Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File:                     kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier:          oQNJSEOfNS/ZvzwR9eO9AdLp/65ilIObvhTHyXoxBd0=
Subject key identifier:   49:F1:C7:33:1A:C5:89:28:F9:BC:16:81:C6:04:EB:61:D3:22:CF:82
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer:       /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial:       01962F3D63CD7B29DD66CAD3DB7D44F916DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number:          1449
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 5ylzUozH0X5KfArQKo4i4yUI-II.roa (hash: /U7VX7N0LYLMWn9ZhI8TzwqGtktcWpOPVB+Ela0LG78=)
                          2: VjZoO_XNq9TUDzr2kG4vDwWvbaU.roa (hash: vk9V2bJryTt5ur720els5LdMqipJhY5ilAwFIvaJkBg=)
                          3: i7xtJNh8nnR1YjvF1KD1JF-TMBI.roa (hash: 6umGEi6/dEe09HM9YM5x0dVLfi2Oz5knxj0Mb66phQ4=)
                          4: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: yLLhqvjn/pOXDeJIdG007BukRKW9FfqhcwNsloEPgwI=)
                          5: wEHyXMYvuIC-qmVrbjicZQKsZ2I.roa (hash: amx36+55qLX6fzalSFu5jMxR/WTqJpTbag5RROciO1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:63:cd:7b:29:dd:66:ca:d3:db:7d:44:f9:16:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=49f1c7331ac58928f9bc1681c604eb61d322cf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:90:80:82:80:8b:2a:25:00:85:07:f7:44:
                    45:12:c9:cb:2c:97:c4:5f:c3:e7:a9:fb:24:ef:5e:
                    10:9a:c0:c9:ec:1a:bd:4a:cd:c1:36:df:c0:42:bb:
                    b6:e6:20:17:aa:a6:56:d3:1f:b3:30:56:32:68:71:
                    94:97:86:0f:d2:ec:c5:8c:b0:fc:7d:b1:38:12:10:
                    2d:b6:6e:73:20:a5:8a:8a:5c:bc:2c:70:65:46:c8:
                    ab:2a:bc:c2:0c:ac:ac:23:c9:60:0e:98:a4:48:38:
                    ec:12:32:59:ca:e8:6d:f3:77:2c:5a:3d:da:00:38:
                    97:2b:3d:5d:6d:54:23:86:45:0d:49:81:e6:66:cb:
                    7a:81:08:1e:cd:90:56:d5:9d:80:12:7f:ed:3b:fe:
                    4f:54:1b:e7:7d:a1:33:e1:49:3e:cf:9a:9c:0a:91:
                    fa:22:13:2b:83:c2:8b:0c:4e:83:c0:4f:d3:6b:e8:
                    a8:14:6f:19:a9:ff:39:bf:e2:28:aa:93:95:ef:0c:
                    87:74:04:f0:c4:fb:67:fc:5c:9f:bf:77:98:fd:98:
                    0e:f9:6c:45:ab:11:c6:ac:73:ba:6a:8a:c0:91:c8:
                    8c:b8:50:17:8d:56:20:e5:08:b2:ee:ff:ba:e8:8b:
                    58:ab:85:0c:f5:3e:eb:82:04:9b:dc:44:14:2c:46:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:C7:33:1A:C5:89:28:F9:BC:16:81:C6:04:EB:61:D3:22:CF:82
            X509v3 Authority Key Identifier:
                keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:6d:ca:d7:44:b5:7c:43:03:5d:1d:aa:a1:9a:c0:be:95:
         07:1a:3b:4f:9c:a3:fd:a3:78:e0:4f:9c:42:4f:0d:05:f2:f6:
         51:7c:29:33:06:38:34:3d:10:63:fe:f0:c8:85:c4:a4:60:fb:
         c6:bc:2a:ab:29:93:78:0d:54:26:30:bd:de:61:ca:55:57:09:
         9e:d7:71:88:b0:c3:b8:ce:6f:7e:c9:a7:24:37:ca:02:3c:14:
         cf:94:cf:5c:5e:10:ff:eb:bf:3d:46:30:d7:10:51:83:83:43:
         66:72:ac:af:06:52:ef:b0:ff:03:6d:0a:f6:a6:6b:99:b8:c7:
         f6:08:8e:fc:51:dc:59:17:2c:05:27:36:4b:64:56:96:ea:4e:
         64:d8:41:ff:d0:d6:8d:bc:a8:9e:c1:aa:fc:6d:12:1e:3b:82:
         8f:16:d5:0b:dc:b3:e5:0f:f5:76:df:ed:a3:53:7a:ac:4a:7a:
         56:ce:26:c4:2e:0c:b4:e9:ea:9a:bc:2a:8c:c0:69:97:7d:83:
         a9:5a:e3:71:27:74:2a:01:c4:96:e2:c1:f1:f1:b3:87:ba:3d:
         27:7c:30:bf:3d:4e:74:6d:46:fe:0d:a7:d7:15:a1:d6:17:06:
         1d:34:37:1e:21:a8:05:dd:6f:7a:9c:89:d1:b9:d7:64:ff:70:
         59:4f:72:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWPNeyndZsrT231E+RbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2
OTQ4NjAwHhcNMjUwNDEzMTMwMTE0WhcNMjUwNDE0MTMwMTE0WjAzMTEwLwYDVQQD
Eyg0OWYxYzczMzFhYzU4OTI4ZjliYzE2ODFjNjA0ZWI2MWQzMjJjZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iaQgIKAiyolAIUH90RFEsnLLJfE
X8Pnqfsk714QmsDJ7Bq9Ss3BNt/AQru25iAXqqZW0x+zMFYyaHGUl4YP0uzFjLD8
fbE4EhAttm5zIKWKily8LHBlRsirKrzCDKysI8lgDpikSDjsEjJZyuht83csWj3a
ADiXKz1dbVQjhkUNSYHmZst6gQgezZBW1Z2AEn/tO/5PVBvnfaEz4Uk+z5qcCpH6
IhMrg8KLDE6DwE/Ta+ioFG8Zqf85v+IoqpOV7wyHdATwxPtn/Fyfv3eY/ZgO+WxF
qxHGrHO6aorAkciMuFAXjVYg5Qiy7v+66ItYq4UM9T7rggSb3EQULEYfBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnxxzMaxYko+bwWgcYE62HTIs+CMB8GA1UdIwQY
MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct
NzhlOTk3ODY5OTUyLzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy
LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9FtytdE
tXxDA10dqqGawL6VBxo7T5yj/aN44E+cQk8NBfL2UXwpMwY4ND0QY/7wyIXEpGD7
xrwqqymTeA1UJjC93mHKVVcJntdxiLDDuM5vfsmnJDfKAjwUz5TPXF4Q/+u/PUYw
1xBRg4NDZnKsrwZS77D/A20K9qZrmbjH9giO/FHcWRcsBSc2S2RWlupOZNhB/9DW
jbyonsGq/G0SHjuCjxbVC9yz5Q/1dt/to1N6rEp6Vs4mxC4MtOnqmrwqjMBpl32D
qVrjcSd0KgHEluLB8fGzh7o9J3wwvz1OdG1G/g2n1xWh1hcGHTQ3HiGoBd1vepyJ
0bnXZP9wWU9yOw==
-----END CERTIFICATE-----