Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File:                     PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier:          XUzb4xTt7nTLkVj/fpUiwA84gBjS0114LzOzMT2JmuU=
Subject key identifier:   99:F9:C2:3C:6F:08:C8:81:AE:DA:59:4E:54:25:7A:F0:C8:74:7E:EC
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer:       /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial:       01962F747597D19F8FB37E1952D51F7C3A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number:          0DED
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
                          2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: qbQbnoC4zMO5CKo4vy7epaXKQzI7OXRxiZtCdpDYJig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:97:d1:9f:8f:b3:7e:19:52:d5:1f:7c:3a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=99f9c23c6f08c881aeda594e54257af0c8747eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:49:85:a8:09:79:ca:90:61:49:42:92:8c:
                    9b:50:75:7f:28:b7:b6:30:d3:1d:bf:a3:7f:89:78:
                    64:34:8e:0a:a9:e4:03:7a:1f:0a:f1:da:25:6a:d5:
                    d1:7d:f9:57:62:4c:c6:d6:71:b8:5a:6b:ba:9b:63:
                    38:85:94:65:14:3e:81:2d:7e:d6:a8:b4:6b:a4:46:
                    82:64:55:f2:0d:eb:9c:1e:02:9d:42:ab:34:c2:7b:
                    16:37:f2:40:d3:4c:1c:8b:57:c8:0d:a2:5c:82:81:
                    e8:24:e9:a5:20:3e:58:59:69:54:ff:c6:c9:de:84:
                    37:ef:65:3f:f9:6a:2d:40:e0:0c:6b:1a:cd:02:54:
                    1d:87:4f:18:7e:18:d0:72:a8:d1:c1:d6:59:04:7b:
                    60:1f:63:c5:42:fa:b1:86:9f:cc:18:d6:e5:ba:1d:
                    5f:a3:db:97:a6:af:f4:42:c5:0a:56:36:4b:ca:55:
                    39:ea:62:92:9e:f5:1b:f0:2e:d5:6b:b9:ca:03:da:
                    e6:af:2b:48:5e:f6:7f:cc:65:b6:f5:df:c2:90:5b:
                    af:8f:dd:c1:ab:9d:da:9c:19:17:36:de:6c:4b:71:
                    e8:aa:f2:65:06:c3:75:35:95:05:7d:79:47:5d:e7:
                    7f:ef:f6:aa:d5:f7:cf:f4:8e:92:36:b0:d1:52:54:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:C2:3C:6F:08:C8:81:AE:DA:59:4E:54:25:7A:F0:C8:74:7E:EC
            X509v3 Authority Key Identifier:
                keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a8:40:93:1c:ae:f4:37:45:47:67:f3:aa:83:b4:43:e2:4e:
         ca:72:cc:dd:32:f3:ad:3c:58:82:80:fb:92:98:44:be:38:d5:
         0d:ea:ec:c9:cb:f4:ea:7d:57:15:ad:19:e4:c4:49:24:1a:32:
         71:b7:0a:e2:8b:aa:20:01:0a:78:3f:3f:ee:8c:e5:8d:f4:6d:
         b2:e4:4b:17:8c:bd:8f:7f:3e:e2:c3:33:8b:87:10:23:a4:4f:
         e9:57:a9:d0:e0:57:50:9a:d6:36:3b:79:86:f1:40:21:a3:a1:
         87:50:2c:01:90:6e:6e:88:24:60:c5:f7:4c:fd:a4:65:e5:86:
         7e:9b:ea:bb:a8:23:2b:4d:2b:bc:d0:38:e6:3d:8c:36:99:d0:
         2a:51:c4:7c:4d:f0:23:83:d8:5e:b1:1d:61:8a:21:1a:44:85:
         56:22:5a:2b:79:00:68:2a:c0:09:7e:3d:28:6d:9e:c9:56:3a:
         e2:78:aa:17:77:40:57:bc:33:90:e7:0a:e0:1a:17:65:e8:fb:
         46:78:0b:ae:c0:c4:00:69:4d:f2:fc:e4:5d:37:0f:71:2a:72:
         d5:f9:78:9f:cf:8e:dc:19:59:b0:3e:76:8a:d7:b9:af:10:84:
         d8:c1:6a:d5:b0:fd:0c:85:a8:4a:7f:d2:06:f6:2a:2a:0c:05:
         50:c8:f1:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHWX0Z+Ps34ZUtUffDpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjE4OGFkNTk3YjU4YWFhNTk3MDAzZjhmMDg0MzQ5NmM2
YzdjOTMwHhcNMjUwNDEzMTQwMTIzWhcNMjUwNDE0MTQwMTIzWjAzMTEwLwYDVQQD
Eyg5OWY5YzIzYzZmMDhjODgxYWVkYTU5NGU1NDI1N2FmMGM4NzQ3ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPFJhagJecqQYUlCkoybUHV/KLe2
MNMdv6N/iXhkNI4KqeQDeh8K8dolatXRfflXYkzG1nG4Wmu6m2M4hZRlFD6BLX7W
qLRrpEaCZFXyDeucHgKdQqs0wnsWN/JA00wci1fIDaJcgoHoJOmlID5YWWlU/8bJ
3oQ372U/+WotQOAMaxrNAlQdh08YfhjQcqjRwdZZBHtgH2PFQvqxhp/MGNbluh1f
o9uXpq/0QsUKVjZLylU56mKSnvUb8C7Va7nKA9rmrytIXvZ/zGW29d/CkFuvj93B
q53anBkXNt5sS3HoqvJlBsN1NZUFfXlHXed/7/aq1ffP9I6SNrDRUlQdrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn5wjxvCMiBrtpZTlQlevDIdH7sMB8GA1UdIwQY
MBaAFD0hiK1Ze1iqpZcAP48IQ0lsbHyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYt
YmMzNmZlZWI5MGIzLzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYtYmMzNmZlZWI5MGIz
LzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqhAkxyu
9DdFR2fzqoO0Q+JOynLM3TLzrTxYgoD7kphEvjjVDersycv06n1XFa0Z5MRJJBoy
cbcK4ouqIAEKeD8/7ozljfRtsuRLF4y9j38+4sMzi4cQI6RP6Vep0OBXUJrWNjt5
hvFAIaOhh1AsAZBubogkYMX3TP2kZeWGfpvqu6gjK00rvNA45j2MNpnQKlHEfE3w
I4PYXrEdYYohGkSFViJaK3kAaCrACX49KG2eyVY64niqF3dAV7wzkOcK4BoXZej7
RngLrsDEAGlN8vzkXTcPcSpy1fl4n8+O3BlZsD52ite5rxCE2MFq1bD9DIWoSn/S
BvYqKgwFUMjx8A==
-----END CERTIFICATE-----