Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File:                     RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier:          KR+d1l8eh8rxoq5kdI13V3E6tXZZBZ2NgCsuXLHQ3jk=
Subject key identifier:   81:71:C5:E5:0E:69:AC:EF:DB:72:F9:F5:B4:97:1B:D6:F7:0B:30:94
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer:       /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial:       01962E2B3369BEE7C5BED794CF5DF4A89E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number:          11F9
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
                          2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
                          3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: M2jgDZVBsRFc7UfufS3aJYp/eXxDtHvTC+fP8+mLZac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:33:69:be:e7:c5:be:d7:94:cf:5d:f4:a8:9e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=8171c5e50e69acefdb72f9f5b4971bd6f70b3094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:5f:71:f9:0d:85:bb:99:f9:3e:f4:cc:77:
                    a4:ad:e3:b6:e0:55:a8:a1:ab:1b:88:06:23:9c:b2:
                    b2:2a:5e:39:90:b7:80:14:f6:30:7d:fb:83:ff:b1:
                    9d:9e:3c:ec:17:50:d0:7a:4c:81:d5:ce:10:8a:66:
                    db:d3:2a:8c:f4:20:9c:d1:08:55:e3:71:c2:30:a6:
                    bd:e5:dc:55:18:3e:66:7a:13:44:6e:ac:d4:8e:11:
                    a4:61:79:7a:bf:8f:1c:ac:65:b6:79:42:bd:14:d5:
                    28:54:c7:10:f5:73:1f:f6:38:27:67:f0:7c:91:91:
                    3e:59:67:b9:ad:e1:0c:47:9d:ee:a5:cb:8a:61:8b:
                    43:65:ec:e2:66:2c:63:96:39:f2:bb:74:b8:c2:dd:
                    88:d3:d1:22:07:51:8b:be:77:4f:b4:22:a3:ae:78:
                    fa:3d:d8:24:e8:ca:d5:c1:03:35:13:30:c2:f9:c2:
                    28:e0:b6:ba:60:25:1d:bc:a6:b7:23:a8:00:39:b9:
                    26:d4:49:db:3c:d0:76:7a:99:3e:08:87:95:30:0c:
                    3e:de:3e:ea:e1:de:44:d3:29:73:e6:1e:8c:f2:5e:
                    2f:9b:a9:d8:3c:5f:78:dd:ae:58:33:08:a2:7c:c7:
                    b0:e6:a3:6e:f1:36:42:2d:a4:63:fe:e7:5b:0a:90:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:C5:E5:0E:69:AC:EF:DB:72:F9:F5:B4:97:1B:D6:F7:0B:30:94
            X509v3 Authority Key Identifier:
                keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:4a:a2:8b:03:13:9a:c8:fb:09:9d:92:8c:b4:92:b1:66:
         28:21:f4:91:1d:a2:2f:0c:ba:5a:89:96:58:a6:94:75:ac:62:
         5d:63:1b:a1:ed:ff:5a:12:67:74:e0:29:6d:8d:29:5e:9d:3c:
         13:11:0e:66:11:21:95:34:63:79:5d:bd:9f:c0:2a:3e:86:3c:
         31:7a:8c:94:aa:77:84:b1:f7:a3:54:68:61:d8:47:7d:75:0c:
         44:01:2f:d4:a2:fa:47:e6:0a:b8:4d:e2:ac:47:ba:7b:27:28:
         a7:e5:85:4a:f7:ca:6a:8c:10:84:54:1b:cc:ea:4b:95:64:a9:
         91:20:3b:e8:e5:e7:63:6a:1a:ec:9d:eb:f6:a4:96:60:15:1d:
         90:dc:60:ab:84:88:c1:63:58:ae:6b:90:b6:9b:4b:c4:cc:f3:
         0a:c1:19:1b:bf:77:64:48:67:ce:b3:6b:e9:bd:bd:50:7f:96:
         af:2c:59:bd:92:56:9d:b7:b9:8a:50:18:c4:be:74:56:e0:2a:
         b2:61:81:4f:ac:8d:f0:42:b8:2c:9c:3f:d5:65:18:d5:9a:e5:
         8d:f4:1e:ff:47:46:81:39:19:c8:7b:14:e1:33:a5:7e:2f:8a:
         b5:8c:67:e9:3c:d0:89:f3:67:02:dc:d5:81:84:bc:8c:eb:47:
         69:7b:a5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzNpvufFvteUz130qJ4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Zjg4NTIyMGYxNzE5ZjU4MzdjYjVhMzZmYTYyZjNmNTM3
ZThlM2YwHhcNMjUwNDEzMDgwMTQ1WhcNMjUwNDE0MDgwMTQ1WjAzMTEwLwYDVQQD
Eyg4MTcxYzVlNTBlNjlhY2VmZGI3MmY5ZjViNDk3MWJkNmY3MGIzMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNJfcfkNhbuZ+T70zHekreO24FWo
oasbiAYjnLKyKl45kLeAFPYwffuD/7GdnjzsF1DQekyB1c4Qimbb0yqM9CCc0QhV
43HCMKa95dxVGD5mehNEbqzUjhGkYXl6v48crGW2eUK9FNUoVMcQ9XMf9jgnZ/B8
kZE+WWe5reEMR53upcuKYYtDZeziZixjljnyu3S4wt2I09EiB1GLvndPtCKjrnj6
Pdgk6MrVwQM1EzDC+cIo4La6YCUdvKa3I6gAObkm1EnbPNB2epk+CIeVMAw+3j7q
4d5E0ylz5h6M8l4vm6nYPF943a5YMwiifMew5qNu8TZCLaRj/udbCpAzvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFxxeUOaazv23L59bSXG9b3CzCUMB8GA1UdIwQY
MBaAFET4hSIPFxn1g3y1o2+mLz9Tfo4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDkt
MzdlZDk5MTQzYWFlLzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDktMzdlZDk5MTQzYWFl
LzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6JKoosD
E5rI+wmdkoy0krFmKCH0kR2iLwy6WomWWKaUdaxiXWMboe3/WhJndOApbY0pXp08
ExEOZhEhlTRjeV29n8AqPoY8MXqMlKp3hLH3o1RoYdhHfXUMRAEv1KL6R+YKuE3i
rEe6eycop+WFSvfKaowQhFQbzOpLlWSpkSA76OXnY2oa7J3r9qSWYBUdkNxgq4SI
wWNYrmuQtptLxMzzCsEZG793ZEhnzrNr6b29UH+WryxZvZJWnbe5ilAYxL50VuAq
smGBT6yN8EK4LJw/1WUY1ZrljfQe/0dGgTkZyHsU4TOlfi+KtYxn6TzQifNnAtzV
gYS8jOtHaXulrQ==
-----END CERTIFICATE-----