Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
File:                     _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json)
Hash identifier:          kKQIGS2LKRVfEpl0gC1xy46foiWIQi8xWjNSoaL+FPs=
Subject key identifier:   1C:4E:0B:6C:B4:15:FE:A5:CD:B8:B2:B8:F6:AE:2F:8C:86:1C:AC:DD
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Certificate issuer:       /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial:       01962DF3EE662F9F6048FCB28A09995BE553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=)
                          2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=)
                          3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=)
                          4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=)
                          5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=)
                          6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=)
                          7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=)
                          8: VYdiSMUQLdDbmv2P361VJTQ4iNw.roa (hash: aDG5V9Cf1wVZyIYvSKFbOdVZC2nfBzKtFvetSMNMeeM=)
                          9: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: xhytQL8EX1maRVqyCvw+vVCOZjxrcDXfMKLreJHkcRM=)
                          10: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=)
                          11: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ee:66:2f:9f:60:48:fc:b2:8a:09:99:5b:e5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=1c4e0b6cb415fea5cdb8b2b8f6ae2f8c861cacdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:f4:a8:4f:01:99:7e:3d:61:91:13:b6:e6:
                    42:c1:2c:e5:be:90:03:76:95:0d:76:ad:f4:c9:28:
                    a6:0e:74:d7:bd:ac:42:a3:f1:25:44:6d:c6:e5:b1:
                    da:62:9d:47:38:69:a6:9e:06:b3:ee:5f:b8:5a:7a:
                    1f:ca:24:7b:84:01:01:56:2c:13:c3:26:77:ed:1e:
                    d3:dd:0b:9e:7c:26:c4:b3:99:f9:78:41:5c:b1:7a:
                    e5:1a:71:96:67:c8:47:70:93:90:ea:74:51:12:a9:
                    c8:4c:57:8e:81:d8:06:84:7b:c2:f8:17:64:32:a4:
                    97:f5:d4:95:68:06:1f:f4:94:71:c1:2b:d5:68:55:
                    13:38:4e:e3:3c:ce:35:0e:2a:3d:1e:9a:ec:72:bd:
                    a0:d3:af:a0:00:b3:f2:81:66:73:df:66:82:09:4e:
                    6f:de:0e:76:54:fb:52:db:15:d2:fb:80:17:34:cc:
                    e6:59:54:75:05:88:87:90:51:e0:29:9b:09:15:6a:
                    e2:73:a9:55:8b:c0:84:86:79:91:0e:e0:66:df:36:
                    70:3f:71:5a:d6:1f:63:12:08:fc:50:e2:a0:ff:b1:
                    0a:e9:a7:66:c3:61:e0:27:9b:f7:86:ef:e1:33:f7:
                    7d:53:6b:18:64:bd:c4:30:e5:d0:f3:8c:07:3b:0e:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4E:0B:6C:B4:15:FE:A5:CD:B8:B2:B8:F6:AE:2F:8C:86:1C:AC:DD
            X509v3 Authority Key Identifier:
                keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:4e:70:70:0e:97:db:bd:56:a1:3e:d0:1d:53:44:26:68:
         6c:c2:99:ea:25:8e:f7:64:18:31:d0:48:88:20:6d:90:54:68:
         a4:4b:75:48:d3:5b:c4:a5:89:75:84:47:e2:80:01:8f:23:39:
         c4:3a:a1:e6:78:0c:e3:a1:fb:6c:ed:f9:71:62:1e:17:61:20:
         95:c6:46:9f:ad:11:65:2d:3a:b4:b1:4b:89:b8:f4:ab:c4:49:
         79:96:8c:21:53:b0:52:7d:bd:da:90:11:25:16:6e:f0:cd:b5:
         fe:1b:27:fd:1b:c8:d3:85:2a:ac:66:5d:91:bb:b9:4a:97:27:
         d7:9c:30:67:26:51:76:7e:ca:28:af:07:b3:bf:00:1b:45:66:
         07:17:ca:9c:a3:41:a7:01:c9:4b:a8:6c:92:40:cf:c9:89:db:
         4c:e4:6f:f2:c7:21:f7:84:57:6f:26:31:82:c7:ef:8c:12:8d:
         f1:8e:9e:f7:db:77:38:55:f2:ad:f4:63:33:a0:18:8e:fa:6a:
         81:56:06:b2:52:f8:74:fa:43:f0:80:fa:71:13:a4:b0:86:4b:
         d3:d8:26:c7:11:8d:01:91:28:09:41:8c:a1:f9:c2:68:20:a5:
         8f:5a:a0:c7:a9:77:2a:e0:e2:a9:cd:32:11:e1:ab:f5:a5:5e:
         b7:c3:c5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+5mL59gSPyyigmZW+VTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2
NjQxZDkwHhcNMjUwNDEzMDcwMTIyWhcNMjUwNDE0MDcwMTIyWjAzMTEwLwYDVQQD
EygxYzRlMGI2Y2I0MTVmZWE1Y2RiOGIyYjhmNmFlMmY4Yzg2MWNhY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Mz0qE8BmX49YZETtuZCwSzlvpAD
dpUNdq30ySimDnTXvaxCo/ElRG3G5bHaYp1HOGmmngaz7l+4WnofyiR7hAEBViwT
wyZ37R7T3QuefCbEs5n5eEFcsXrlGnGWZ8hHcJOQ6nRREqnITFeOgdgGhHvC+Bdk
MqSX9dSVaAYf9JRxwSvVaFUTOE7jPM41Dio9Hprscr2g06+gALPygWZz32aCCU5v
3g52VPtS2xXS+4AXNMzmWVR1BYiHkFHgKZsJFWric6lVi8CEhnmRDuBm3zZwP3Fa
1h9jEgj8UOKg/7EK6admw2HgJ5v3hu/hM/d9U2sYZL3EMOXQ84wHOw6QLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxOC2y0Ff6lzbiyuPauL4yGHKzdMB8GA1UdIwQY
MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt
NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl
LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJNOcHAO
l9u9VqE+0B1TRCZobMKZ6iWO92QYMdBIiCBtkFRopEt1SNNbxKWJdYRH4oABjyM5
xDqh5ngM46H7bO35cWIeF2EglcZGn60RZS06tLFLibj0q8RJeZaMIVOwUn292pAR
JRZu8M21/hsn/RvI04UqrGZdkbu5Spcn15wwZyZRdn7KKK8Hs78AG0VmBxfKnKNB
pwHJS6hskkDPyYnbTORv8sch94RXbyYxgsfvjBKN8Y6e99t3OFXyrfRjM6AYjvpq
gVYGslL4dPpD8ID6cROksIZL09gmxxGNAZEoCUGMofnCaCClj1qgx6l3KuDiqc0y
EeGr9aVet8PFWg==
-----END CERTIFICATE-----