Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File:                     o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier:          tAq5IN3fFv7RDhFAKwruH+8Fo8qdG6zlk/YCpUbEZb8=
Subject key identifier:   E9:AD:28:7E:00:5C:93:FC:03:58:E1:DA:F9:A1:03:A2:8D:F3:2D:D4
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer:       /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial:       01962E61942573C5A8DB918D42C1A7713D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number:          14DC
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: JQFRevUesYnGzWy86if_lRLWdpc.roa (hash: t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=)
                          2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: wWx+TmQhZxvq++w4GAWYf/b4hxFkW+gqpu9rvPob5OQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:94:25:73:c5:a8:db:91:8d:42:c1:a7:71:3d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=e9ad287e005c93fc0358e1daf9a103a28df32dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:bb:4d:be:04:a7:6f:73:5b:c1:e4:b9:fd:
                    32:31:10:6d:72:72:9a:ad:0a:3c:07:8c:23:64:28:
                    68:35:a5:d4:4f:2a:30:45:0b:9c:59:40:99:a7:73:
                    0f:82:c7:98:bc:26:2d:d5:93:6e:d7:6f:7b:d3:bd:
                    16:4c:0d:ad:88:81:aa:bb:3b:f9:66:e8:c8:56:48:
                    98:89:e6:5e:83:c7:22:32:59:74:b0:b6:19:5a:a9:
                    43:45:0d:39:86:93:a1:d7:64:6a:ae:35:42:c3:2b:
                    85:4a:2f:b2:c6:f8:57:b0:c9:87:cb:68:bd:bb:af:
                    96:d4:c4:25:ea:56:59:55:ad:25:9f:91:34:f4:9b:
                    76:a5:a2:c2:19:d9:b7:97:48:1e:01:d0:d5:67:57:
                    76:01:28:fc:06:e5:7f:73:26:ac:fb:1c:8f:b5:04:
                    34:30:c0:b5:45:a7:0a:d9:b5:4f:76:57:78:20:ff:
                    01:3a:9a:ba:d8:cc:e6:80:48:f5:95:9c:5b:73:a9:
                    1f:8a:ae:4b:38:cb:75:64:c8:ca:96:d9:5d:19:f0:
                    88:57:31:09:df:9c:75:9a:1b:4b:2f:e6:f1:52:3c:
                    75:6a:fa:d2:a7:22:de:1c:c7:c6:c6:fe:ce:96:44:
                    f5:1e:38:51:9e:41:3d:7a:b4:2a:1b:07:52:91:ae:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AD:28:7E:00:5C:93:FC:03:58:E1:DA:F9:A1:03:A2:8D:F3:2D:D4
            X509v3 Authority Key Identifier:
                keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:4a:5b:34:5a:ec:c7:e3:81:05:3a:1e:2e:12:f8:ed:39:
         e6:09:3d:ea:55:fc:08:64:5f:04:35:3a:05:7e:c6:ce:a8:fb:
         b1:a3:d3:dc:a4:e2:a2:9a:4e:6d:6f:33:8f:23:9e:d0:09:ff:
         f4:12:d8:12:5c:7a:0b:b4:b4:07:ed:a7:4d:98:c3:9a:69:48:
         95:11:a7:79:b5:ee:d1:91:69:ab:22:d9:15:f5:41:c4:ee:bc:
         d0:d1:ab:d5:52:53:6d:e2:bf:c9:b7:8d:cc:52:b0:ff:89:06:
         52:68:25:5a:dd:14:f5:a0:c4:44:de:e7:73:41:91:1d:ac:6f:
         ce:6d:b8:17:66:9b:9d:1d:6e:78:5a:fc:17:0d:de:4e:6c:25:
         b5:3a:ad:35:18:bb:d4:71:71:85:a5:d0:ba:ba:a6:54:5f:50:
         ca:9f:69:2c:a0:e1:ef:28:30:57:5a:a8:f9:ab:a9:55:c1:32:
         a5:e9:e8:1f:73:9d:07:a6:36:d1:3f:4c:fb:cb:14:88:57:8e:
         ca:bb:fa:55:84:7e:95:e8:f7:9d:91:e7:06:ed:9d:2a:c3:cf:
         9e:b8:f0:1d:6c:7d:32:9b:e2:5d:68:3a:af:fb:3f:cc:78:2c:
         8f:97:a3:45:a9:bb:7b:28:d1:f9:49:b3:a4:7d:d2:c1:e0:27:
         d3:f7:44:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZQlc8Wo25GNQsGncT1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjZmMzViYWM2MWEwYWJmNzFkMThkNmIxMDYzZDVjOTMz
YTI0YWIwHhcNMjUwNDEzMDkwMTA4WhcNMjUwNDE0MDkwMTA4WjAzMTEwLwYDVQQD
EyhlOWFkMjg3ZTAwNWM5M2ZjMDM1OGUxZGFmOWExMDNhMjhkZjMyZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMK7Tb4Ep29zW8Hkuf0yMRBtcnKa
rQo8B4wjZChoNaXUTyowRQucWUCZp3MPgseYvCYt1ZNu1297070WTA2tiIGquzv5
ZujIVkiYieZeg8ciMll0sLYZWqlDRQ05hpOh12RqrjVCwyuFSi+yxvhXsMmHy2i9
u6+W1MQl6lZZVa0ln5E09Jt2paLCGdm3l0geAdDVZ1d2ASj8BuV/cyas+xyPtQQ0
MMC1RacK2bVPdld4IP8BOpq62MzmgEj1lZxbc6kfiq5LOMt1ZMjKltldGfCIVzEJ
35x1mhtLL+bxUjx1avrSpyLeHMfGxv7OlkT1HjhRnkE9erQqGwdSka7zAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmtKH4AXJP8A1jh2vmhA6KN8y3UMB8GA1UdIwQY
MBaAFKNm81usYaCr9x0Y1rEGPVyTOiSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEt
MzE5MDc5NWU4NjNiLzEvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEtMzE5MDc5NWU4NjNi
LzEvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiclKWzRa
7MfjgQU6Hi4S+O055gk96lX8CGRfBDU6BX7Gzqj7saPT3KTioppObW8zjyOe0An/
9BLYElx6C7S0B+2nTZjDmmlIlRGnebXu0ZFpqyLZFfVBxO680NGr1VJTbeK/ybeN
zFKw/4kGUmglWt0U9aDERN7nc0GRHaxvzm24F2abnR1ueFr8Fw3eTmwltTqtNRi7
1HFxhaXQurqmVF9Qyp9pLKDh7ygwV1qo+aupVcEypenoH3OdB6Y20T9M+8sUiFeO
yrv6VYR+lej3nZHnBu2dKsPPnrjwHWx9MpviXWg6r/s/zHgsj5ejRam7eyjR+Umz
pH3SweAn0/dEIA==
-----END CERTIFICATE-----