Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File:                     0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier:          4j+hVnZLQ22nJ8pUk7Ea1D49SabGbhsaLWsVQkvXb9Y=
Subject key identifier:   A6:97:5B:64:91:5B:A4:E7:2B:80:34:C5:05:77:41:1F:C9:10:74:25
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer:       /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial:       01962F06B2AEC2C132875A16145D7EC00336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number:          094B
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: xyD8QQsrTvB1YO2ZdAIrxpFvgFNPnIIaYVJgDQFiFeo=)
                          2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:ae:c2:c1:32:87:5a:16:14:5d:7e:c0:03:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=a6975b64915ba4e72b8034c50577411fc9107425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:19:8f:48:d3:4f:79:f1:2f:17:af:22:4a:
                    d0:36:69:f6:76:c3:9c:2c:7b:86:ea:ec:d1:b6:0c:
                    af:95:4d:c9:a0:b1:d9:a9:4b:2f:87:af:35:1e:d2:
                    7b:61:d6:3d:b2:2f:88:86:b3:a4:26:50:82:9e:52:
                    93:01:de:97:f1:b2:e9:12:a8:e0:c2:d1:80:21:3f:
                    7a:97:22:97:5e:84:49:41:ed:0c:2f:eb:8d:87:2c:
                    56:0f:47:08:b1:67:f4:ce:2c:d2:d1:03:03:6e:92:
                    aa:d7:d3:c1:0a:a2:13:68:54:77:c1:2e:89:79:61:
                    63:91:5e:41:86:96:1a:ee:62:66:38:f0:27:b6:a5:
                    eb:05:60:02:e8:70:6d:bb:8a:f4:c3:9f:c9:1f:ab:
                    70:e4:d9:52:86:b9:8e:52:2b:fe:98:db:2f:ec:b4:
                    5e:b0:83:4f:67:3a:9f:13:66:92:ea:7f:bc:77:2a:
                    a0:d8:65:0f:d9:83:2c:e9:9d:f8:3b:0f:64:f7:e9:
                    75:03:ee:ee:7a:db:22:90:12:7a:88:ca:4f:3d:9e:
                    7e:00:0c:0f:cd:30:58:b0:ae:17:a5:59:d4:09:71:
                    16:dc:b7:b8:fe:dc:05:66:c2:13:67:bb:f1:4f:eb:
                    fd:d3:ae:f2:fe:ed:c2:ff:e5:88:e4:6c:fd:f3:4b:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:97:5B:64:91:5B:A4:E7:2B:80:34:C5:05:77:41:1F:C9:10:74:25
            X509v3 Authority Key Identifier:
                keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:21:3a:30:30:04:27:55:a2:9b:e9:fa:df:32:1c:e6:12:
         c9:bf:25:81:4d:9d:33:fa:be:b4:2b:88:5b:e3:98:b3:25:99:
         39:c3:da:8b:7a:f5:84:41:d3:a6:fa:e1:ad:e3:63:95:bd:fd:
         e7:9d:41:1b:c9:c4:d8:4c:a7:db:95:4a:48:20:49:28:da:9f:
         f0:d4:22:21:3f:8c:84:70:85:ad:ec:50:f9:b7:27:cd:34:a8:
         33:b4:d1:d7:a4:80:8f:1d:cb:f4:af:ff:18:00:62:73:78:e7:
         71:56:4f:ed:4e:12:13:c9:89:39:f2:2d:8c:d4:e1:e2:3b:5a:
         12:7f:7d:3f:e9:9d:b4:4d:92:43:f2:c3:a6:42:f6:16:23:50:
         7c:4c:5f:7d:1c:87:70:92:bc:8d:50:08:f8:e7:56:d7:77:07:
         4f:6b:d7:3f:f1:54:90:1a:89:c9:e7:33:3e:81:be:f7:a0:4c:
         8b:a5:c1:3f:27:09:f1:94:3c:ea:83:89:83:c7:48:60:4f:b7:
         82:9c:9e:ce:7e:18:dd:f6:b2:33:14:41:3e:9b:98:c9:7e:4a:
         8d:b5:84:1c:4f:17:7c:de:09:40:dd:ed:d8:17:dd:00:fa:a3:
         c4:61:58:23:c2:19:51:bd:ab:93:8b:c1:19:ef:82:9f:8a:77:
         06:d2:4c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrKuwsEyh1oWFF1+wAM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjUwNDEzMTIwMTMwWhcNMjUwNDE0MTIwMTMwWjAzMTEwLwYDVQQD
EyhhNjk3NWI2NDkxNWJhNGU3MmI4MDM0YzUwNTc3NDExZmM5MTA3NDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz4Zj0jTT3nxLxevIkrQNmn2dsOc
LHuG6uzRtgyvlU3JoLHZqUsvh681HtJ7YdY9si+IhrOkJlCCnlKTAd6X8bLpEqjg
wtGAIT96lyKXXoRJQe0ML+uNhyxWD0cIsWf0zizS0QMDbpKq19PBCqITaFR3wS6J
eWFjkV5BhpYa7mJmOPAntqXrBWAC6HBtu4r0w5/JH6tw5NlShrmOUiv+mNsv7LRe
sINPZzqfE2aS6n+8dyqg2GUP2YMs6Z34Ow9k9+l1A+7uetsikBJ6iMpPPZ5+AAwP
zTBYsK4XpVnUCXEW3Le4/twFZsITZ7vxT+v9067y/u3C/+WI5Gz980uMywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaXW2SRW6TnK4A0xQV3QR/JEHQlMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXshOjAw
BCdVopvp+t8yHOYSyb8lgU2dM/q+tCuIW+OYsyWZOcPai3r1hEHTpvrhreNjlb39
551BG8nE2Eyn25VKSCBJKNqf8NQiIT+MhHCFrexQ+bcnzTSoM7TR16SAjx3L9K//
GABic3jncVZP7U4SE8mJOfItjNTh4jtaEn99P+mdtE2SQ/LDpkL2FiNQfExffRyH
cJK8jVAI+OdW13cHT2vXP/FUkBqJyeczPoG+96BMi6XBPycJ8ZQ86oOJg8dIYE+3
gpyezn4Y3fayMxRBPpuYyX5KjbWEHE8XfN4JQN3t2BfdAPqjxGFYI8IZUb2rk4vB
Ge+Cn4p3BtJMzA==
-----END CERTIFICATE-----