Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File:                     99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier:          MCtzgpSScJPQqg5DHRRhPSmq5Thh3k8+CCSBmOHYgsw=
Subject key identifier:   5A:C1:28:9C:71:7B:0B:A7:A6:9B:CD:EF:BA:2F:0A:5F:72:3A:86:74
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer:       /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial:       01962E98F29D00D4F209930D791F1B43AC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number:          0C32
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: fxChzJL3KLiQV2EN4SJphIuiSar2ifajwdZOyoTiTF0=)
                          2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:9d:00:d4:f2:09:93:0d:79:1f:1b:43:ac:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=5ac1289c717b0ba7a69bcdefba2f0a5f723a8674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:1b:1f:39:df:56:a7:1e:be:10:39:4d:94:
                    a6:99:2a:7a:3b:d3:5f:22:b8:be:a9:01:ba:2f:3f:
                    ea:84:dc:05:41:e0:7f:7f:97:10:fe:d3:76:28:09:
                    4d:5e:59:c7:70:d8:04:01:5f:2a:33:21:d8:fd:e8:
                    b9:af:f9:86:f8:f6:0e:68:45:99:24:93:c5:00:48:
                    5d:b6:e0:34:7b:a1:05:05:00:ce:ef:02:22:91:a8:
                    3e:7d:d3:6e:c7:f7:c9:46:2d:4a:4b:7a:ea:a9:ca:
                    5b:f3:2b:85:92:21:6b:e9:ad:54:27:6b:50:c0:f7:
                    a7:40:f1:64:b9:9f:a1:f1:95:7b:09:6c:63:71:ac:
                    d1:18:02:73:53:8d:47:f4:16:2a:92:f9:3c:ac:ba:
                    10:62:79:cb:b5:da:02:2e:e1:bc:d3:c8:10:e9:ad:
                    0c:3e:6e:2b:f7:a0:9a:53:25:15:fe:31:36:bc:78:
                    08:af:a3:11:4e:57:a7:bf:b3:b4:82:14:0c:76:40:
                    dd:e4:fe:5c:0f:e2:46:97:32:6a:48:cf:03:37:0b:
                    59:3a:af:a8:a4:a1:88:67:74:24:34:38:ec:b5:c4:
                    e9:3b:5d:06:10:b9:30:45:74:9a:4c:72:32:f2:46:
                    19:22:bf:7d:9b:01:07:2e:59:e9:a0:06:61:7c:9b:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:28:9C:71:7B:0B:A7:A6:9B:CD:EF:BA:2F:0A:5F:72:3A:86:74
            X509v3 Authority Key Identifier:
                keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:83:5c:8d:8c:87:2d:09:c4:fd:73:cf:07:b2:e1:36:4b:08:
         d0:c2:91:8c:df:18:f5:0e:55:97:45:21:e7:d7:1c:16:72:0a:
         89:59:85:1c:1b:d5:30:88:9c:b2:5d:18:c8:bc:ee:2b:02:e8:
         68:7d:ea:3e:30:28:7f:60:56:76:a0:92:60:a6:3e:b1:30:15:
         73:f5:57:3d:f0:b5:c9:65:a3:0a:88:2c:95:4b:31:b2:07:f9:
         06:91:23:db:0a:29:4f:2f:ca:47:9a:a0:87:6c:b8:2c:1c:cb:
         c4:1d:49:1d:9d:f1:21:dc:ec:26:8c:b3:8a:ac:f8:83:c4:a1:
         e1:05:d4:38:54:6d:ab:43:1a:0e:ba:46:c6:77:84:a7:08:5e:
         0b:b7:c8:ed:90:15:f7:1c:e9:2c:45:3f:79:5d:a2:8e:cd:c7:
         f4:e3:99:da:c4:db:1e:14:72:87:a7:f8:da:c2:a5:68:4e:79:
         60:7b:3e:3f:6c:5f:76:da:dc:42:8f:6f:f1:76:b5:dd:41:d0:
         4b:10:70:54:23:b8:47:c3:54:34:b8:8d:0d:c3:ff:de:ce:aa:
         1d:f7:c5:33:12:81:3c:09:24:3e:54:ed:f3:2c:49:2f:a0:9c:
         92:42:ee:9b:81:af:a6:45:3a:61:59:e7:1d:e8:b4:f2:5e:8c:
         04:25:23:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPKdANTyCZMNeR8bQ6xjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm
NDYxYTQwHhcNMjUwNDEzMTAwMTM3WhcNMjUwNDE0MTAwMTM3WjAzMTEwLwYDVQQD
Eyg1YWMxMjg5YzcxN2IwYmE3YTY5YmNkZWZiYTJmMGE1ZjcyM2E4Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplwbHznfVqcevhA5TZSmmSp6O9Nf
Iri+qQG6Lz/qhNwFQeB/f5cQ/tN2KAlNXlnHcNgEAV8qMyHY/ei5r/mG+PYOaEWZ
JJPFAEhdtuA0e6EFBQDO7wIikag+fdNux/fJRi1KS3rqqcpb8yuFkiFr6a1UJ2tQ
wPenQPFkuZ+h8ZV7CWxjcazRGAJzU41H9BYqkvk8rLoQYnnLtdoCLuG808gQ6a0M
Pm4r96CaUyUV/jE2vHgIr6MRTlenv7O0ghQMdkDd5P5cD+JGlzJqSM8DNwtZOq+o
pKGIZ3QkNDjstcTpO10GELkwRXSaTHIy8kYZIr99mwEHLlnpoAZhfJuDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrBKJxxewunppvN77ovCl9yOoZ0MB8GA1UdIwQY
MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt
NWNkODg1NDg5ZjgyLzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy
LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4NcjYyH
LQnE/XPPB7LhNksI0MKRjN8Y9Q5Vl0Uh59ccFnIKiVmFHBvVMIicsl0YyLzuKwLo
aH3qPjAof2BWdqCSYKY+sTAVc/VXPfC1yWWjCogslUsxsgf5BpEj2wopTy/KR5qg
h2y4LBzLxB1JHZ3xIdzsJoyziqz4g8Sh4QXUOFRtq0MaDrpGxneEpwheC7fI7ZAV
9xzpLEU/eV2ijs3H9OOZ2sTbHhRyh6f42sKlaE55YHs+P2xfdtrcQo9v8Xa13UHQ
SxBwVCO4R8NUNLiNDcP/3s6qHffFMxKBPAkkPlTt8yxJL6CckkLum4GvpkU6YVnn
Hei08l6MBCUjqw==
-----END CERTIFICATE-----