Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File:                     0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier:          CBNtTrSt9TbvivRENfzsAcgc4fP5wsHCs6GY08jP/Js=
Subject key identifier:   77:74:8B:A4:C5:A1:BB:BE:DF:ED:6E:AA:AB:F3:2C:5C:F9:1C:FD:6C
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer:       /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial:       01962FAB91199330911739F2DE789C5FC9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number:          061D
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: JuZjIMB9hAvc+aIBtPZV97SLUfnrJ/tPiBUjMkZfp2A=)
                          2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:91:19:93:30:91:17:39:f2:de:78:9c:5f:c9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=77748ba4c5a1bbbedfed6eaaabf32c5cf91cfd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:10:5d:59:94:cc:b5:2c:66:f9:8a:4f:03:
                    53:54:29:21:d7:5f:67:0d:40:44:1e:72:50:d8:45:
                    c1:a5:b6:2c:e2:ed:cd:a8:59:75:bc:5c:64:9c:86:
                    23:e2:76:64:95:5f:6e:cb:27:4c:63:af:9b:2d:f3:
                    5e:fa:ca:0a:9d:d3:e4:77:53:95:60:3a:0c:18:be:
                    5f:72:d7:65:6a:df:06:76:06:8b:e1:42:c2:e6:98:
                    7a:41:79:26:e5:e5:ef:b6:31:73:da:c9:55:44:37:
                    b8:a0:4f:0e:16:88:62:f5:55:49:96:8c:83:d5:2b:
                    8a:d3:aa:87:d6:db:d5:8d:db:7d:ec:50:7f:e6:db:
                    96:e0:97:64:f6:05:fc:14:77:e1:1b:64:ca:49:42:
                    f4:29:b4:d0:4b:75:3f:cc:5c:b1:a3:47:c7:3d:6c:
                    60:88:e1:a9:0e:2a:ac:77:d7:e3:8c:f3:cd:21:b6:
                    de:18:83:42:17:ec:12:5f:f2:20:11:a6:66:27:f4:
                    67:6a:04:bd:6f:3d:4c:fa:dd:b9:bc:2a:3f:4f:a3:
                    81:32:a0:ee:a4:f6:d5:da:04:98:03:e4:d4:0d:2f:
                    ab:b7:56:12:79:8a:e1:f9:20:60:86:fb:0a:fa:9f:
                    70:f9:8d:bc:81:f8:4c:5d:91:26:dc:a1:70:da:af:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:8B:A4:C5:A1:BB:BE:DF:ED:6E:AA:AB:F3:2C:5C:F9:1C:FD:6C
            X509v3 Authority Key Identifier:
                keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:36:d5:d9:9c:32:3b:ed:f3:46:6f:73:3f:2d:15:1d:a9:14:
         c0:30:d8:3f:76:cd:35:7c:23:79:4f:c1:b8:4a:76:bd:34:e0:
         30:7e:22:58:98:22:77:47:4b:9e:74:2e:5a:3a:40:e9:22:c4:
         62:f5:70:28:8b:b0:b0:79:a4:36:3c:13:b9:12:80:19:fb:3a:
         ba:69:05:81:a6:cb:7f:64:40:97:ec:94:e7:d1:41:13:87:67:
         dd:51:6b:2c:de:44:dc:93:38:c1:65:10:66:7b:f9:bc:fc:cc:
         ea:fc:5e:e4:d3:53:37:45:11:03:f5:f6:6e:91:1a:c8:c0:b1:
         ad:30:fd:a4:bf:40:1c:6a:e8:d7:80:21:66:73:4f:79:34:5a:
         e8:5f:e3:7d:c8:4a:d0:7f:34:51:84:e3:12:09:98:20:36:d7:
         07:d2:88:90:0b:a3:a0:9a:86:d7:1d:48:06:e6:9c:27:3e:d7:
         e1:97:4d:8d:79:f6:19:b7:e2:53:ca:88:84:2a:b1:1a:c5:90:
         09:ba:1c:af:5f:16:77:5c:d8:c2:d4:f0:d6:fe:dd:ea:ec:9e:
         95:99:21:42:04:ba:24:dc:e1:e1:04:e3:4c:ac:d0:13:73:ea:
         20:34:aa:29:3f:42:a0:f0:aa:be:ec:14:82:19:72:3c:2c:ea:
         f7:5b:a1:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5EZkzCRFzny3nicX8miMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2M1OTI1NTkxOWJkZDlhYjAzYmRlMWM1Yzc4ODA2MmM0
Yjk5ZjMwHhcNMjUwNDEzMTUwMTM0WhcNMjUwNDE0MTUwMTM0WjAzMTEwLwYDVQQD
Eyg3Nzc0OGJhNGM1YTFiYmJlZGZlZDZlYWFhYmYzMmM1Y2Y5MWNmZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy4QXVmUzLUsZvmKTwNTVCkh119n
DUBEHnJQ2EXBpbYs4u3NqFl1vFxknIYj4nZklV9uyydMY6+bLfNe+soKndPkd1OV
YDoMGL5fctdlat8GdgaL4ULC5ph6QXkm5eXvtjFz2slVRDe4oE8OFohi9VVJloyD
1SuK06qH1tvVjdt97FB/5tuW4Jdk9gX8FHfhG2TKSUL0KbTQS3U/zFyxo0fHPWxg
iOGpDiqsd9fjjPPNIbbeGINCF+wSX/IgEaZmJ/RnagS9bz1M+t25vCo/T6OBMqDu
pPbV2gSYA+TUDS+rt1YSeYrh+SBghvsK+p9w+Y28gfhMXZEm3KFw2q+g9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd0i6TFobu+3+1uqqvzLFz5HP1sMB8GA1UdIwQY
MBaAFNI8WSVZGb3ZqwO94cXHiAYsS5nzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDct
ZGE4YjJkNTc2YmYxLzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDctZGE4YjJkNTc2YmYx
LzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDbV2Zwy
O+3zRm9zPy0VHakUwDDYP3bNNXwjeU/BuEp2vTTgMH4iWJgid0dLnnQuWjpA6SLE
YvVwKIuwsHmkNjwTuRKAGfs6umkFgabLf2RAl+yU59FBE4dn3VFrLN5E3JM4wWUQ
Znv5vPzM6vxe5NNTN0URA/X2bpEayMCxrTD9pL9AHGro14AhZnNPeTRa6F/jfchK
0H80UYTjEgmYIDbXB9KIkAujoJqG1x1IBuacJz7X4ZdNjXn2GbfiU8qIhCqxGsWQ
Cbocr18Wd1zYwtTw1v7d6uyelZkhQgS6JNzh4QTjTKzQE3PqIDSqKT9CoPCqvuwU
ghlyPCzq91uh+w==
-----END CERTIFICATE-----