Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File:                     FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier:          iKksGVUPOP3Q0VbRU8VVNajCcqk2KFQcuMr6snidTiQ=
Subject key identifier:   9A:98:87:C3:C2:8D:77:1C:A8:F8:D3:9A:FA:19:53:84:DA:F2:34:E2
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer:       /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial:       01962F06ACB68DF7B91FCE52A1A7D565D1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number:          1406
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
                          2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: IuiIwAFuGXGFlioS+aVJX2IwLx4UrzsZn5/1PXXmEMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ac:b6:8d:f7:b9:1f:ce:52:a1:a7:d5:65:d1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=9a9887c3c28d771ca8f8d39afa195384daf234e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:3f:ff:42:28:e5:b2:16:96:5f:61:33:e4:
                    c1:05:f4:65:5a:93:68:5a:45:5f:94:37:a4:7d:90:
                    e6:c8:14:9f:60:13:46:e7:a1:52:24:4e:1e:7b:de:
                    2c:1d:7e:14:46:af:4a:a8:a9:fc:71:2a:6a:b0:78:
                    32:e3:93:2e:74:f1:78:85:ce:18:66:1d:97:f2:53:
                    66:ae:f4:69:3b:f0:65:82:20:62:7a:79:1e:37:e1:
                    bb:21:43:84:cb:bf:c2:33:9d:e7:db:da:93:7e:a5:
                    f4:94:dc:51:17:37:36:e5:43:f5:34:36:44:7c:c0:
                    cb:fd:3e:32:19:ed:a2:24:b2:7e:8b:4f:c6:1b:5c:
                    92:6d:a3:80:0b:75:83:f5:93:d4:d3:a7:a9:1c:3b:
                    71:a0:f3:26:1d:fa:a5:3f:af:a9:37:f9:b5:c4:40:
                    6b:e6:02:49:e6:3e:4d:88:24:9f:02:d0:20:1b:bf:
                    ce:3b:5f:07:6e:8b:6f:3b:ba:75:30:76:03:ff:40:
                    b8:fd:87:88:73:31:12:ad:a1:1c:91:39:bb:a5:be:
                    64:f7:a3:8c:f5:a8:7a:92:8a:f9:e4:1a:94:91:53:
                    fc:38:2b:4e:3b:93:c2:72:97:16:43:f6:84:d4:32:
                    9c:ff:17:91:40:15:15:eb:32:47:e2:c1:94:6b:34:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:98:87:C3:C2:8D:77:1C:A8:F8:D3:9A:FA:19:53:84:DA:F2:34:E2
            X509v3 Authority Key Identifier:
                keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:18:84:c6:d9:64:2f:f3:05:40:61:74:d9:b3:2b:dc:2b:
         e7:42:f3:69:2c:fb:9a:45:5f:9e:0a:ec:2e:b1:ac:8c:8e:fd:
         3b:3c:ec:22:7e:a7:f6:08:11:8d:28:98:6f:ff:b6:09:70:33:
         c1:0d:ec:46:41:79:3b:28:cc:0a:6f:1f:46:a4:f7:6a:38:0d:
         6e:38:45:0c:13:9f:bd:c5:39:1f:4c:9f:82:51:ec:61:3f:d3:
         0b:70:51:12:78:20:12:34:56:99:95:a9:e3:29:9c:9d:4f:ad:
         5b:f6:88:e9:ce:92:fc:f1:ab:35:54:a0:36:6b:19:b6:0c:6f:
         ea:aa:bf:33:ad:64:3b:66:cc:d4:68:93:15:fd:08:e1:30:c6:
         ee:e7:91:e7:d6:db:10:6a:5c:fb:ae:e7:05:df:32:62:67:8d:
         04:d7:d9:32:2d:0d:34:3c:2e:89:18:96:b2:61:a5:13:a3:82:
         c3:0f:e6:16:aa:ca:6d:be:fe:bb:54:d5:f4:94:cc:db:ab:c1:
         a8:86:8a:99:26:60:fa:38:10:12:2a:6d:0c:64:b4:3a:19:32:
         f4:e5:fd:1f:6b:b3:a5:07:2b:a2:04:9a:c1:48:1a:d4:67:2e:
         2d:37:d3:85:f1:55:bc:15:31:b6:9d:95:77:bc:12:f4:24:29:
         02:36:c1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqy2jfe5H85SoafVZdHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz
ZGNlYmYwHhcNMjUwNDEzMTIwMTI4WhcNMjUwNDE0MTIwMTI4WjAzMTEwLwYDVQQD
Eyg5YTk4ODdjM2MyOGQ3NzFjYThmOGQzOWFmYTE5NTM4NGRhZjIzNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqk//0Io5bIWll9hM+TBBfRlWpNo
WkVflDekfZDmyBSfYBNG56FSJE4ee94sHX4URq9KqKn8cSpqsHgy45MudPF4hc4Y
Zh2X8lNmrvRpO/BlgiBienkeN+G7IUOEy7/CM53n29qTfqX0lNxRFzc25UP1NDZE
fMDL/T4yGe2iJLJ+i0/GG1ySbaOAC3WD9ZPU06epHDtxoPMmHfqlP6+pN/m1xEBr
5gJJ5j5NiCSfAtAgG7/OO18HbotvO7p1MHYD/0C4/YeIczESraEckTm7pb5k96OM
9ah6kor55BqUkVP8OCtOO5PCcpcWQ/aE1DKc/xeRQBUV6zJH4sGUazTc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqYh8PCjXccqPjTmvoZU4Ta8jTiMB8GA1UdIwQY
MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt
N2IzY2MyMjgyNzFkLzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk
LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvUYhMbZ
ZC/zBUBhdNmzK9wr50LzaSz7mkVfngrsLrGsjI79OzzsIn6n9ggRjSiYb/+2CXAz
wQ3sRkF5OyjMCm8fRqT3ajgNbjhFDBOfvcU5H0yfglHsYT/TC3BREnggEjRWmZWp
4ymcnU+tW/aI6c6S/PGrNVSgNmsZtgxv6qq/M61kO2bM1GiTFf0I4TDG7ueR59bb
EGpc+67nBd8yYmeNBNfZMi0NNDwuiRiWsmGlE6OCww/mFqrKbb7+u1TV9JTM26vB
qIaKmSZg+jgQEiptDGS0Ohky9OX9H2uzpQcrogSawUga1GcuLTfThfFVvBUxtp2V
d7wS9CQpAjbBIA==
-----END CERTIFICATE-----