Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File:                     C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier:          PNw3cWUvavoMbgd+pbcDm6jaXmblzDDDnDineIo+MK4=
Subject key identifier:   97:D2:42:C9:22:90:31:5F:93:18:A8:AF:12:4C:55:C2:E6:3E:1B:7D
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer:       /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial:       01962E98FA3C88A36B5DF227E3DEE026F126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number:          08FE
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: 4dcbiyP2Ud4Tr0bk7stCOAszNXM1hjx+2kh826ZSHdw=)
                          2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:3c:88:a3:6b:5d:f2:27:e3:de:e0:26:f1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=97d242c92290315f9318a8af124c55c2e63e1b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:e7:21:51:3d:9e:7e:66:49:ca:37:c4:db:
                    56:76:e2:cb:aa:31:0b:28:3e:9a:69:7e:9e:58:e9:
                    00:e5:4d:dc:cd:8e:41:6e:12:74:53:3c:39:91:98:
                    3d:86:bb:3e:cd:a0:a7:f6:2c:c4:c7:86:50:3d:8d:
                    19:c2:7c:72:87:5f:f6:33:07:12:19:57:d3:d6:db:
                    b0:10:72:e4:5b:f3:f5:dd:68:fb:07:0c:9e:fc:f6:
                    1e:61:c0:1d:83:16:54:a7:f9:60:db:e3:35:71:08:
                    78:55:87:22:32:d0:6c:c8:a9:0d:77:17:43:e3:d9:
                    36:ef:9d:40:42:ef:62:09:6b:d3:20:80:17:7e:10:
                    62:02:6b:ca:b9:be:af:36:15:06:73:8c:de:3d:15:
                    61:ba:cc:d3:66:0c:5f:4d:c5:32:7b:bb:bf:46:72:
                    20:a8:35:56:60:70:66:96:a2:9c:2e:64:81:d5:f9:
                    01:64:cb:d6:db:1d:e6:f0:5d:c7:25:48:a1:f2:6f:
                    14:95:98:2c:37:1b:89:c7:88:4f:2f:4b:0a:36:b9:
                    50:71:b5:74:e0:81:4b:c5:32:67:98:28:84:f7:3b:
                    de:98:e0:8f:01:a9:fd:68:fb:60:bc:47:5e:de:ba:
                    31:8c:3e:b0:c6:6c:a0:d5:46:db:00:00:ee:a7:48:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D2:42:C9:22:90:31:5F:93:18:A8:AF:12:4C:55:C2:E6:3E:1B:7D
            X509v3 Authority Key Identifier:
                keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:b2:79:49:97:3f:aa:36:ee:f7:11:45:d3:12:f8:03:e2:
         11:c7:61:fa:7b:64:af:99:07:93:ad:74:26:99:ab:8c:66:b1:
         6b:35:1b:e2:ad:67:00:24:df:d9:8c:64:06:1e:fb:05:d0:af:
         a7:f0:e1:ae:b8:b9:70:42:83:d8:a3:3a:25:cb:4f:f0:ff:3a:
         74:08:40:0e:ba:e3:11:99:e8:24:3e:68:79:7a:26:81:a1:c7:
         ae:c2:33:d6:8f:8e:ca:90:ad:39:d7:f4:64:36:26:e1:97:09:
         58:3d:ee:fe:16:d8:e5:22:ae:1e:3d:47:52:0a:0a:60:62:c7:
         81:59:99:2c:e4:b0:85:31:7c:c1:17:9b:3d:c5:69:3e:38:86:
         37:23:0d:b8:2b:a6:1f:ed:33:dd:c6:ec:27:1e:16:02:50:21:
         da:38:84:90:cd:a8:da:1a:a7:d7:27:ea:ac:8c:f1:9e:8b:7d:
         39:f4:1b:8a:86:a6:46:04:d5:e0:de:a2:da:10:81:66:30:16:
         26:0a:d7:2d:f3:78:b0:30:2b:2a:56:58:c9:50:d7:74:a3:e5:
         c9:93:80:e9:9c:4d:73:08:6d:07:9d:6b:fb:d5:84:fb:af:dc:
         25:fb:0e:f7:6d:ed:9d:87:5b:87:6b:03:9b:bf:57:14:ab:4e:
         2b:3b:6a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPo8iKNrXfIn497gJvEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl
YTI5YzgwHhcNMjUwNDEzMTAwMTM5WhcNMjUwNDE0MTAwMTM5WjAzMTEwLwYDVQQD
Eyg5N2QyNDJjOTIyOTAzMTVmOTMxOGE4YWYxMjRjNTVjMmU2M2UxYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BjnIVE9nn5mSco3xNtWduLLqjEL
KD6aaX6eWOkA5U3czY5BbhJ0Uzw5kZg9hrs+zaCn9izEx4ZQPY0Zwnxyh1/2MwcS
GVfT1tuwEHLkW/P13Wj7Bwye/PYeYcAdgxZUp/lg2+M1cQh4VYciMtBsyKkNdxdD
49k2751AQu9iCWvTIIAXfhBiAmvKub6vNhUGc4zePRVhuszTZgxfTcUye7u/RnIg
qDVWYHBmlqKcLmSB1fkBZMvW2x3m8F3HJUih8m8UlZgsNxuJx4hPL0sKNrlQcbV0
4IFLxTJnmCiE9zvemOCPAan9aPtgvEde3roxjD6wxmyg1UbbAADup0hogwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfSQskikDFfkxiorxJMVcLmPht9MB8GA1UdIwQY
MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt
MDkzMDNlNDE4ZTdkLzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk
LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPyyeUmX
P6o27vcRRdMS+APiEcdh+ntkr5kHk610JpmrjGaxazUb4q1nACTf2YxkBh77BdCv
p/Dhrri5cEKD2KM6JctP8P86dAhADrrjEZnoJD5oeXomgaHHrsIz1o+OypCtOdf0
ZDYm4ZcJWD3u/hbY5SKuHj1HUgoKYGLHgVmZLOSwhTF8wRebPcVpPjiGNyMNuCum
H+0z3cbsJx4WAlAh2jiEkM2o2hqn1yfqrIzxnot9OfQbioamRgTV4N6i2hCBZjAW
JgrXLfN4sDArKlZYyVDXdKPlyZOA6ZxNcwhtB51r+9WE+6/cJfsO923tnYdbh2sD
m79XFKtOKztqgw==
-----END CERTIFICATE-----