7E
d/W5FhqXEmYdAOID+BGoD+x7eqha5ttupHgfTJVERlKJ1QT+EQ0lsCGPbp3Tr/cX
RcbG4WXgV0l/cw==
-----END CERTIFICATE-----