Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
File:                     362LFgmdbN-MOoEcpYYN8Pa69t4.mft (raw, json)
Hash identifier:          6KHgnH5po/HGaaS974038Vu6C0lYtT4+wTV/jwUxAYc=
Subject key identifier:   59:E8:C4:9E:8A:A3:D9:E6:FF:D2:08:60:81:0A:CF:40:19:A3:F4:CA
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       01962FAB637695077E4DA62838643B13A178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 362LFgmdbN-MOoEcpYYN8Pa69t4.crl (hash: uRCCDKIz5ryXshSKoM3zoXa5RehE2+SK5zZFKXU/FDA=)
                          2: ix48MvDGuyMGC7SsCyq5CBbj9_U.roa (hash: TdU/FjmcGDmmVtUcG0hSM2P6GM5lo+c3VUYtonFIPUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:76:95:07:7e:4d:a6:28:38:64:3b:13:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=59e8c49e8aa3d9e6ffd20860810acf4019a3f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:4f:cc:05:7a:00:6f:f2:85:8f:4c:f6:29:
                    85:81:d0:2d:c7:09:f1:d1:a9:bd:83:a1:dc:e7:04:
                    f8:33:94:c2:ca:80:9e:14:97:0b:54:67:e1:eb:08:
                    cd:db:a9:7d:00:e0:85:66:8e:5a:cd:54:e4:df:87:
                    a4:9d:50:98:ac:e9:77:e3:42:24:7b:de:e8:d4:a0:
                    69:68:7d:b0:be:9f:b3:11:ff:41:49:bd:79:4d:57:
                    9d:4e:09:a6:43:0f:b6:03:c7:35:7a:4b:83:22:fb:
                    8e:61:bd:a9:07:73:42:d1:83:61:97:17:34:13:8c:
                    18:f0:83:83:11:08:bf:d1:45:51:d5:7c:72:45:32:
                    5e:45:b7:af:17:dd:be:6a:9e:69:ba:e7:dc:94:fc:
                    c4:42:41:0a:9d:fd:1d:31:45:c7:59:d4:8c:bd:10:
                    75:3b:43:44:43:4b:3d:c2:d1:62:07:95:d4:e2:0b:
                    89:ff:e7:35:5c:09:15:26:e3:e9:56:03:8d:36:49:
                    22:97:19:d8:99:a5:5f:8a:e5:e1:cb:3f:80:71:df:
                    6a:ec:fd:1a:f6:77:15:d0:a9:3c:51:b4:a5:18:0b:
                    67:17:16:bf:05:e7:1e:8c:b6:86:02:0c:1f:f6:a6:
                    74:4e:a2:dd:ec:a2:df:7e:53:ae:27:88:cf:35:50:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E8:C4:9E:8A:A3:D9:E6:FF:D2:08:60:81:0A:CF:40:19:A3:F4:CA
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d4:4b:6a:da:dc:9d:ba:e7:4f:90:23:12:5a:99:66:fd:6b:
         f1:3c:01:53:a1:cc:43:2e:76:53:cd:ce:dc:f4:50:2c:52:4d:
         1a:5a:68:4d:0a:b7:23:3d:11:02:fc:0e:f4:6e:5e:d2:18:6e:
         74:9d:ab:01:d7:a4:99:c0:fb:44:3d:df:7a:ba:c2:80:ce:d6:
         a2:10:fc:71:0a:50:7f:0b:34:69:9d:22:c4:a5:31:5c:5d:85:
         ca:87:2a:7d:3f:50:96:1d:6a:b5:b7:4d:2f:ce:db:79:20:40:
         a6:dd:7f:b0:dd:31:47:1f:64:5d:a5:aa:22:93:be:28:40:c4:
         da:9c:2b:55:9d:d8:b0:6d:a3:e6:65:1d:53:5d:f0:19:ec:35:
         5e:6c:27:c0:28:04:28:92:e8:d2:23:4d:de:0c:b2:2b:22:f6:
         a7:f3:c2:6a:78:50:00:3c:ac:58:37:f6:13:c4:fa:b3:e8:04:
         8e:85:1e:e5:8e:3d:6b:d4:b7:07:d7:de:38:86:65:d1:40:dc:
         82:6d:1f:ee:30:14:5a:c4:16:fb:b8:4b:51:be:2b:a0:77:74:
         10:0f:0b:1e:43:48:aa:e2:fa:9a:cf:15:ae:b1:b2:4b:ab:bd:
         a5:0b:dd:72:b9:c2:c2:c9:64:81:ec:d1:64:43:a0:0a:76:a8:
         42:29:5d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2N2lQd+TaYoOGQ7E6F4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWQ4YjE2MDk5ZDZjZGY4YzNhODExY2E1ODYwZGYwZjZi
YWY2ZGUwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
Eyg1OWU4YzQ5ZThhYTNkOWU2ZmZkMjA4NjA4MTBhY2Y0MDE5YTNmNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GNPzAV6AG/yhY9M9imFgdAtxwnx
0am9g6Hc5wT4M5TCyoCeFJcLVGfh6wjN26l9AOCFZo5azVTk34eknVCYrOl340Ik
e97o1KBpaH2wvp+zEf9BSb15TVedTgmmQw+2A8c1ekuDIvuOYb2pB3NC0YNhlxc0
E4wY8IODEQi/0UVR1XxyRTJeRbevF92+ap5puufclPzEQkEKnf0dMUXHWdSMvRB1
O0NEQ0s9wtFiB5XU4guJ/+c1XAkVJuPpVgONNkkilxnYmaVfiuXhyz+Acd9q7P0a
9ncV0Kk8UbSlGAtnFxa/BecejLaGAgwf9qZ0TqLd7KLfflOuJ4jPNVCOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnoxJ6Ko9nm/9IIYIEKz0AZo/TKMB8GA1UdIwQY
MBaAFN+tixYJnWzfjDqBHKWGDfD2uvbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEt
OGJjYTI3Y2IzMGMwLzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEtOGJjYTI3Y2IzMGMw
LzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotRLatrc
nbrnT5AjElqZZv1r8TwBU6HMQy52U83O3PRQLFJNGlpoTQq3Iz0RAvwO9G5e0hhu
dJ2rAdekmcD7RD3ferrCgM7WohD8cQpQfws0aZ0ixKUxXF2FyocqfT9Qlh1qtbdN
L87beSBApt1/sN0xRx9kXaWqIpO+KEDE2pwrVZ3YsG2j5mUdU13wGew1XmwnwCgE
KJLo0iNN3gyyKyL2p/PCanhQADysWDf2E8T6s+gEjoUe5Y49a9S3B9feOIZl0UDc
gm0f7jAUWsQW+7hLUb4roHd0EA8LHkNIquL6ms8VrrGyS6u9pQvdcrnCwslkgezR
ZEOgCnaoQild0g==
-----END CERTIFICATE-----