Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File:                     RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier:          gHxvn+r+vAcEBqj+DYuRQqY4fimSlRjtY8Ino6bFIYM=
Subject key identifier:   34:0C:AF:96:2E:73:5D:3C:96:82:F5:78:DA:6D:3A:B4:76:4C:36:54
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer:       /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial:       01962F74AB3F1BECAD2DC12E7B0B513008D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: 2Tiw5Csu2DF2vvmARAcogvYTHzkHnH0hhADb0kyYKAc=)
                          2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
                          3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ab:3f:1b:ec:ad:2d:c1:2e:7b:0b:51:30:08:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=340caf962e735d3c9682f578da6d3ab4764c3654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:b7:07:41:f1:0a:3d:03:1e:87:27:9e:7a:
                    a3:c1:bd:18:6f:a5:a8:7a:cb:55:19:ac:6a:d1:fa:
                    8f:20:03:ae:f7:35:b8:af:7a:64:41:f7:bf:2c:fb:
                    d6:b1:28:42:03:2a:89:8d:10:97:0d:7e:b0:c4:40:
                    66:4e:5f:07:8d:3e:c1:5b:19:4a:ec:fb:ee:85:89:
                    41:3e:14:1e:72:99:0d:a0:4c:8b:87:91:3b:76:c8:
                    8a:36:4a:ab:39:f7:33:f0:8b:88:21:d3:ba:1b:da:
                    2b:cc:77:bc:c4:b4:6f:d3:1c:1c:b2:82:80:39:a3:
                    1d:c2:26:83:a4:f6:4e:fa:2f:c4:4f:9c:92:3d:2d:
                    44:74:40:99:7f:72:f5:8a:4d:90:fb:e9:4d:de:0e:
                    01:6a:e1:74:ff:80:de:0e:46:a3:19:86:64:ca:0f:
                    a4:93:e8:9e:a7:4d:fd:0c:a6:29:74:1a:e2:b3:da:
                    85:a9:14:0d:d0:64:81:d9:ff:b6:9f:ab:23:0a:e5:
                    1b:c0:c0:93:48:7a:83:50:1d:ae:2a:58:d1:0a:c9:
                    7e:fc:10:98:6b:ae:3a:9d:f9:f0:5b:f8:55:cf:43:
                    b0:64:5b:5b:e1:42:e4:b2:49:72:d8:da:8b:00:93:
                    a4:38:07:4d:ce:99:ee:e3:06:26:d4:bf:76:6d:9a:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:AF:96:2E:73:5D:3C:96:82:F5:78:DA:6D:3A:B4:76:4C:36:54
            X509v3 Authority Key Identifier:
                keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d3:e5:41:82:4d:99:fe:77:d1:60:d4:af:ed:d3:f0:56:f6:
         24:c0:0f:ca:13:9c:f3:37:63:84:d4:fd:9f:8f:9b:4a:76:61:
         b1:eb:dc:c7:09:64:57:8f:5b:ad:5f:20:b9:bf:f7:70:81:c9:
         bb:57:87:6d:c9:66:2c:5f:61:a5:53:06:ae:86:43:1f:83:e7:
         73:a4:40:ae:a3:00:09:b4:a9:3b:0a:4d:cc:9e:d3:8e:2d:5c:
         8e:be:66:de:8d:bc:c9:3f:80:60:94:65:4a:9d:f0:e8:ed:7e:
         c0:7e:ab:16:9a:d2:b9:f5:08:14:1d:26:b3:27:f4:27:94:65:
         07:51:d1:30:35:49:17:a6:55:40:82:a5:d5:a2:61:44:18:06:
         13:de:ab:df:47:ae:78:8e:3b:02:fc:a2:1d:43:6c:0d:98:6c:
         5f:68:5f:17:60:3e:66:4a:56:74:47:92:7a:2f:6d:c2:bd:5b:
         15:7b:2b:3a:cf:85:96:b3:e8:30:e2:86:3f:4f:0f:23:d6:6d:
         dd:fa:d5:ae:fb:96:d0:69:e7:73:9e:7a:b9:9b:9c:14:9d:0e:
         96:01:bc:33:a4:07:54:f0:b3:df:ba:2f:40:11:33:6d:b1:3b:
         45:67:b6:4f:b2:d7:4c:99:0e:01:e3:f1:3d:e1:21:24:d8:35:
         31:75:e3:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKs/G+ytLcEuewtRMAjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODE1Y2ExNWQ3MmE1YTY5NmY4YmNkZjQ4NmY1ODAxOTY2
NzcyYmIwHhcNMjUwNDEzMTQwMTM3WhcNMjUwNDE0MTQwMTM3WjAzMTEwLwYDVQQD
EygzNDBjYWY5NjJlNzM1ZDNjOTY4MmY1NzhkYTZkM2FiNDc2NGMzNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusq3B0HxCj0DHocnnnqjwb0Yb6Wo
estVGaxq0fqPIAOu9zW4r3pkQfe/LPvWsShCAyqJjRCXDX6wxEBmTl8HjT7BWxlK
7PvuhYlBPhQecpkNoEyLh5E7dsiKNkqrOfcz8IuIIdO6G9orzHe8xLRv0xwcsoKA
OaMdwiaDpPZO+i/ET5ySPS1EdECZf3L1ik2Q++lN3g4BauF0/4DeDkajGYZkyg+k
k+iep039DKYpdBris9qFqRQN0GSB2f+2n6sjCuUbwMCTSHqDUB2uKljRCsl+/BCY
a646nfnwW/hVz0OwZFtb4ULkskly2NqLAJOkOAdNzpnu4wYm1L92bZoCtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQMr5Yuc108loL1eNptOrR2TDZUMB8GA1UdIwQY
MBaAFEaBXKFdcqWmlvi830hvWAGWZ3K7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWIt
ZDM4YTc2NjBiNTFlLzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWItZDM4YTc2NjBiNTFl
LzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9PlQYJN
mf530WDUr+3T8Fb2JMAPyhOc8zdjhNT9n4+bSnZhsevcxwlkV49brV8gub/3cIHJ
u1eHbclmLF9hpVMGroZDH4Pnc6RArqMACbSpOwpNzJ7Tji1cjr5m3o28yT+AYJRl
Sp3w6O1+wH6rFprSufUIFB0msyf0J5RlB1HRMDVJF6ZVQIKl1aJhRBgGE96r30eu
eI47AvyiHUNsDZhsX2hfF2A+ZkpWdEeSei9twr1bFXsrOs+FlrPoMOKGP08PI9Zt
3frVrvuW0Gnnc556uZucFJ0OlgG8M6QHVPCz37ovQBEzbbE7RWe2T7LXTJkOAePx
PeEhJNg1MXXjnA==
-----END CERTIFICATE-----