Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File:                     9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier:          UwrAe9zwlqWJv7rhCAkAlpfdwoU5uTg9QDiz6QxgKxY=
Subject key identifier:   B2:46:DD:E3:04:9C:FE:24:19:F9:19:D5:82:B5:B0:62:B4:1B:00:32
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer:       /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial:       01962DF3A6CFAFA0D1C3731658CBD6D72D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: jN15dRTjYO1dBxL5F5L0DkTVqmgz3RtVg2JMqumXCrg=)
                          2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
                          3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
                          4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a6:cf:af:a0:d1:c3:73:16:58:cb:d6:d7:2d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=b246dde3049cfe2419f919d582b5b062b41b0032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:7b:ff:7e:90:a2:24:ce:2f:88:5d:a6:b7:
                    be:dd:cf:b6:5d:7a:7c:ce:37:e6:5f:e7:bf:05:2f:
                    89:00:9b:86:18:8b:e7:4b:02:6c:68:d9:c3:56:72:
                    74:04:65:4b:1d:fa:4d:1f:68:37:1b:cb:47:dc:a5:
                    13:10:13:5f:af:88:f3:ae:75:59:8c:89:10:bb:59:
                    ff:85:0c:d2:f7:d0:9f:f9:cc:d3:22:e3:6d:9d:3b:
                    ce:5e:b3:7e:81:f3:33:97:2a:f8:6d:2e:df:13:42:
                    7f:f9:f5:cb:8c:bc:40:4b:62:df:89:bd:4f:b4:e3:
                    98:bd:fe:f9:17:4a:4f:42:91:25:19:69:43:52:d9:
                    7c:5e:67:34:f2:e7:d5:14:83:6f:43:91:2e:ca:10:
                    a9:95:7f:d1:f7:02:9b:e3:2e:c4:82:4d:25:5a:33:
                    7c:1d:63:81:5d:96:a3:0e:d6:69:01:71:07:ef:d1:
                    d4:dd:1c:5c:1a:61:de:53:7f:f8:ba:af:07:ac:9a:
                    9a:9b:a3:c8:28:5d:86:35:ad:59:9c:4c:6f:ff:40:
                    33:0f:e5:f2:9b:04:c3:df:5f:ab:23:5e:cd:01:6c:
                    48:ad:e2:56:fe:42:ec:17:0e:3c:7f:1c:06:ad:be:
                    77:ba:bf:8d:49:e3:c3:eb:81:19:24:96:20:78:96:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:46:DD:E3:04:9C:FE:24:19:F9:19:D5:82:B5:B0:62:B4:1B:00:32
            X509v3 Authority Key Identifier:
                keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:61:2d:05:5d:3d:0c:0c:20:9b:e7:12:b2:2f:51:e1:a5:a6:
         03:4c:f0:88:b7:08:5a:ca:21:c6:4a:54:f5:03:51:5e:90:46:
         73:f1:60:27:63:68:13:46:73:30:1c:04:05:8a:c9:de:c6:2a:
         6a:b0:30:f1:e6:0b:46:51:0d:ac:e7:b2:38:cf:3a:a1:a9:e0:
         5c:13:43:08:6a:19:cb:d9:18:e1:35:05:75:31:79:7d:db:f4:
         64:7b:c4:1f:70:4d:9d:9e:7a:f7:9d:49:8c:5c:ac:65:6b:4b:
         2c:ed:88:ce:26:55:70:41:69:6b:e9:3c:0b:ad:e2:a1:76:2a:
         81:bc:ec:1a:5d:03:fd:1c:1e:47:f9:ab:25:dd:3f:28:c0:e7:
         57:c9:f8:cd:59:6a:70:17:75:b8:45:f2:bf:23:f4:5f:6b:b1:
         ce:c3:04:c6:84:a1:db:7f:0a:7b:27:96:02:30:49:2b:18:bb:
         55:e1:83:d2:cf:38:c4:ce:22:6c:c4:30:3d:c7:f0:05:37:e8:
         55:55:bf:8c:a6:ba:23:a8:31:dd:1a:78:f2:10:68:92:18:d1:
         3e:0d:de:59:87:47:d8:87:17:9d:b0:3c:fa:a9:28:21:12:b8:
         43:66:99:91:35:c7:55:33:a1:d5:f1:7e:69:bd:31:a5:3a:cf:
         6a:17:13:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86bPr6DRw3MWWMvW1y2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx
ZWExMWQwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
EyhiMjQ2ZGRlMzA0OWNmZTI0MTlmOTE5ZDU4MmI1YjA2MmI0MWIwMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIx7/36QoiTOL4hdpre+3c+2XXp8
zjfmX+e/BS+JAJuGGIvnSwJsaNnDVnJ0BGVLHfpNH2g3G8tH3KUTEBNfr4jzrnVZ
jIkQu1n/hQzS99Cf+czTIuNtnTvOXrN+gfMzlyr4bS7fE0J/+fXLjLxAS2Lfib1P
tOOYvf75F0pPQpElGWlDUtl8Xmc08ufVFINvQ5EuyhCplX/R9wKb4y7Egk0lWjN8
HWOBXZajDtZpAXEH79HU3RxcGmHeU3/4uq8HrJqam6PIKF2GNa1ZnExv/0AzD+Xy
mwTD31+rI17NAWxIreJW/kLsFw48fxwGrb53ur+NSePD64EZJJYgeJZK7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJG3eMEnP4kGfkZ1YK1sGK0GwAyMB8GA1UdIwQY
MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt
YjRiMjg0MzdmZTZjLzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj
LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2EtBV09
DAwgm+cSsi9R4aWmA0zwiLcIWsohxkpU9QNRXpBGc/FgJ2NoE0ZzMBwEBYrJ3sYq
arAw8eYLRlENrOeyOM86oangXBNDCGoZy9kY4TUFdTF5fdv0ZHvEH3BNnZ56951J
jFysZWtLLO2IziZVcEFpa+k8C63ioXYqgbzsGl0D/RweR/mrJd0/KMDnV8n4zVlq
cBd1uEXyvyP0X2uxzsMExoSh238KeyeWAjBJKxi7VeGD0s84xM4ibMQwPcfwBTfo
VVW/jKa6I6gx3Rp48hBokhjRPg3eWYdH2IcXnbA8+qkoIRK4Q2aZkTXHVTOh1fF+
ab0xpTrPahcTAw==
-----END CERTIFICATE-----