Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
File:                     8l_UfYNvym90HKo4I5N_S7HxspQ.mft (raw, json)
Hash identifier:          UtiJnThsA04s7w26FaBjn8ffQvORLEBOOPLV5hJrAAY=
Subject key identifier:   14:14:2A:F3:AA:0A:20:55:24:FA:99:25:C4:67:7E:72:6F:FE:6C:25
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Certificate issuer:       /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial:       01962ECFC85689B7C0021DB54A449AA89573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
Manifest number:          06D6
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 3yojvf8xLy7Wn7IouQzlSqK0wi8.roa (hash: XkJKLziNIIGZCpFPWVC2bt7aic/Y/irC0qgPRJLIevw=)
                          2: 8l_UfYNvym90HKo4I5N_S7HxspQ.crl (hash: sgmk+eG+fUoJRF+VOVYMgeECZkV555/GKDKHqVAugRU=)
                          3: zzDFF83rooq9bozHtYL_dATXTDM.roa (hash: MyfSjNe+EtbThUkyyT8a+4fAUtZTRsF/D/cpjHn7JnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c8:56:89:b7:c0:02:1d:b5:4a:44:9a:a8:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=14142af3aa0a205524fa9925c4677e726ffe6c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:29:57:1b:87:d3:e9:e9:ff:f0:0c:4d:b6:
                    31:79:fa:5d:b1:71:21:35:aa:06:8c:7f:50:77:eb:
                    51:17:fd:71:c2:03:53:e6:cb:a5:ba:39:0d:15:dc:
                    e8:53:36:a9:99:c8:47:4a:f3:cf:90:8a:ad:ee:73:
                    c9:ef:69:33:ec:e8:70:e2:de:df:ff:9a:ff:1e:83:
                    24:bc:da:84:d7:77:ba:a0:24:2a:c4:1c:25:1f:00:
                    e7:76:bf:d6:bc:f4:3a:07:60:52:c4:e8:9b:57:ed:
                    5d:20:ce:6f:6e:22:57:c3:f7:8d:ca:12:cc:b2:98:
                    7d:53:08:69:7b:7f:13:ed:cb:aa:5d:20:32:64:7e:
                    7c:92:13:c2:44:9a:6a:f5:68:53:78:9c:ab:8f:c8:
                    29:d7:37:a2:58:33:61:d1:d6:d9:07:a6:eb:1f:0c:
                    04:5e:77:dc:bd:86:2d:57:54:ea:57:21:38:c7:20:
                    3c:c0:7d:c7:f6:a4:33:4c:81:0b:53:ff:b2:2e:45:
                    11:bf:c9:12:d5:de:dc:d2:e8:b2:e8:41:fc:2e:a5:
                    dd:35:78:58:92:7a:fc:5e:2d:aa:e6:0d:9d:ec:42:
                    ce:32:4f:3e:fd:ee:b9:63:96:10:48:32:e1:5d:eb:
                    36:80:c3:19:81:8a:35:3f:c3:25:f9:f5:d1:85:fd:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:2A:F3:AA:0A:20:55:24:FA:99:25:C4:67:7E:72:6F:FE:6C:25
            X509v3 Authority Key Identifier:
                keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:72:a2:bb:03:46:b7:5b:73:fe:06:90:7a:0b:1d:a0:c9:a9:
         eb:44:3e:6c:7c:64:c1:4a:0f:26:0e:42:b9:b2:cd:57:ae:b9:
         2c:52:ac:09:07:44:79:4e:58:da:ab:30:40:24:81:c1:e9:02:
         ae:b7:fc:74:35:2d:91:9a:dd:8d:b6:a8:c7:47:7e:0c:25:d8:
         bd:4b:3e:dc:bd:b3:04:7b:87:91:f4:2f:70:93:1e:8f:49:7d:
         e9:86:50:52:8d:05:a1:f9:a2:24:b0:62:58:ab:86:74:ee:0f:
         f4:10:e4:ac:f6:d7:d9:27:72:37:b4:9d:6d:49:8a:72:6c:27:
         3c:45:92:8e:c7:c6:93:80:cb:68:d1:23:60:87:11:61:c9:c7:
         b0:81:6f:70:9f:a8:0e:f4:ac:46:3c:4d:a4:1d:a9:3d:0c:3c:
         34:ec:8e:b4:66:ce:d6:b9:08:f0:39:3e:7a:98:62:59:69:94:
         71:3d:fa:62:e0:39:8b:21:5a:91:04:61:6d:18:7a:6d:86:40:
         29:53:49:76:64:d3:44:cf:c8:7e:5c:4d:0b:0a:d0:b1:26:e4:
         e2:a4:e7:c3:3a:7a:c5:c1:0f:12:ba:03:b2:08:b8:cd:62:d5:
         92:2a:4c:70:78:f6:b0:1a:27:85:8f:75:dc:e8:e2:b6:49:96:
         c9:b8:ee:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8hWibfAAh21SkSaqJVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWZkNDdkODM2ZmNhNmY3NDFjYWEzODIzOTM3ZjRiYjFm
MWIyOTQwHhcNMjUwNDEzMTEwMTMxWhcNMjUwNDE0MTEwMTMxWjAzMTEwLwYDVQQD
EygxNDE0MmFmM2FhMGEyMDU1MjRmYTk5MjVjNDY3N2U3MjZmZmU2YzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7ApVxuH0+np//AMTbYxefpdsXEh
NaoGjH9Qd+tRF/1xwgNT5sulujkNFdzoUzapmchHSvPPkIqt7nPJ72kz7Ohw4t7f
/5r/HoMkvNqE13e6oCQqxBwlHwDndr/WvPQ6B2BSxOibV+1dIM5vbiJXw/eNyhLM
sph9Uwhpe38T7cuqXSAyZH58khPCRJpq9WhTeJyrj8gp1zeiWDNh0dbZB6brHwwE
XnfcvYYtV1TqVyE4xyA8wH3H9qQzTIELU/+yLkURv8kS1d7c0uiy6EH8LqXdNXhY
knr8Xi2q5g2d7ELOMk8+/e65Y5YQSDLhXes2gMMZgYo1P8Ml+fXRhf2IxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQUKvOqCiBVJPqZJcRnfnJv/mwlMB8GA1UdIwQY
MBaAFPJf1H2Db8pvdByqOCOTf0ux8bKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMt
YmI3YTQzZTU3ZjM4LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMtYmI3YTQzZTU3ZjM4
LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnKiuwNG
t1tz/gaQegsdoMmp60Q+bHxkwUoPJg5CubLNV665LFKsCQdEeU5Y2qswQCSBwekC
rrf8dDUtkZrdjbaox0d+DCXYvUs+3L2zBHuHkfQvcJMej0l96YZQUo0FofmiJLBi
WKuGdO4P9BDkrPbX2SdyN7SdbUmKcmwnPEWSjsfGk4DLaNEjYIcRYcnHsIFvcJ+o
DvSsRjxNpB2pPQw8NOyOtGbO1rkI8Dk+ephiWWmUcT36YuA5iyFakQRhbRh6bYZA
KVNJdmTTRM/IflxNCwrQsSbk4qTnwzp6xcEPEroDsgi4zWLVkipMcHj2sBonhY91
3OjitkmWybjuNg==
-----END CERTIFICATE-----