Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File:                     3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier:          Qhqc6VIt3KYhfvHSI5t9eQ2CA8Cap7OU/s4XwiN1LWo=
Subject key identifier:   2B:D9:52:E2:49:B7:F3:7A:B9:19:25:27:D3:4C:4E:29:FD:06:DA:37
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer:       /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial:       01962F74868BD616015F178374F9FAD2069B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number:          118F
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: IHKTSA+pc4zkdb5WMJUtJNVeulaiMj+WBLvKYO3i0I4=)
                          2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:8b:d6:16:01:5f:17:83:74:f9:fa:d2:06:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=2bd952e249b7f37ab9192527d34c4e29fd06da37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:38:56:48:a8:60:ae:da:fc:b8:64:39:11:
                    9f:1f:06:18:03:3c:71:48:1b:80:9f:97:e1:1a:57:
                    44:fb:b8:df:fa:ed:ab:44:54:b8:cf:b8:3b:b5:fe:
                    88:53:30:0a:bc:27:55:3b:27:3c:66:d2:e6:ed:29:
                    90:86:2c:83:ac:11:0e:5d:c2:d3:0c:c8:a7:a3:73:
                    6d:bf:12:9f:61:6b:ee:5a:e2:07:c3:09:09:b9:99:
                    92:aa:5f:ff:a6:97:4d:9c:ca:f7:14:87:0b:6b:0a:
                    56:01:37:33:46:7d:a5:d9:2c:15:90:b5:67:3d:0a:
                    ed:52:a7:0d:5f:8e:67:5f:2d:2f:e1:df:ba:6f:46:
                    cb:e0:da:cf:70:48:9e:c7:ee:9e:8b:f4:f1:a7:30:
                    36:cb:06:d8:d7:0b:15:33:88:74:45:d1:f7:f0:b0:
                    cf:7f:c4:a9:ec:cc:f6:bf:c4:bb:8c:be:55:ef:cf:
                    6f:1c:e4:39:40:7d:79:8d:72:64:6f:d1:2e:f3:05:
                    af:de:0f:fe:e9:0f:44:f6:e0:94:1e:d0:89:c9:b9:
                    7a:3d:af:33:55:87:5d:aa:07:83:63:17:a7:ef:09:
                    97:c5:fc:6f:04:c7:fc:25:2f:45:77:99:4e:a4:f4:
                    2b:f4:06:e2:45:1d:23:dd:03:0d:d1:32:00:0c:a4:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D9:52:E2:49:B7:F3:7A:B9:19:25:27:D3:4C:4E:29:FD:06:DA:37
            X509v3 Authority Key Identifier:
                keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1f:f0:86:cb:5e:5d:01:a1:9e:92:19:8e:d0:d5:d7:b3:c4:
         3e:94:24:75:2d:5e:06:0f:aa:a5:26:c8:7d:c2:30:8a:dd:f1:
         c3:4a:bf:c1:eb:0f:01:67:87:8f:97:c3:90:a1:89:85:5b:d2:
         3d:11:ba:63:18:72:ee:81:11:89:c9:35:c2:07:07:3d:65:a3:
         94:00:af:a0:36:c2:85:6d:d3:c4:69:e1:d1:82:d2:1a:da:41:
         95:ea:21:e2:19:6b:46:92:b9:f3:5d:20:8f:c8:48:26:f9:36:
         9f:0b:47:05:76:8b:15:26:30:d4:c9:78:9c:b9:89:d3:6e:d7:
         8b:ee:b4:f1:e4:ce:3c:69:d6:62:1a:c3:ca:ac:06:d1:6c:e8:
         3a:a2:14:37:64:c3:0f:03:d8:70:a3:66:71:62:d8:8d:85:4e:
         12:a8:79:f1:d2:af:03:7d:44:2b:0c:a7:94:99:dd:67:ac:ac:
         33:13:da:56:a9:36:04:0c:85:f5:29:de:57:d1:f1:72:7f:f4:
         5e:92:19:c4:50:9a:3c:61:f5:09:06:bf:fe:f2:71:f7:62:8d:
         31:44:e2:3e:64:79:de:8f:d6:bd:92:1f:71:76:ac:ed:15:c9:
         2a:ed:2b:10:93:51:08:9e:95:9f:09:6a:69:6c:af:8d:99:3e:
         95:2e:ba:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIaL1hYBXxeDdPn60gabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjUwNDEzMTQwMTI3WhcNMjUwNDE0MTQwMTI3WjAzMTEwLwYDVQQD
EygyYmQ5NTJlMjQ5YjdmMzdhYjkxOTI1MjdkMzRjNGUyOWZkMDZkYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kM4VkioYK7a/LhkORGfHwYYAzxx
SBuAn5fhGldE+7jf+u2rRFS4z7g7tf6IUzAKvCdVOyc8ZtLm7SmQhiyDrBEOXcLT
DMino3NtvxKfYWvuWuIHwwkJuZmSql//ppdNnMr3FIcLawpWATczRn2l2SwVkLVn
PQrtUqcNX45nXy0v4d+6b0bL4NrPcEiex+6ei/TxpzA2ywbY1wsVM4h0RdH38LDP
f8Sp7Mz2v8S7jL5V789vHOQ5QH15jXJkb9Eu8wWv3g/+6Q9E9uCUHtCJybl6Pa8z
VYddqgeDYxen7wmXxfxvBMf8JS9Fd5lOpPQr9AbiRR0j3QMN0TIADKTPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvZUuJJt/N6uRklJ9NMTin9Bto3MB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR/whste
XQGhnpIZjtDV17PEPpQkdS1eBg+qpSbIfcIwit3xw0q/wesPAWeHj5fDkKGJhVvS
PRG6Yxhy7oERick1wgcHPWWjlACvoDbChW3TxGnh0YLSGtpBleoh4hlrRpK5810g
j8hIJvk2nwtHBXaLFSYw1Ml4nLmJ027Xi+608eTOPGnWYhrDyqwG0WzoOqIUN2TD
DwPYcKNmcWLYjYVOEqh58dKvA31EKwynlJndZ6ysMxPaVqk2BAyF9SneV9Hxcn/0
XpIZxFCaPGH1CQa//vJx92KNMUTiPmR53o/WvZIfcXas7RXJKu0rEJNRCJ6Vnwlq
aWyvjZk+lS66CA==
-----END CERTIFICATE-----