Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
File:                     1-2d6wpD-CR-iNunaZquveM0sjGE.mft (raw, json)
Hash identifier:          Fzuc1bX532v0+pDI2nbPiFvOmCBBv5g8v7/8vZidVL8=
Subject key identifier:   A2:B2:C7:F1:F0:63:F6:A6:80:E6:3A:D1:3B:30:BE:5C:6D:D3:8A:B4
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Certificate issuer:       /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial:       01962E61C65E5AE59A533452DE002164E545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 1-2d6wpD-CR-iNunaZquveM0sjGE.crl (hash: yTPg5DvSFKvXnng5SvUE6+bt0U+540ylVsnkHe6vq44=)
                          2: 9IBHLWVOZ0QllouyRgZXZZaYaZg.roa (hash: EjNvIqlv1V/ciVJtAGWjow9nk1g6XEmRzV7siqw9gdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c6:5e:5a:e5:9a:53:34:52:de:00:21:64:e5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=a2b2c7f1f063f6a680e63ad13b30be5c6dd38ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:e2:88:e7:19:b3:a2:6a:b7:e6:26:d2:40:
                    dd:55:02:cf:6c:96:b1:0b:32:df:16:c7:26:14:b2:
                    02:17:b4:38:e4:c0:31:d5:48:ab:33:e1:25:ce:2a:
                    67:f4:5b:97:90:d8:75:ab:33:86:be:97:b6:aa:2d:
                    a9:b5:82:f1:2c:7d:0d:98:7e:63:a2:1f:1c:32:b4:
                    f1:9b:a0:cb:d8:25:b9:65:2c:d1:5a:38:71:22:18:
                    c8:a5:53:89:8a:f1:16:06:2d:68:c7:52:c6:7c:76:
                    e2:ab:12:26:9c:fa:44:17:12:14:59:bf:6f:06:1e:
                    e2:9c:ec:89:59:08:9b:7b:8c:0f:d3:06:cf:28:ea:
                    3c:7e:d4:47:0a:de:ff:f3:2f:0b:c0:a2:db:f3:f9:
                    a8:ce:38:c6:01:30:ca:59:a8:7a:02:62:cb:38:a7:
                    3a:c8:8f:58:01:ac:df:58:cc:28:ba:d5:ff:c9:75:
                    42:76:e3:cd:26:fc:ff:44:f9:08:39:ef:af:89:6f:
                    73:a1:88:c3:3c:c9:73:4c:d1:6e:33:9f:5d:fa:cf:
                    15:62:9e:69:91:1e:8d:1b:fd:51:9a:6b:8f:d0:c1:
                    7f:73:8d:02:88:c8:44:9b:9b:12:4d:73:e8:94:c4:
                    8e:2f:90:5b:3c:6c:40:7b:a5:5f:c1:10:da:cb:cb:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B2:C7:F1:F0:63:F6:A6:80:E6:3A:D1:3B:30:BE:5C:6D:D3:8A:B4
            X509v3 Authority Key Identifier:
                keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c6:69:6e:1d:d6:0e:3b:30:fe:bb:c4:4f:fb:6a:a2:9c:b8:
         5d:7c:aa:25:d2:3f:86:08:2e:6a:30:21:0f:78:24:8f:ad:eb:
         24:5f:ed:b6:a6:a0:78:34:d0:39:93:24:1d:44:e6:f3:14:3a:
         9d:43:a0:25:53:2e:70:0f:b8:62:c6:0f:26:a8:6d:fb:fe:c2:
         43:2e:66:4d:64:3c:e0:ca:5e:ac:42:cc:d1:9f:70:bc:cb:79:
         ab:1f:cd:00:9b:2b:53:7b:8b:b2:d1:10:91:96:0f:10:d9:e6:
         42:24:10:78:59:d6:3d:fc:90:1e:cd:ea:99:9b:6c:1c:c8:06:
         a9:a3:a6:1f:8b:6b:0c:89:f5:e7:f7:b0:69:2c:b4:21:07:b9:
         2c:d9:93:e4:05:23:2c:11:77:7a:56:fc:41:81:13:f2:d0:1c:
         5e:49:ad:d8:b8:96:87:13:16:09:09:af:29:e7:51:ee:7c:e0:
         6d:36:ee:85:39:4d:27:e2:86:84:c8:aa:d0:dd:dd:8b:6d:81:
         a9:cf:a8:fc:cf:f6:9b:87:ac:f4:94:c0:05:bf:a8:97:f6:11:
         57:a9:52:28:4f:e0:b9:20:de:b4:f9:50:be:82:bd:a9:9f:62:
         15:d0:79:31:59:82:d5:10:6b:0d:18:68:b0:ea:2a:77:8a:b2:
         ce:7c:e8:c5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuYcZeWuWaUzRS3gAhZOVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNjc3YWMyOTBmZTA5MWZhMjM2ZTlkYTY2YWJhZjc4Y2Qy
YzhjNjEwHhcNMjUwNDEzMDkwMTIxWhcNMjUwNDE0MDkwMTIxWjAzMTEwLwYDVQQD
EyhhMmIyYzdmMWYwNjNmNmE2ODBlNjNhZDEzYjMwYmU1YzZkZDM4YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQHiiOcZs6Jqt+Ym0kDdVQLPbJax
CzLfFscmFLICF7Q45MAx1UirM+Elzipn9FuXkNh1qzOGvpe2qi2ptYLxLH0NmH5j
oh8cMrTxm6DL2CW5ZSzRWjhxIhjIpVOJivEWBi1ox1LGfHbiqxImnPpEFxIUWb9v
Bh7inOyJWQibe4wP0wbPKOo8ftRHCt7/8y8LwKLb8/mozjjGATDKWah6AmLLOKc6
yI9YAazfWMwoutX/yXVCduPNJvz/RPkIOe+viW9zoYjDPMlzTNFuM59d+s8VYp5p
kR6NG/1RmmuP0MF/c40CiMhEm5sSTXPolMSOL5BbPGxAe6VfwRDay8s7+QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKKyx/HwY/amgOY60Tswvlxt04q0MB8GA1UdIwQY
MBaAFPtnesKQ/gkfojbp2marr3jNLIxhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yZDZ3cEQtQ1ItaU51bmFacXV2ZU0wc2pHRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNWEwMWUyLTgzZTItNGE3Yy1hYzJi
LTU4ZjY3MjNlOTgxZS8xLzEtMmQ2d3BELUNSLWlOdW5hWnF1dmVNMHNqR0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRjLzVhMDFlMi04M2UyLTRhN2MtYWMyYi01OGY2NzIzZTk4
MWUvMS8xLTJkNndwRC1DUi1pTnVuYVpxdXZlTTBzakdFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMZp
bh3WDjsw/rvET/tqopy4XXyqJdI/hgguajAhD3gkj63rJF/ttqageDTQOZMkHUTm
8xQ6nUOgJVMucA+4YsYPJqht+/7CQy5mTWQ84MperELM0Z9wvMt5qx/NAJsrU3uL
stEQkZYPENnmQiQQeFnWPfyQHs3qmZtsHMgGqaOmH4trDIn15/ewaSy0IQe5LNmT
5AUjLBF3elb8QYET8tAcXkmt2LiWhxMWCQmvKedR7nzgbTbuhTlNJ+KGhMiq0N3d
i22Bqc+o/M/2m4es9JTABb+ol/YRV6lSKE/guSDetPlQvoK9qZ9iFdB5MVmC1RBr
DRhosOoqd4qyznzoxQ==
-----END CERTIFICATE-----