Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File:                     kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier:          SkJKNEMmq6KfguUHJiLcODDP0kk7I61V610am40nNs8=
Subject key identifier:   DA:CD:CC:94:E3:83:59:F0:10:8B:11:DC:53:C7:3B:9F:13:D4:E3:F1
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer:       /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial:       01962FAB97360ECDFE5930F5FA802D69D50E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: hWgekcCvKHOniIqqvjV5xZN+nMPrNDdOFthRPcDan0w=)
                          2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:36:0e:cd:fe:59:30:f5:fa:80:2d:69:d5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=dacdcc94e38359f0108b11dc53c73b9f13d4e3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:51:59:44:13:f5:6c:98:a5:4b:6c:24:55:
                    90:6e:83:35:a8:5c:a6:2e:bb:43:5c:7b:19:9d:e3:
                    0d:02:77:74:ee:44:45:92:10:9e:e3:26:39:4b:12:
                    ec:2f:18:95:39:2e:cb:68:6a:f0:cb:31:50:15:93:
                    c1:b2:35:a3:86:c1:33:84:60:f6:e2:df:8a:ab:ea:
                    67:41:bf:54:9d:f6:4c:15:97:7d:99:82:60:4e:98:
                    d8:73:27:8c:27:a1:5e:ce:41:b9:54:7d:63:0e:5a:
                    cc:d6:76:29:20:54:50:4c:aa:71:6e:7e:04:0d:22:
                    68:b4:96:dc:14:e1:e8:d3:51:a8:2a:7e:db:ad:c5:
                    99:2f:56:c5:a3:ec:4f:01:6d:af:96:a3:66:41:64:
                    0a:82:43:a0:2b:8c:86:53:36:39:01:9e:0f:e3:c8:
                    9e:b3:1f:16:a6:25:32:75:f9:83:10:da:bb:1c:00:
                    7a:b6:7e:9a:c5:f0:da:1e:d6:27:88:f2:e8:58:0e:
                    a8:0d:42:81:f7:98:79:9b:7a:92:40:4c:49:1b:46:
                    e0:56:e5:68:0e:c4:4e:a8:bb:bc:48:dc:e0:7f:08:
                    73:25:fb:d9:86:ed:a4:a8:ec:d2:f7:bc:98:96:a9:
                    64:28:44:60:3b:f4:25:af:2a:50:04:06:3e:8d:66:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:CC:94:E3:83:59:F0:10:8B:11:DC:53:C7:3B:9F:13:D4:E3:F1
            X509v3 Authority Key Identifier:
                keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:5d:0f:39:5a:82:91:a4:e6:35:f8:8d:d6:c4:87:7d:75:
         ae:75:f4:20:1c:b1:90:5a:c6:6e:8d:4c:4c:ad:c4:f0:70:6c:
         a8:78:8d:5e:77:e5:8d:02:65:4b:17:f3:2d:3e:40:5e:4b:69:
         44:d5:45:4b:70:60:63:56:91:1e:84:03:14:63:08:7c:d7:ec:
         90:a9:c9:81:5f:3f:56:3a:8b:f5:40:cb:be:de:44:8a:83:41:
         6a:e1:77:bf:01:50:77:7c:5b:cf:f2:fb:ac:6a:d6:e5:60:60:
         f3:11:9e:86:c6:a4:90:12:b6:72:28:91:54:2e:09:f1:11:4e:
         9b:a3:58:c8:58:07:a9:7d:97:1b:f7:a2:49:c9:93:4b:e9:8b:
         ba:ae:ab:66:ba:0a:66:c9:e3:02:31:c3:8c:0b:77:4d:d9:e8:
         56:5d:c0:c2:b4:b6:db:5c:64:9c:76:6d:3c:6f:10:3e:60:1d:
         81:cb:a6:e8:99:15:53:4d:2d:2a:20:7d:5c:96:07:47:20:e0:
         69:92:ab:0a:83:1e:9d:3e:3e:be:45:ee:20:cb:c5:da:6b:80:
         26:19:a6:89:21:ce:70:53:d7:c7:09:af:b4:5b:85:80:41:a8:
         19:26:ad:60:e5:9a:8e:b3:3b:1b:1f:15:8e:ec:0e:56:71:dc:
         5d:c5:e3:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5c2Ds3+WTD1+oAtadUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl
MjQ3MjkwHhcNMjUwNDEzMTUwMTM2WhcNMjUwNDE0MTUwMTM2WjAzMTEwLwYDVQQD
EyhkYWNkY2M5NGUzODM1OWYwMTA4YjExZGM1M2M3M2I5ZjEzZDRlM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1whRWUQT9WyYpUtsJFWQboM1qFym
LrtDXHsZneMNAnd07kRFkhCe4yY5SxLsLxiVOS7LaGrwyzFQFZPBsjWjhsEzhGD2
4t+Kq+pnQb9UnfZMFZd9mYJgTpjYcyeMJ6FezkG5VH1jDlrM1nYpIFRQTKpxbn4E
DSJotJbcFOHo01GoKn7brcWZL1bFo+xPAW2vlqNmQWQKgkOgK4yGUzY5AZ4P48ie
sx8WpiUydfmDENq7HAB6tn6axfDaHtYniPLoWA6oDUKB95h5m3qSQExJG0bgVuVo
DsROqLu8SNzgfwhzJfvZhu2kqOzS97yYlqlkKERgO/QlrypQBAY+jWZYwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrNzJTjg1nwEIsR3FPHO58T1OPxMB8GA1UdIwQY
MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt
YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0
LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABT5dDzla
gpGk5jX4jdbEh311rnX0IByxkFrGbo1MTK3E8HBsqHiNXnfljQJlSxfzLT5AXktp
RNVFS3BgY1aRHoQDFGMIfNfskKnJgV8/VjqL9UDLvt5EioNBauF3vwFQd3xbz/L7
rGrW5WBg8xGehsakkBK2ciiRVC4J8RFOm6NYyFgHqX2XG/eiScmTS+mLuq6rZroK
ZsnjAjHDjAt3TdnoVl3AwrS221xknHZtPG8QPmAdgcum6JkVU00tKiB9XJYHRyDg
aZKrCoMenT4+vkXuIMvF2muAJhmmiSHOcFPXxwmvtFuFgEGoGSatYOWajrM7Gx8V
juwOVnHcXcXjDA==
-----END CERTIFICATE-----