Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File:                     mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier:          em1Ri45CGZH0oBtukj85dKzHCVUKssEBQ0WoHFTG61w=
Subject key identifier:   7B:32:69:AE:C1:8F:7D:04:39:34:30:52:68:BE:BF:5D:70:BC:53:57
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer:       /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial:       01962F06BA3AA53C9DA06AAD4E6A20C22C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number:          04C5
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
                          2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: WDw4Q/vaVX4P+trcBCBXBhcgmyT/Q/UrhVk5/fd49RQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:3a:a5:3c:9d:a0:6a:ad:4e:6a:20:c2:2c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=7b3269aec18f7d043934305268bebf5d70bc5357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:69:5e:31:9c:cb:9c:30:e1:db:85:76:87:
                    48:1d:a4:ab:46:9a:79:23:ad:d4:e0:42:ff:d5:d8:
                    7a:6e:18:ba:d3:a7:ef:cd:7d:b7:9c:82:68:ab:de:
                    65:85:6c:ce:6e:0c:9a:99:7c:ff:41:3c:7f:63:c9:
                    ec:73:e5:fe:17:0a:c7:51:4d:26:75:c8:db:bb:21:
                    14:af:b8:4a:31:77:b9:3a:af:b6:b1:93:9e:9e:a0:
                    ff:d0:62:35:df:3d:55:28:f8:1e:dd:5e:80:66:8a:
                    66:dd:56:fe:70:30:18:ab:80:fa:cb:b4:b7:d9:fa:
                    22:9d:07:97:ec:b5:00:98:ca:8c:f1:7e:ed:54:c2:
                    2a:2c:5f:d5:95:3d:2e:1f:1f:fa:da:e3:0b:b1:e3:
                    1f:d8:84:b5:d3:8b:52:8d:1b:90:6b:a5:5c:ca:25:
                    c9:84:c2:fc:da:5f:f1:5d:11:67:a6:20:08:b1:c9:
                    43:fd:2a:62:81:4b:f1:d4:5e:ce:a6:f3:de:23:bc:
                    01:4e:bc:d2:f9:cf:fa:2e:2c:e6:98:9d:9c:2f:bb:
                    85:e5:12:54:ab:62:b8:5e:9e:f1:af:38:06:89:77:
                    ee:2e:dd:28:27:10:e8:73:6e:95:1e:04:28:3d:ef:
                    58:3d:fd:d8:c8:03:95:5e:41:db:19:02:70:45:da:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:32:69:AE:C1:8F:7D:04:39:34:30:52:68:BE:BF:5D:70:BC:53:57
            X509v3 Authority Key Identifier:
                keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:26:20:5b:7b:8e:12:7d:cd:f9:43:57:aa:14:8b:6c:10:e4:
         6d:0c:e2:6d:cb:c9:1c:2c:52:d0:58:c1:be:d0:4c:8f:61:b6:
         59:96:a3:56:0e:96:bb:82:5f:02:e3:fb:ed:a8:dd:1c:37:c3:
         b7:f3:c9:bb:1b:80:f6:b9:ab:24:f2:79:da:11:8c:93:b3:86:
         df:97:f8:51:09:fb:f8:e6:cc:03:2b:7f:f8:fd:16:75:d2:c5:
         6a:2f:20:ee:e3:c5:35:6c:14:76:d8:7f:5c:84:9f:bc:91:22:
         ac:72:25:43:08:51:b8:18:97:c8:d6:dd:26:9e:8d:cb:92:52:
         1d:61:f0:05:95:9c:e6:13:a4:5f:7e:bc:14:4c:50:06:d7:68:
         3a:28:c8:ec:84:22:f2:52:f3:53:06:6b:d0:63:dc:d3:97:4c:
         db:02:02:f3:a3:1b:47:c0:94:40:ed:1e:a9:be:78:04:95:ce:
         f9:82:22:1d:9e:37:07:c7:31:cb:df:3c:16:18:82:c8:97:3a:
         02:1b:53:43:c2:e4:af:bf:36:1f:dd:71:15:84:8e:7a:53:4a:
         99:0f:12:1f:48:76:76:60:fa:c9:ed:02:0f:18:ab:e1:52:04:
         ac:df:73:98:78:07:8e:c4:38:fd:73:bd:b5:d1:4e:e1:97:b6:
         07:0d:a8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBro6pTydoGqtTmogwiwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OGEwMWUyNTI2ZTM5NTA0MTkyYzMwMjcyZjM4MGIzOWFl
M2YyYTYwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
Eyg3YjMyNjlhZWMxOGY3ZDA0MzkzNDMwNTI2OGJlYmY1ZDcwYmM1MzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdBpXjGcy5ww4duFdodIHaSrRpp5
I63U4EL/1dh6bhi606fvzX23nIJoq95lhWzObgyamXz/QTx/Y8nsc+X+FwrHUU0m
dcjbuyEUr7hKMXe5Oq+2sZOenqD/0GI13z1VKPge3V6AZopm3Vb+cDAYq4D6y7S3
2foinQeX7LUAmMqM8X7tVMIqLF/VlT0uHx/62uMLseMf2IS104tSjRuQa6VcyiXJ
hML82l/xXRFnpiAIsclD/SpigUvx1F7OpvPeI7wBTrzS+c/6LizmmJ2cL7uF5RJU
q2K4Xp7xrzgGiXfuLt0oJxDoc26VHgQoPe9YPf3YyAOVXkHbGQJwRdrDCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsyaa7Bj30EOTQwUmi+v11wvFNXMB8GA1UdIwQY
MBaAFJiKAeJSbjlQQZLDAnLzgLOa4/KmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM2MDMtYzJjYS00NTc3LWI3ZWIt
NzcyZjg0MWM0MzkzLzEvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mYTM2MDMtYzJjYS00NTc3LWI3ZWItNzcyZjg0MWM0Mzkz
LzEvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCYgW3uO
En3N+UNXqhSLbBDkbQzibcvJHCxS0FjBvtBMj2G2WZajVg6Wu4JfAuP77ajdHDfD
t/PJuxuA9rmrJPJ52hGMk7OG35f4UQn7+ObMAyt/+P0WddLFai8g7uPFNWwUdth/
XISfvJEirHIlQwhRuBiXyNbdJp6Ny5JSHWHwBZWc5hOkX368FExQBtdoOijI7IQi
8lLzUwZr0GPc05dM2wIC86MbR8CUQO0eqb54BJXO+YIiHZ43B8cxy988FhiCyJc6
AhtTQ8Lkr782H91xFYSOelNKmQ8SH0h2dmD6ye0CDxir4VIErN9zmHgHjsQ4/XO9
tdFO4Ze2Bw2oqw==
-----END CERTIFICATE-----