Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File:                     bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier:          pwyx9fSpJ+XZ0nKWKFZaj447+UUkmCHGTZXD5DY4x4Q=
Subject key identifier:   26:E7:38:A9:79:74:F5:2D:F6:E6:39:AC:58:A0:63:F3:D3:98:F3:06
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer:       /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial:       01962E2B00E318D8490D6A026E74D5F4E56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number:          013D
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
                          2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: sYfELQm/t7UbV1CE2zDOra2GYwm5O0OD8N5FBdkGi9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:e3:18:d8:49:0d:6a:02:6e:74:d5:f4:e5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=26e738a97974f52df6e639ac58a063f3d398f306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:50:a6:2b:3f:6d:6b:8f:d3:4a:b8:87:88:
                    8a:73:18:24:14:80:3c:46:a8:ed:5a:2d:47:2e:4e:
                    37:df:58:47:1c:ed:e4:ba:02:04:44:5b:8e:0b:b3:
                    43:15:ca:f0:04:b9:23:32:a5:af:f0:51:9b:5d:0f:
                    29:6e:41:36:70:4c:e1:45:de:67:1b:94:cf:9d:80:
                    5a:ff:fc:1e:87:a7:2f:ac:07:09:d6:a5:56:7c:8f:
                    3e:56:a8:4a:85:93:20:00:86:75:63:1b:a5:83:bd:
                    9c:12:66:9c:0a:6d:5f:ae:be:38:ea:d0:78:dc:b1:
                    7b:53:4d:c0:54:8e:b0:af:ce:04:cd:d1:f8:83:95:
                    6a:4a:45:42:5d:8d:b3:ac:e5:ae:e4:20:9a:39:2b:
                    88:52:d6:b6:89:bb:72:99:2d:81:85:9a:63:81:45:
                    8c:47:91:83:64:0b:21:c6:42:44:4a:75:d7:2c:9f:
                    80:5b:58:31:7e:be:90:82:41:52:e4:f2:a1:ec:da:
                    aa:e7:8f:62:a9:1f:09:7e:7a:b6:a4:4f:97:40:21:
                    26:db:f8:f3:6d:2c:32:6a:cb:36:21:24:db:67:24:
                    24:32:3b:8d:5d:c4:1d:ab:28:6b:4b:1f:82:fe:38:
                    cb:6a:a5:7a:85:56:4d:b7:f7:95:4b:a1:0e:65:9a:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:38:A9:79:74:F5:2D:F6:E6:39:AC:58:A0:63:F3:D3:98:F3:06
            X509v3 Authority Key Identifier:
                keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e5:c9:e6:85:24:1f:04:8c:ae:8a:3e:4c:5e:28:81:ef:ee:
         2f:45:f1:03:53:09:2c:0a:26:68:c7:5a:c6:b0:04:36:48:51:
         a5:22:ee:64:0c:43:40:77:9f:14:1f:8c:98:3f:69:7d:3c:52:
         fb:8d:ba:a4:af:b4:02:c4:ad:1b:72:31:77:17:20:76:72:e0:
         db:05:e5:de:8d:a4:e5:f4:fd:aa:fb:6f:34:1c:67:4f:c7:b0:
         74:15:23:90:5a:2a:a8:5e:b1:ff:b7:87:f5:4b:2d:8b:b9:bc:
         05:d8:00:71:e6:09:d6:f8:a1:f6:3d:32:df:96:68:e9:8e:6f:
         6c:6b:a8:c4:bf:3f:ad:30:26:02:34:43:d5:cb:53:4c:0f:f5:
         60:7a:03:a2:3e:de:2b:c1:b0:ed:e3:88:c6:28:e3:15:5a:b6:
         3d:c9:e1:69:81:fe:62:b0:3b:cf:97:8b:a0:09:d3:e8:08:f3:
         1a:ed:9f:53:4e:55:b4:df:8f:fd:59:8c:4f:50:4d:7b:97:c3:
         2f:2d:54:9d:78:75:46:6d:c4:30:58:18:64:a9:b8:df:eb:87:
         42:24:90:1d:8c:6f:24:c4:1e:0f:3f:5b:d3:e5:d9:06:cc:5c:
         1c:17:bb:a9:1a:f3:20:ee:2d:c6:fe:5b:e1:72:18:de:93:71:
         3a:87:7b:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwDjGNhJDWoCbnTV9OVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTNmYjg2Nzg2MWRhYWZkNzgxMjc5ODk3ZmUyNWE4ZWIz
NzE0NjgwHhcNMjUwNDEzMDgwMTMyWhcNMjUwNDE0MDgwMTMyWjAzMTEwLwYDVQQD
EygyNmU3MzhhOTc5NzRmNTJkZjZlNjM5YWM1OGEwNjNmM2QzOThmMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UBQpis/bWuP00q4h4iKcxgkFIA8
RqjtWi1HLk4331hHHO3kugIERFuOC7NDFcrwBLkjMqWv8FGbXQ8pbkE2cEzhRd5n
G5TPnYBa//weh6cvrAcJ1qVWfI8+VqhKhZMgAIZ1Yxulg72cEmacCm1frr446tB4
3LF7U03AVI6wr84EzdH4g5VqSkVCXY2zrOWu5CCaOSuIUta2ibtymS2BhZpjgUWM
R5GDZAshxkJESnXXLJ+AW1gxfr6QgkFS5PKh7Nqq549iqR8Jfnq2pE+XQCEm2/jz
bSwyass2ISTbZyQkMjuNXcQdqyhrSx+C/jjLaqV6hVZNt/eVS6EOZZrjXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbnOKl5dPUt9uY5rFigY/PTmPMGMB8GA1UdIwQY
MBaAFGzj+4Z4Ydqv14EnmJf+JajrNxRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMt
ZTQzOTFmYmNhZjE0LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMtZTQzOTFmYmNhZjE0
LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+XJ5oUk
HwSMroo+TF4oge/uL0XxA1MJLAomaMdaxrAENkhRpSLuZAxDQHefFB+MmD9pfTxS
+426pK+0AsStG3IxdxcgdnLg2wXl3o2k5fT9qvtvNBxnT8ewdBUjkFoqqF6x/7eH
9Usti7m8BdgAceYJ1vih9j0y35Zo6Y5vbGuoxL8/rTAmAjRD1ctTTA/1YHoDoj7e
K8Gw7eOIxijjFVq2PcnhaYH+YrA7z5eLoAnT6AjzGu2fU05VtN+P/VmMT1BNe5fD
Ly1UnXh1Rm3EMFgYZKm43+uHQiSQHYxvJMQeDz9b0+XZBsxcHBe7qRrzIO4txv5b
4XIY3pNxOod7pQ==
-----END CERTIFICATE-----