Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File:                     aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier:          6X8CwX7Xoc/27DRRctT8LcBiEvnGy12yx28g4BQsNPI=
Subject key identifier:   A0:DA:EE:C5:4B:A7:29:94:AA:D9:32:B7:16:04:3B:22:FC:09:21:89
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer:       /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial:       01962F06ACF39D7DA82E9865593E07C285E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number:          BA
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
                          2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: +YQINo0avJS0eNAO9MMVkmPuOdDkQzXDfBWQRJuUqdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ac:f3:9d:7d:a8:2e:98:65:59:3e:07:c2:85:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=a0daeec54ba72994aad932b716043b22fc092189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:27:93:07:5c:76:52:0b:83:73:df:60:d6:
                    45:1f:9e:21:c8:1f:ec:5d:01:2a:b5:47:c2:fe:05:
                    3b:52:32:34:28:89:9b:2c:fe:e4:fd:dc:1d:27:74:
                    dc:69:16:2e:a2:94:8e:2b:4c:44:40:2a:55:81:31:
                    a4:cc:1b:39:a2:c4:ed:e0:9b:0d:6c:00:a4:27:6a:
                    da:b6:02:14:c4:e7:c2:a3:b8:88:38:63:54:44:87:
                    38:98:03:a1:b3:92:d7:a6:0c:4f:c5:f2:c2:a8:63:
                    b0:33:cc:d1:4c:ae:c6:98:9c:3a:14:04:cf:3e:f8:
                    41:1d:93:81:d8:24:ea:d3:cf:ad:8e:ea:c3:c8:2e:
                    71:e0:8a:7f:bb:b0:00:4a:63:cb:30:1f:66:31:41:
                    df:24:e5:21:09:75:b8:93:06:3d:d8:b9:75:0e:88:
                    d1:b0:86:34:e5:2e:81:2e:44:4d:c6:39:fb:59:d3:
                    4f:a8:14:68:2e:16:5f:25:c7:5a:fa:8a:69:43:ef:
                    7a:23:7f:0a:d3:df:2d:03:f5:9b:0a:ed:db:3e:b7:
                    5d:e2:0e:c6:6b:23:f0:34:f0:c0:2f:e7:d7:46:89:
                    58:d9:cb:ce:91:0e:14:05:ed:ec:b1:ac:9c:9c:0a:
                    7b:74:d6:1a:73:98:0f:df:08:e8:52:49:ac:62:d0:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DA:EE:C5:4B:A7:29:94:AA:D9:32:B7:16:04:3B:22:FC:09:21:89
            X509v3 Authority Key Identifier:
                keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:73:2d:6c:25:73:0e:fc:f3:67:45:9c:da:e3:3c:d7:f2:7c:
         24:13:38:35:79:d2:ef:50:75:3a:36:0f:6c:a6:2c:dc:25:98:
         f4:dd:a9:31:e7:5a:d1:0a:39:44:e8:de:cb:96:c9:71:80:13:
         d3:65:86:da:16:f8:66:e9:9c:8e:2d:e4:af:81:1c:4c:62:b4:
         24:cc:58:8f:b6:8b:d0:97:6e:ca:db:99:25:05:46:85:a8:7d:
         fe:36:9c:b6:aa:cd:bf:fd:6e:eb:5d:7e:b5:9d:be:ff:4a:d5:
         f5:f4:ae:fc:d7:e0:d4:2d:fd:87:36:1f:a8:e0:6c:6a:fb:b6:
         cc:bb:40:57:ad:d0:d2:25:57:60:ec:d1:67:fa:11:ac:21:44:
         10:42:f2:d6:d5:6c:26:42:c0:49:5c:fe:ff:cf:8d:a3:66:01:
         7d:57:63:9a:eb:f4:1c:d1:60:f9:8f:ba:15:a5:78:cb:dd:9e:
         ea:0d:6d:be:55:89:14:4b:56:5b:d6:de:14:fe:d1:f2:82:e7:
         dc:ad:4c:3c:42:2a:ae:46:86:4e:d1:b2:0d:f4:55:6d:0c:b9:
         67:bd:15:26:c3:6f:09:b0:08:70:8e:24:7a:7e:95:df:63:f2:
         31:f8:4e:70:75:c7:b3:0f:e7:d1:32:fe:29:55:95:46:74:38:
         da:d1:72:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqzznX2oLphlWT4HwoXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTlkYjgxYjQ5YWJhMTJiMTgxMGNiM2EyOTllZWU0NjMy
ZGQ3MjAwHhcNMjUwNDEzMTIwMTI4WhcNMjUwNDE0MTIwMTI4WjAzMTEwLwYDVQQD
EyhhMGRhZWVjNTRiYTcyOTk0YWFkOTMyYjcxNjA0M2IyMmZjMDkyMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoUnkwdcdlILg3PfYNZFH54hyB/s
XQEqtUfC/gU7UjI0KImbLP7k/dwdJ3TcaRYuopSOK0xEQCpVgTGkzBs5osTt4JsN
bACkJ2ratgIUxOfCo7iIOGNURIc4mAOhs5LXpgxPxfLCqGOwM8zRTK7GmJw6FATP
PvhBHZOB2CTq08+tjurDyC5x4Ip/u7AASmPLMB9mMUHfJOUhCXW4kwY92Ll1DojR
sIY05S6BLkRNxjn7WdNPqBRoLhZfJcda+oppQ+96I38K098tA/WbCu3bPrdd4g7G
ayPwNPDAL+fXRolY2cvOkQ4UBe3ssaycnAp7dNYac5gP3wjoUkmsYtBw0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDa7sVLpymUqtkytxYEOyL8CSGJMB8GA1UdIwQY
MBaAFGgZ24G0mroSsYEMs6KZ7uRjLdcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUt
OTAzNWIwODM2MjQzLzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUtOTAzNWIwODM2MjQz
LzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXMtbCVz
DvzzZ0Wc2uM81/J8JBM4NXnS71B1OjYPbKYs3CWY9N2pMeda0Qo5ROjey5bJcYAT
02WG2hb4Zumcji3kr4EcTGK0JMxYj7aL0JduytuZJQVGhah9/jactqrNv/1u611+
tZ2+/0rV9fSu/Nfg1C39hzYfqOBsavu2zLtAV63Q0iVXYOzRZ/oRrCFEEELy1tVs
JkLASVz+/8+No2YBfVdjmuv0HNFg+Y+6FaV4y92e6g1tvlWJFEtWW9beFP7R8oLn
3K1MPEIqrkaGTtGyDfRVbQy5Z70VJsNvCbAIcI4ken6V32PyMfhOcHXHsw/n0TL+
KVWVRnQ42tFyuw==
-----END CERTIFICATE-----