Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File:                     a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier:          1StWhuFwD3ghrDjLAHc5IxFRJsvoYqLqTKUQIMIfRiM=
Subject key identifier:   5F:2C:E3:24:D6:E3:63:F5:F2:A1:F9:42:0F:E6:DA:A7:18:C0:C9:53
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer:       /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial:       01962F3D2B4438C8F2E0493B6C285B56E715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number:          0E62
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
                          2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: +yTa0Szga10slvDTB4N/k2DcAX7ccwt354Pr2d14Mrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2b:44:38:c8:f2:e0:49:3b:6c:28:5b:56:e7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=5f2ce324d6e363f5f2a1f9420fe6daa718c0c953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:ac:3c:87:ef:04:65:4f:12:94:61:b4:47:
                    09:5b:58:e9:0c:e9:18:33:45:ea:5c:6e:fb:7a:c0:
                    d1:d3:ad:e9:06:93:ed:fe:d4:36:08:bf:7a:2d:4a:
                    51:c9:5a:91:96:8c:a0:0a:79:75:f4:95:7e:58:d0:
                    13:af:9c:e1:19:8d:dc:75:28:07:55:8e:ae:70:6c:
                    fe:3b:df:bb:eb:cc:fa:ec:a3:12:6c:a9:e8:8f:be:
                    2d:d6:ca:87:5c:77:53:16:a2:9a:e8:16:7e:76:bc:
                    ba:6c:c6:af:b5:bc:de:f9:d3:63:50:54:a0:7b:e8:
                    d4:20:6a:ed:51:b4:c0:19:1b:f8:65:84:83:e4:f3:
                    d2:4d:07:a0:97:24:57:42:1e:14:a8:a7:8d:86:eb:
                    32:45:fd:86:b6:6c:ec:c9:b6:4a:1a:8c:a6:ba:73:
                    ff:df:02:cc:85:f0:e8:52:11:8b:b6:88:f9:eb:f7:
                    ee:95:32:ac:c1:d6:1c:ba:1b:26:b0:06:a7:3b:d7:
                    0d:ff:c1:4d:32:9c:06:d9:10:fa:df:e2:5f:8b:cb:
                    3d:a0:9f:e1:59:ff:5f:59:97:70:0a:92:34:74:d3:
                    f1:33:17:54:b9:4a:e8:b2:15:5f:18:e4:7f:22:e3:
                    41:ff:fc:8a:4f:69:dc:d9:06:17:8b:4a:20:a7:eb:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2C:E3:24:D6:E3:63:F5:F2:A1:F9:42:0F:E6:DA:A7:18:C0:C9:53
            X509v3 Authority Key Identifier:
                keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:80:c5:a9:aa:9e:93:ff:f6:14:09:ba:f2:8a:69:8a:39:
         ad:53:fb:3a:54:2e:1c:fe:e7:4c:24:8e:d3:ff:0e:86:47:21:
         bf:50:4d:f2:23:02:c2:4a:96:0a:8b:60:15:be:ca:64:1e:62:
         74:ec:d3:45:31:fe:40:fc:6a:e2:1d:4b:d0:21:4a:0a:a7:a0:
         cc:a3:3c:2b:45:e2:9c:81:49:f0:0f:09:43:dc:66:ca:2a:17:
         92:ac:a5:e7:4f:cb:1c:97:7f:73:aa:7b:49:71:ea:94:ef:bf:
         72:26:ca:8e:48:b4:61:cc:70:d6:8d:d2:bf:e5:5e:31:b6:69:
         22:fd:22:d1:1d:fc:52:e4:13:8b:ab:db:3d:d0:6e:dc:36:8f:
         c4:5a:dc:f2:85:96:66:01:82:60:1b:4f:64:fa:24:03:a7:19:
         3c:83:8f:39:02:c7:5d:73:8f:ed:e7:4d:3e:87:5d:d3:3b:f0:
         b5:66:42:f5:6b:4d:07:91:af:9f:26:91:4e:be:33:1c:09:2a:
         49:e8:15:10:d4:f8:fa:ff:f1:00:94:54:28:a8:b0:20:47:88:
         0b:8d:38:a3:e6:18:33:33:73:c9:ab:d5:87:a3:8b:d8:c8:21:
         e4:a1:8a:fa:f2:99:bf:ba:9a:f7:e7:a1:6e:1c:a3:10:7d:2c:
         86:e9:ea:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPStEOMjy4Ek7bChbVucVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2ZhMDVlNmI0ZDhhNTEyOTQ0MDc1MDRkOTY0MWFkM2Uw
MjA0M2YwHhcNMjUwNDEzMTMwMDU5WhcNMjUwNDE0MTMwMDU5WjAzMTEwLwYDVQQD
Eyg1ZjJjZTMyNGQ2ZTM2M2Y1ZjJhMWY5NDIwZmU2ZGFhNzE4YzBjOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuISsPIfvBGVPEpRhtEcJW1jpDOkY
M0XqXG77esDR063pBpPt/tQ2CL96LUpRyVqRloygCnl19JV+WNATr5zhGY3cdSgH
VY6ucGz+O9+768z67KMSbKnoj74t1sqHXHdTFqKa6BZ+dry6bMavtbze+dNjUFSg
e+jUIGrtUbTAGRv4ZYSD5PPSTQeglyRXQh4UqKeNhusyRf2GtmzsybZKGoymunP/
3wLMhfDoUhGLtoj56/fulTKswdYcuhsmsAanO9cN/8FNMpwG2RD63+Jfi8s9oJ/h
Wf9fWZdwCpI0dNPxMxdUuUroshVfGOR/IuNB//yKT2nc2QYXi0ogp+vA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8s4yTW42P18qH5Qg/m2qcYwMlTMB8GA1UdIwQY
MBaAFGt/oF5rTYpRKUQHUE2WQa0+AgQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgt
OGIxY2ZiNjgzNjZlLzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgtOGIxY2ZiNjgzNjZl
LzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOeAxamq
npP/9hQJuvKKaYo5rVP7OlQuHP7nTCSO0/8Ohkchv1BN8iMCwkqWCotgFb7KZB5i
dOzTRTH+QPxq4h1L0CFKCqegzKM8K0XinIFJ8A8JQ9xmyioXkqyl50/LHJd/c6p7
SXHqlO+/cibKjki0Ycxw1o3Sv+VeMbZpIv0i0R38UuQTi6vbPdBu3DaPxFrc8oWW
ZgGCYBtPZPokA6cZPIOPOQLHXXOP7edNPodd0zvwtWZC9WtNB5GvnyaRTr4zHAkq
SegVENT4+v/xAJRUKKiwIEeIC404o+YYMzNzyavVh6OL2Mgh5KGK+vKZv7qa9+eh
bhyjEH0shunqnA==
-----END CERTIFICATE-----