Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File:                     ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier:          sPGHFQjhapz6FpkwePIDRdlRVi3fqkzUvwAhOhbna2E=
Subject key identifier:   5D:39:3E:AC:37:9E:4E:9B:D0:55:F0:33:C9:8B:0A:CF:91:CB:E0:3E
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer:       /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial:       01962FAB62BFB0338FC60F2D8B1564923620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number:          0AA4
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: uad9iJy9u1ktp/4maO/kE4/Yp9ine4gcbHAgh4y2cis=)
                          2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:bf:b0:33:8f:c6:0f:2d:8b:15:64:92:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=5d393eac379e4e9bd055f033c98b0acf91cbe03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:ad:95:05:21:8d:72:ee:f1:28:11:8f:ee:5f:
                    66:ee:b7:92:ae:be:d8:53:50:bd:96:05:af:78:b4:
                    21:af:d7:f0:6b:a2:3a:cf:be:7a:e5:43:6d:bb:86:
                    f7:89:65:b1:1c:4c:1e:ca:90:cc:41:77:8a:6c:db:
                    42:29:41:10:b3:71:c8:aa:6f:b3:6c:d2:f6:ef:92:
                    af:ac:f5:ad:fd:d3:68:63:9f:6a:e9:6d:8b:4c:9d:
                    f7:5c:45:c4:4c:41:1b:0f:7b:fa:6d:13:e1:dc:19:
                    5d:7c:e0:25:49:52:95:21:98:ba:d1:d2:e7:8b:9d:
                    21:b1:28:69:c9:1e:de:6a:21:6f:29:43:e6:d7:ac:
                    d6:ba:01:2e:b3:cf:47:37:40:67:e8:de:ee:4c:a0:
                    53:d0:ce:3f:71:0d:fe:a0:b0:dd:10:8b:62:ed:8b:
                    82:e9:5b:64:d5:cc:78:22:e2:8d:4a:b0:47:31:69:
                    c3:5c:b8:87:a9:33:d9:8b:18:72:54:a1:21:08:f5:
                    ac:25:fd:64:f1:fe:28:2d:14:35:4d:86:21:1c:52:
                    c7:ee:b0:8a:fb:80:a8:39:c0:57:cb:6c:48:1f:62:
                    44:f3:a1:78:8f:07:11:6c:28:e9:a9:47:2d:f1:23:
                    56:8c:47:a4:db:6a:b8:b4:f8:e3:d3:d4:6e:2b:54:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:3E:AC:37:9E:4E:9B:D0:55:F0:33:C9:8B:0A:CF:91:CB:E0:3E
            X509v3 Authority Key Identifier:
                keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5f:2c:b3:15:c6:62:4e:a9:86:12:d5:a2:d9:25:f2:f1:97:
         ef:9a:82:f9:f9:fa:5f:03:a9:ec:2f:ce:51:49:05:cc:ea:ab:
         56:5e:77:29:c1:12:8c:42:8e:4f:80:4c:4a:e9:bb:81:2a:3e:
         cb:eb:8d:56:8c:00:ae:50:b7:e6:ff:5e:85:af:99:55:63:a2:
         f2:68:ea:3b:54:29:f6:a5:6b:04:bd:b3:72:08:ea:5c:ee:2b:
         e3:0a:0d:01:71:b1:55:b4:e5:11:a8:68:56:b2:21:9e:74:e9:
         af:72:37:91:de:25:93:1b:63:1c:99:ac:b4:f5:f7:d2:ea:b5:
         1a:a4:f6:5d:a7:a4:c8:af:d0:d2:70:56:bf:57:4a:0c:b9:c7:
         62:75:77:0c:4f:df:64:a7:ae:74:2a:b2:c5:c6:f9:8e:e5:36:
         1a:5b:97:c8:6d:e0:a1:cc:06:b5:99:71:e9:93:55:12:1c:93:
         7f:6b:75:71:02:73:1e:a5:53:2e:a0:13:e1:59:cd:29:6c:2d:
         07:e2:49:b2:ec:9c:07:f2:87:e3:2c:cf:00:fa:8c:f1:fb:6d:
         0c:22:e5:48:60:30:f3:d8:31:28:b2:24:cc:b3:4f:ec:b5:5f:
         8f:d4:cf:78:ae:76:4b:f4:c5:79:a5:97:35:18:a6:d3:93:5d:
         a6:b0:2d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2K/sDOPxg8tixVkkjYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl
NWM5YjEwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
Eyg1ZDM5M2VhYzM3OWU0ZTliZDA1NWYwMzNjOThiMGFjZjkxY2JlMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/a2VBSGNcu7xKBGP7l9m7reSrr7Y
U1C9lgWveLQhr9fwa6I6z7565UNtu4b3iWWxHEweypDMQXeKbNtCKUEQs3HIqm+z
bNL275KvrPWt/dNoY59q6W2LTJ33XEXETEEbD3v6bRPh3BldfOAlSVKVIZi60dLn
i50hsShpyR7eaiFvKUPm16zWugEus89HN0Bn6N7uTKBT0M4/cQ3+oLDdEIti7YuC
6Vtk1cx4IuKNSrBHMWnDXLiHqTPZixhyVKEhCPWsJf1k8f4oLRQ1TYYhHFLH7rCK
+4CoOcBXy2xIH2JE86F4jwcRbCjpqUct8SNWjEek22q4tPjj09RuK1QbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF05Pqw3nk6b0FXwM8mLCs+Ry+A+MB8GA1UdIwQY
MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct
M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl
LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl8ssxXG
Yk6phhLVotkl8vGX75qC+fn6XwOp7C/OUUkFzOqrVl53KcESjEKOT4BMSum7gSo+
y+uNVowArlC35v9eha+ZVWOi8mjqO1Qp9qVrBL2zcgjqXO4r4woNAXGxVbTlEaho
VrIhnnTpr3I3kd4lkxtjHJmstPX30uq1GqT2XaekyK/Q0nBWv1dKDLnHYnV3DE/f
ZKeudCqyxcb5juU2GluXyG3gocwGtZlx6ZNVEhyTf2t1cQJzHqVTLqAT4VnNKWwt
B+JJsuycB/KH4yzPAPqM8fttDCLlSGAw89gxKLIkzLNP7LVfj9TPeK52S/TFeaWX
NRim05NdprAtMg==
-----END CERTIFICATE-----