Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File:                     xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier:          6V3gb0chuBIbIx96aWK2QX6F5j03B61beDPAWhH7AGg=
Subject key identifier:   6B:DB:B8:6D:C8:D7:7C:F4:F1:04:DF:5F:3F:CB:B1:40:DD:1E:69:FC
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer:       /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial:       01962FAB6D526DD1DCDC84D45C93F818F96E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: kMIoPYj99g2K5sWXNcD0fsxHkHM.roa (hash: FopABAV6PSptIp6OTBNiTRgtYU723NWq9ChEZhzR3FM=)
                          2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: kHtXzb682ZBVtAUrzXpxp1crwlgT9EsPStUYgXjdkHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6d:52:6d:d1:dc:dc:84:d4:5c:93:f8:18:f9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=6bdbb86dc8d77cf4f104df5f3fcbb140dd1e69fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:fd:91:06:13:ce:9b:5f:62:b1:24:62:0f:
                    42:16:43:86:bd:eb:9f:e1:16:d6:23:51:8e:e8:13:
                    c4:0f:41:d7:3f:db:eb:87:eb:5e:a4:6a:b2:d0:2d:
                    9d:a6:45:67:12:09:68:96:27:b6:06:0a:68:ff:6f:
                    f8:59:4b:52:a9:7c:3a:dc:62:f3:b8:86:e3:5c:9c:
                    fc:d5:d8:40:54:ef:cf:2a:4d:ba:75:a6:40:b3:4b:
                    19:14:c3:d7:fe:66:8c:f8:87:f5:e4:92:1a:0c:cf:
                    f5:c9:b0:f4:1f:9b:b2:a2:e7:ca:4d:72:b6:82:39:
                    86:64:1f:28:ec:eb:ba:7c:d5:50:b5:3d:41:dc:be:
                    83:c4:7a:da:9b:3b:ab:97:fd:93:a9:11:92:ae:4e:
                    d6:66:e3:a1:32:41:e6:90:53:44:c6:ec:ae:84:39:
                    55:8e:ad:3c:e9:1f:37:ce:61:cf:e2:7e:88:7f:8d:
                    83:42:57:8b:6c:32:0f:10:c5:a1:df:38:88:b6:70:
                    98:0c:2b:7f:26:fd:ff:eb:71:1a:f0:80:a7:3f:4b:
                    3f:42:87:11:2e:4a:6c:c6:73:cd:d6:70:b7:95:16:
                    f3:f3:e3:aa:41:47:3c:ca:37:70:55:33:51:97:93:
                    2e:5d:6d:c2:01:7e:0c:96:dd:4b:9b:8f:e2:02:e9:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DB:B8:6D:C8:D7:7C:F4:F1:04:DF:5F:3F:CB:B1:40:DD:1E:69:FC
            X509v3 Authority Key Identifier:
                keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:84:c1:5e:e0:d9:10:ca:f2:06:f4:4e:25:82:c2:ce:50:
         8a:07:a3:f3:b1:dc:80:b0:3c:c7:3b:d9:4b:a1:33:fe:8e:47:
         06:79:45:fc:1f:60:25:21:07:d9:84:e3:02:a0:76:f7:ad:2b:
         f7:1e:ba:3e:47:e3:0f:68:c7:1d:6e:cc:c3:e6:8f:f8:c3:5f:
         7c:97:31:a6:44:41:4f:ea:58:63:54:68:4b:3d:b0:57:f6:f1:
         20:33:8e:57:8b:cc:08:4a:43:93:bc:6b:63:fc:ee:52:6b:f6:
         b3:ec:3b:4a:ab:7a:a0:86:15:78:f8:be:98:8c:7e:7b:05:6b:
         f2:11:9b:9c:e7:7a:c8:9c:ed:5a:64:84:ad:2e:7a:2e:67:a0:
         6f:fc:68:10:05:f0:ff:18:3d:62:06:38:0e:3f:03:c6:64:9a:
         81:68:c1:ec:b5:14:96:31:f9:9e:24:02:9b:bb:8b:01:1d:95:
         7e:e8:f3:69:7c:30:54:fa:bc:67:fd:5e:95:a3:8c:41:b3:5e:
         b6:86:37:c1:95:87:6b:f1:aa:07:5d:bb:f9:58:ab:71:cc:69:
         3b:f4:8a:0f:c0:11:5d:a2:b5:b2:42:07:38:a3:dc:8f:32:20:
         e4:79:8e:2e:43:72:71:ed:5e:6c:a7:64:02:4d:e4:07:78:4f:
         b7:71:08:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq21SbdHc3ITUXJP4GPluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTJiYjNkYTY1Y2FhYjUyNDg1MWVmODZjZTliYWE2MjA3
NGUxZWQwHhcNMjUwNDEzMTUwMTI1WhcNMjUwNDE0MTUwMTI1WjAzMTEwLwYDVQQD
Eyg2YmRiYjg2ZGM4ZDc3Y2Y0ZjEwNGRmNWYzZmNiYjE0MGRkMWU2OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm39kQYTzptfYrEkYg9CFkOGveuf
4RbWI1GO6BPED0HXP9vrh+tepGqy0C2dpkVnEglolie2Bgpo/2/4WUtSqXw63GLz
uIbjXJz81dhAVO/PKk26daZAs0sZFMPX/maM+If15JIaDM/1ybD0H5uyoufKTXK2
gjmGZB8o7Ou6fNVQtT1B3L6DxHramzurl/2TqRGSrk7WZuOhMkHmkFNExuyuhDlV
jq086R83zmHP4n6If42DQleLbDIPEMWh3ziItnCYDCt/Jv3/63Ea8ICnP0s/QocR
LkpsxnPN1nC3lRbz8+OqQUc8yjdwVTNRl5MuXW3CAX4Mlt1Lm4/iAunevQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvbuG3I13z08QTfXz/LsUDdHmn8MB8GA1UdIwQY
MBaAFMQSuz2mXKq1JIUe+GzpuqYgdOHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgt
OWI5MzJlY2QyZWNjLzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgtOWI5MzJlY2QyZWNj
LzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF6EwV7g
2RDK8gb0TiWCws5Qigej87HcgLA8xzvZS6Ez/o5HBnlF/B9gJSEH2YTjAqB2960r
9x66PkfjD2jHHW7Mw+aP+MNffJcxpkRBT+pYY1RoSz2wV/bxIDOOV4vMCEpDk7xr
Y/zuUmv2s+w7Sqt6oIYVePi+mIx+ewVr8hGbnOd6yJztWmSErS56Lmegb/xoEAXw
/xg9YgY4Dj8DxmSagWjB7LUUljH5niQCm7uLAR2VfujzaXwwVPq8Z/1elaOMQbNe
toY3wZWHa/GqB127+VirccxpO/SKD8ARXaK1skIHOKPcjzIg5HmOLkNyce1ebKdk
Ak3kB3hPt3EIVQ==
-----END CERTIFICATE-----