Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File:                     FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier:          +gYDU9OL0koaNPS1HltTDCO1xcw4e/dRVkBTytjGpWY=
Subject key identifier:   6A:57:31:8E:3C:F4:65:86:55:F5:E8:A8:D1:00:84:44:6C:7F:B7:76
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer:       /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial:       01962FAB18EF5573CFC72ABBFE902C55836F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: 5tn7sh9S1767qFaSuPNjm6XCZrlCha/lmbzDkuGWetU=)
                          2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:ef:55:73:cf:c7:2a:bb:fe:90:2c:55:83:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=6a57318e3cf4658655f5e8a8d10084446c7fb776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:e3:a0:c2:a4:7a:c4:5e:d3:25:e4:aa:7a:
                    e8:4b:a1:d5:04:bf:09:07:27:6b:b2:85:d1:55:86:
                    29:7a:79:94:f7:48:8c:f3:2d:26:78:7e:09:26:07:
                    da:01:8c:75:ea:ad:05:37:27:49:ec:3c:f7:2e:89:
                    24:95:07:a8:97:10:1e:f6:90:9d:ba:05:42:8f:ce:
                    14:1d:3e:4a:e4:fc:4a:13:b6:76:be:fb:cc:30:ab:
                    04:63:0d:fe:45:62:2d:3b:c9:78:8a:39:c5:a8:e1:
                    21:9f:3b:68:ba:36:27:bf:da:b9:c7:37:9b:5f:6e:
                    12:b6:6f:89:7f:c4:bd:ed:5c:94:68:5b:7d:57:6d:
                    08:c0:da:9a:d6:42:c9:58:70:5a:8b:14:41:97:5f:
                    bb:d2:9d:d9:7f:81:72:d8:95:04:46:58:11:50:17:
                    5f:3a:b6:aa:3a:22:14:11:e8:72:6f:e8:dc:12:6e:
                    57:e4:d0:9f:af:4e:60:15:39:55:e3:82:e6:8e:a9:
                    87:ab:71:d3:a5:92:09:e5:15:6d:92:09:4a:a9:c4:
                    d7:b9:f5:ef:c5:15:d2:4c:af:dc:59:00:5c:27:2c:
                    10:d6:6c:9f:e5:cd:c2:5d:7a:1e:e8:3a:6e:f4:13:
                    85:dd:00:c1:09:4b:38:17:68:98:86:a1:6f:cd:44:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:57:31:8E:3C:F4:65:86:55:F5:E8:A8:D1:00:84:44:6C:7F:B7:76
            X509v3 Authority Key Identifier:
                keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:f3:43:99:7a:a0:d4:41:20:57:b3:23:32:58:9d:2f:31:
         2f:25:74:66:bf:b2:d3:89:c0:03:68:93:e0:e7:1f:37:9f:f5:
         33:aa:36:9e:d1:81:c8:68:ef:df:4b:4b:25:08:33:7f:7f:a8:
         6c:9f:f6:73:14:e7:a4:d9:de:f3:5e:98:78:84:26:d0:d7:c3:
         9b:78:75:1b:76:64:54:58:25:8a:00:ef:39:66:5f:1d:76:b6:
         42:76:56:3c:7a:54:95:d4:80:8d:ee:1b:d7:55:1a:a8:92:0f:
         ea:82:1f:9e:4d:34:1f:19:dd:bf:32:12:b2:ab:69:cc:83:22:
         5a:a0:57:ef:bf:3c:80:cd:20:04:2c:90:80:7a:5c:68:2c:29:
         64:72:6c:a1:06:2c:0e:fc:63:af:10:be:9f:ff:3c:97:a2:eb:
         c6:a0:eb:de:b7:b8:1f:87:a4:16:bc:b9:f6:20:ea:76:88:1f:
         f7:a4:e7:2c:8b:ba:cf:dd:b3:04:f6:dd:77:3e:fc:34:51:3c:
         10:94:1a:4a:a8:05:cc:b1:81:d8:a5:9f:61:29:f8:0f:80:57:
         61:75:cb:64:39:ff:ab:85:61:e9:be:04:e5:d9:5e:c7:3a:69:
         91:ce:41:be:c5:8c:23:be:a2:b3:92:4c:93:d6:d3:a3:f3:31:
         99:11:3c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxjvVXPPxyq7/pAsVYNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2M4ODBmMGExMmM3Yjk0ZjcxZDliMmU1YjAyOGE3MGQx
ZmEzNGEwHhcNMjUwNDEzMTUwMTA0WhcNMjUwNDE0MTUwMTA0WjAzMTEwLwYDVQQD
Eyg2YTU3MzE4ZTNjZjQ2NTg2NTVmNWU4YThkMTAwODQ0NDZjN2ZiNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp/joMKkesRe0yXkqnroS6HVBL8J
BydrsoXRVYYpenmU90iM8y0meH4JJgfaAYx16q0FNydJ7Dz3LokklQeolxAe9pCd
ugVCj84UHT5K5PxKE7Z2vvvMMKsEYw3+RWItO8l4ijnFqOEhnztoujYnv9q5xzeb
X24Stm+Jf8S97VyUaFt9V20IwNqa1kLJWHBaixRBl1+70p3Zf4Fy2JUERlgRUBdf
OraqOiIUEehyb+jcEm5X5NCfr05gFTlV44LmjqmHq3HTpZIJ5RVtkglKqcTXufXv
xRXSTK/cWQBcJywQ1myf5c3CXXoe6Dpu9BOF3QDBCUs4F2iYhqFvzUQYcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpXMY489GWGVfXoqNEAhERsf7d2MB8GA1UdIwQY
MBaAFBXMiA8KEse5T3HZsuWwKKcNH6NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEt
MGE4ZmU2NDM0YmY4LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEtMGE4ZmU2NDM0YmY4
LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7PzQ5l6
oNRBIFezIzJYnS8xLyV0Zr+y04nAA2iT4OcfN5/1M6o2ntGByGjv30tLJQgzf3+o
bJ/2cxTnpNne816YeIQm0NfDm3h1G3ZkVFgligDvOWZfHXa2QnZWPHpUldSAje4b
11UaqJIP6oIfnk00HxndvzISsqtpzIMiWqBX7788gM0gBCyQgHpcaCwpZHJsoQYs
DvxjrxC+n/88l6LrxqDr3re4H4ekFry59iDqdogf96TnLIu6z92zBPbddz78NFE8
EJQaSqgFzLGB2KWfYSn4D4BXYXXLZDn/q4Vh6b4E5dlexzppkc5BvsWMI76is5JM
k9bTo/MxmRE8xg==
-----END CERTIFICATE-----