Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File:                     2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier:          WRAgV6mSEzWL5t6+MD6pOhOPr+eacfMzG4SUk/IOw/E=
Subject key identifier:   28:DD:76:F2:04:6C:80:D3:BF:02:40:B6:0A:0D:01:60:88:A3:3D:E7
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer:       /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial:       01962E98C90D0159A5496028BAEBDC358542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number:          0FFD
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: UfrILYndZiBTjAVm5fOuiYBzKhLvopdKwJJFFvTksFY=)
                          2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:0d:01:59:a5:49:60:28:ba:eb:dc:35:85:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=28dd76f2046c80d3bf0240b60a0d016088a33de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:bd:fd:31:7d:cb:30:fd:9e:bc:24:77:52:
                    98:c4:cb:75:cb:4b:06:b7:93:d1:80:6e:6a:14:4c:
                    ec:12:58:85:23:b5:95:c6:28:2f:7c:22:6d:cc:a5:
                    e8:df:1a:d0:e7:9a:3d:f3:1b:00:15:25:0f:58:fe:
                    b2:0e:a4:0a:f0:21:de:31:59:c2:7d:bd:a0:3a:cf:
                    0e:56:9a:ce:be:43:ac:94:44:d9:04:86:21:46:98:
                    ab:dd:c3:a1:b0:3a:f0:62:71:c4:42:0e:7f:f3:a4:
                    95:5a:28:9d:b5:29:f0:c4:c8:2e:ab:24:ef:bb:58:
                    68:e7:b2:e5:55:29:8c:6c:46:91:65:9e:bb:2a:16:
                    b6:bb:dd:da:4e:81:15:00:26:05:5a:f3:6c:ce:26:
                    a1:c0:45:02:9b:3e:66:68:96:9c:92:b1:6c:c6:03:
                    22:0e:99:32:e5:3b:ab:34:c2:e2:69:cb:e1:c6:93:
                    aa:91:0e:f5:44:cb:41:63:df:ac:67:44:62:20:97:
                    f8:12:ee:07:92:d8:a1:c0:ef:5f:d2:37:20:52:63:
                    18:d6:c7:ba:bc:3c:2b:2f:3f:69:8c:94:50:34:c8:
                    c6:e3:07:3d:3a:87:5b:02:54:16:d4:e3:a6:17:46:
                    56:c4:7c:00:f4:00:8d:ca:0f:dd:1a:a3:88:ea:08:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:76:F2:04:6C:80:D3:BF:02:40:B6:0A:0D:01:60:88:A3:3D:E7
            X509v3 Authority Key Identifier:
                keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:04:74:d1:8c:07:d3:ef:93:ca:51:25:d5:f6:25:dd:2d:91:
         09:42:d0:cb:05:21:56:17:fc:8d:7f:1b:85:4f:7d:3e:40:2a:
         83:03:32:c1:f2:9f:c7:a7:3b:a2:0b:fe:0b:0d:0e:47:f5:78:
         83:94:3c:f0:65:e5:0f:fc:d2:a6:2a:30:98:c9:7c:54:38:0c:
         5b:87:06:d0:37:42:9b:49:fc:58:7c:7f:77:54:e8:3a:4c:1d:
         36:41:21:cc:a3:79:b5:fd:17:1f:53:fb:57:6b:7d:ef:5f:e0:
         14:5f:db:be:ee:5c:73:78:ce:c8:0d:6e:0d:0c:55:a0:b3:9e:
         33:45:a8:aa:ad:6c:d2:fa:96:30:0d:a3:84:94:41:0f:5e:66:
         a1:c7:89:3a:d3:36:2d:b6:a2:8b:42:6c:a6:6f:d7:17:22:e4:
         02:52:47:0c:e3:d3:99:ff:92:08:04:4e:32:a9:6f:6d:00:2a:
         e6:7d:c5:68:70:02:52:e2:a5:0a:a0:08:3b:1f:9f:98:c8:97:
         9e:63:d7:86:a5:1c:72:c3:5d:6e:9a:c4:17:31:3b:83:c7:45:
         81:8e:c5:a7:70:a1:d2:df:b4:f1:92:de:68:30:0d:62:b0:3b:
         e9:9e:b9:b1:74:c3:04:fc:51:7c:c7:1b:fc:46:6c:a2:34:aa:
         ce:65:2a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMkNAVmlSWAouuvcNYVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzRjYjUxMTUwODAyYTQwMThjYzI1NmFkMjlmNTQ3MjA2
NzVlZDUwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
EygyOGRkNzZmMjA0NmM4MGQzYmYwMjQwYjYwYTBkMDE2MDg4YTMzZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8y9/TF9yzD9nrwkd1KYxMt1y0sG
t5PRgG5qFEzsEliFI7WVxigvfCJtzKXo3xrQ55o98xsAFSUPWP6yDqQK8CHeMVnC
fb2gOs8OVprOvkOslETZBIYhRpir3cOhsDrwYnHEQg5/86SVWiidtSnwxMguqyTv
u1ho57LlVSmMbEaRZZ67Kha2u93aToEVACYFWvNsziahwEUCmz5maJackrFsxgMi
Dpky5TurNMLiacvhxpOqkQ71RMtBY9+sZ0RiIJf4Eu4HktihwO9f0jcgUmMY1se6
vDwrLz9pjJRQNMjG4wc9OodbAlQW1OOmF0ZWxHwA9ACNyg/dGqOI6giu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjddvIEbIDTvwJAtgoNAWCIoz3nMB8GA1UdIwQY
MBaAFNrEy1EVCAKkAYzCVq0p9UcgZ17VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEt
NDE4MGY5ZTMwOTQ1LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEtNDE4MGY5ZTMwOTQ1
LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQR00YwH
0++TylEl1fYl3S2RCULQywUhVhf8jX8bhU99PkAqgwMywfKfx6c7ogv+Cw0OR/V4
g5Q88GXlD/zSpiowmMl8VDgMW4cG0DdCm0n8WHx/d1ToOkwdNkEhzKN5tf0XH1P7
V2t971/gFF/bvu5cc3jOyA1uDQxVoLOeM0Woqq1s0vqWMA2jhJRBD15moceJOtM2
Lbaii0Jspm/XFyLkAlJHDOPTmf+SCAROMqlvbQAq5n3FaHACUuKlCqAIOx+fmMiX
nmPXhqUccsNdbprEFzE7g8dFgY7Fp3Ch0t+08ZLeaDANYrA76Z65sXTDBPxRfMcb
/EZsojSqzmUqjA==
-----END CERTIFICATE-----