Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File:                     iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier:          r7DfxorM8iZ4bFztia6M7E99GyMu9XAGSmmHAgQQ/pM=
Subject key identifier:   F9:03:17:1F:4C:1B:02:D1:E6:8C:2B:95:A4:91:26:9D:88:8E:75:59
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer:       /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial:       01962E994D2AA09C43475BBEF676B9841C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number:          060C
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
                          2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: cBhqPm079ndwI42PTppXIlkkRynb1CjDiS0jKEubLbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4d:2a:a0:9c:43:47:5b:be:f6:76:b9:84:1c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=f903171f4c1b02d1e68c2b95a491269d888e7559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:30:34:53:c6:3d:97:8c:64:64:cf:0b:70:49:
                    e0:47:7a:67:52:64:ee:9d:83:b7:b7:4f:bd:bf:2d:
                    d5:a9:cb:69:ac:9e:09:6d:7d:23:ea:e0:c4:e8:ae:
                    e6:21:57:9d:ac:d4:bd:5d:15:c9:65:02:96:1a:5c:
                    f3:19:69:41:db:e3:ec:82:30:37:24:ee:0a:04:30:
                    38:0f:65:58:e1:a2:53:8e:97:9e:cb:67:19:c1:be:
                    dd:0a:37:f2:c7:37:4b:7c:e3:3f:83:34:4b:bd:f6:
                    3d:43:75:1b:72:a1:a9:24:8a:3c:b0:56:bf:21:0a:
                    70:05:8b:f4:c9:bf:f6:fc:ab:1b:7e:a9:17:8a:d1:
                    d7:2c:d5:ea:4f:87:1a:c6:f2:e6:1f:76:b7:e9:9f:
                    7f:ae:c0:4a:4b:b9:e2:7b:15:e6:27:2f:ca:1b:d6:
                    6a:f5:e6:31:bd:1f:15:8d:78:3d:92:db:1f:ae:af:
                    ee:f3:ca:9b:3a:1e:5a:7a:3b:1e:2c:61:d7:38:cc:
                    fa:a4:84:f7:97:00:68:5c:e2:9f:f3:35:e8:45:59:
                    5b:69:da:09:fa:dc:9b:87:47:a2:44:34:fa:dd:74:
                    53:7f:56:94:e6:c1:16:b3:45:e1:df:8e:56:61:9a:
                    cf:c8:a5:6f:f4:c4:53:4e:9c:90:bb:3a:a9:6e:ef:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:17:1F:4C:1B:02:D1:E6:8C:2B:95:A4:91:26:9D:88:8E:75:59
            X509v3 Authority Key Identifier:
                keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e4:2c:d7:6f:b8:5a:7f:cb:a8:ba:8a:34:a0:02:d3:2d:a7:
         dc:3f:fd:bb:71:a6:73:61:06:65:d5:a3:8f:6f:05:42:e5:ea:
         5e:74:f4:58:76:6c:0f:0e:86:fe:38:f5:57:5d:cf:37:81:3b:
         b3:86:07:16:d7:35:20:55:d7:af:72:79:5f:55:19:ea:06:69:
         8c:c5:33:d7:14:d0:bc:81:fc:a6:a1:96:fe:0d:8e:b5:fc:d6:
         ec:74:c0:45:70:a7:f5:e6:6d:b1:7a:7c:ee:2c:ec:a4:1a:c7:
         15:9a:30:93:69:6b:5e:e0:7d:db:9a:00:d6:8d:d8:12:55:49:
         5d:02:a8:30:c4:02:c7:f8:5e:3d:1b:47:c1:00:f7:09:7f:39:
         1b:ab:96:17:4d:08:29:d7:98:ad:2a:5f:9f:16:a8:a8:68:5a:
         93:fe:7a:3d:cb:10:ab:7e:b2:fa:c0:6d:dd:11:d1:a8:3e:3f:
         c5:da:5a:cd:5d:51:46:d9:ec:88:24:73:91:f0:43:b1:6e:ad:
         18:81:95:71:d1:57:66:d6:36:82:1c:d2:02:6c:42:66:8d:0a:
         de:60:66:3d:fe:49:5c:0b:2a:c0:ba:bf:c8:89:ff:51:eb:01:
         e5:b3:62:99:7d:55:89:46:f2:a8:bd:d8:6c:34:c7:25:5e:12:
         0a:af:ff:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumU0qoJxDR1u+9na5hByTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy
OTM3ODIwHhcNMjUwNDEzMTAwMjAwWhcNMjUwNDE0MTAwMjAwWjAzMTEwLwYDVQQD
EyhmOTAzMTcxZjRjMWIwMmQxZTY4YzJiOTVhNDkxMjY5ZDg4OGU3NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zA0U8Y9l4xkZM8LcEngR3pnUmTu
nYO3t0+9vy3VqctprJ4JbX0j6uDE6K7mIVedrNS9XRXJZQKWGlzzGWlB2+PsgjA3
JO4KBDA4D2VY4aJTjpeey2cZwb7dCjfyxzdLfOM/gzRLvfY9Q3UbcqGpJIo8sFa/
IQpwBYv0yb/2/KsbfqkXitHXLNXqT4caxvLmH3a36Z9/rsBKS7niexXmJy/KG9Zq
9eYxvR8VjXg9ktsfrq/u88qbOh5aejseLGHXOMz6pIT3lwBoXOKf8zXoRVlbadoJ
+tybh0eiRDT63XRTf1aU5sEWs0Xh345WYZrPyKVv9MRTTpyQuzqpbu9PEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkDFx9MGwLR5owrlaSRJp2IjnVZMB8GA1UdIwQY
MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct
YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm
LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOQs12+4
Wn/LqLqKNKAC0y2n3D/9u3Gmc2EGZdWjj28FQuXqXnT0WHZsDw6G/jj1V13PN4E7
s4YHFtc1IFXXr3J5X1UZ6gZpjMUz1xTQvIH8pqGW/g2OtfzW7HTARXCn9eZtsXp8
7izspBrHFZowk2lrXuB925oA1o3YElVJXQKoMMQCx/hePRtHwQD3CX85G6uWF00I
KdeYrSpfnxaoqGhak/56PcsQq36y+sBt3RHRqD4/xdpazV1RRtnsiCRzkfBDsW6t
GIGVcdFXZtY2ghzSAmxCZo0K3mBmPf5JXAsqwLq/yIn/UesB5bNimX1ViUbyqL3Y
bDTHJV4SCq//0Q==
-----END CERTIFICATE-----