Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
File:                     1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft (raw, json)
Hash identifier:          Qnisf8VfjpQcBej4irI5UmOaRiiRR8S+rjGSV8MYqLA=
Subject key identifier:   38:5F:CA:B6:7C:C7:73:C9:84:FC:37:FA:A3:28:1C:BB:0E:6D:F8:EA
Authority key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Certificate issuer:       /CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Certificate serial:       01962E2AC70F2946AEE2E059EB4C825A5D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
Manifest number:          0F42
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl (hash: TiKIkiNEgm5sMi9gopDyDVZoAp9x77SRqDsBRJ6DPYY=)
                          2: Ice-tIEUF1Y7bJNvkEWlbR55Vaw.roa (hash: MtUFbwOo7nZHN6qSqL8LtBj2Ae2yCW5yZnsbKZTHysw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c7:0f:29:46:ae:e2:e0:59:eb:4c:82:5a:5d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=385fcab67cc773c984fc37faa3281cbb0e6df8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:eb:38:bb:2b:2c:1f:9b:83:44:25:56:4b:
                    4f:6e:27:2d:d7:bf:96:21:25:39:22:bb:6c:03:ba:
                    74:42:98:b4:44:ef:95:0f:f9:3a:c5:02:f2:5a:d7:
                    3c:ef:6b:70:57:07:e4:b7:ea:c0:9a:ea:25:27:a1:
                    7e:3e:9e:fb:90:19:43:35:b3:06:25:93:2f:a5:93:
                    bf:08:41:d0:d8:94:93:a9:cd:b4:0d:ce:71:84:a2:
                    bf:9e:40:b7:a8:b1:a1:7b:bd:a6:aa:53:a5:42:ea:
                    65:3e:72:8c:38:c3:9e:14:94:4c:13:e7:0b:e6:e9:
                    a6:5b:de:9f:fc:e3:09:72:ee:01:88:d8:bb:f7:53:
                    60:d6:48:d9:ba:bb:90:88:c0:d6:1f:8e:51:42:ff:
                    96:8d:ac:22:95:9f:c8:9d:e9:1f:60:bd:c7:13:1e:
                    b3:9d:84:31:ae:44:8c:d7:1e:f7:97:3e:e1:7b:9f:
                    96:fb:ef:4f:bf:c5:d9:9c:31:ce:1d:ed:fc:0f:6d:
                    7d:75:0f:a3:38:98:80:8a:b4:87:3a:02:72:92:7d:
                    36:c3:e0:ea:20:52:f4:cd:1a:b4:59:24:a4:39:64:
                    b0:48:29:ac:a2:47:94:05:d8:f0:0d:e2:ee:a8:99:
                    24:4d:21:e5:60:eb:d5:30:a2:27:bb:3a:ff:43:2c:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5F:CA:B6:7C:C7:73:C9:84:FC:37:FA:A3:28:1C:BB:0E:6D:F8:EA
            X509v3 Authority Key Identifier:
                keyid:FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e4:e9:ec:eb:1a:a9:59:29:13:b2:25:07:8c:0a:8a:20:c2:
         34:a1:28:7d:94:ab:f6:3a:03:74:64:04:fa:de:2a:72:4f:be:
         bc:10:81:ea:2d:9a:fa:6b:c5:3c:98:b9:59:38:15:50:e4:04:
         5e:94:ba:87:b1:fc:33:7e:19:20:20:a2:18:89:7e:97:70:f8:
         78:18:1f:8b:49:bb:bb:2b:1e:d4:a7:84:28:d3:c4:f8:0c:b6:
         52:6e:a7:89:ba:ec:de:4d:f6:73:c8:83:8b:2d:a9:d6:45:1f:
         21:a0:c3:b6:90:8a:0a:6a:6b:e7:e7:20:80:3b:1a:1e:70:82:
         22:fb:1c:99:cd:a7:35:e2:45:cc:e2:9c:03:28:26:de:85:4a:
         c3:7e:19:4b:ca:e9:f8:78:e8:77:28:79:6e:cc:7d:46:8e:78:
         e9:58:5e:8e:2b:ab:e1:4f:25:e1:2d:e1:43:84:91:0e:d4:b7:
         6a:82:ef:05:31:82:44:5a:c8:ad:14:d4:32:60:16:41:33:ea:
         63:fd:b1:e2:6f:8b:a7:82:15:35:31:0d:cb:77:c1:82:93:ed:
         36:5b:a6:6e:21:b7:6b:58:2a:f8:b4:79:cf:f6:b3:19:25:c0:
         87:01:a7:92:28:d8:11:4c:52:be:3c:ea:d9:00:57:01:e7:02:
         47:93:41:2b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuKscPKUau4uBZ60yCWl0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDk0OWY2NjI1MzU0M2VlODliOTE5NjM5MDczNmI1YTZl
ZDdjYjgwHhcNMjUwNDEzMDgwMTE3WhcNMjUwNDE0MDgwMTE3WjAzMTEwLwYDVQQD
EygzODVmY2FiNjdjYzc3M2M5ODRmYzM3ZmFhMzI4MWNiYjBlNmRmOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RrrOLsrLB+bg0QlVktPbict17+W
ISU5IrtsA7p0Qpi0RO+VD/k6xQLyWtc872twVwfkt+rAmuolJ6F+Pp77kBlDNbMG
JZMvpZO/CEHQ2JSTqc20Dc5xhKK/nkC3qLGhe72mqlOlQuplPnKMOMOeFJRME+cL
5ummW96f/OMJcu4BiNi791Ng1kjZuruQiMDWH45RQv+WjawilZ/InekfYL3HEx6z
nYQxrkSM1x73lz7he5+W++9Pv8XZnDHOHe38D219dQ+jOJiAirSHOgJykn02w+Dq
IFL0zRq0WSSkOWSwSCmsokeUBdjwDeLuqJkkTSHlYOvVMKInuzr/Qyx7xwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDhfyrZ8x3PJhPw3+qMoHLsObfjqMB8GA1UdIwQY
MBaAFPrZSfZiU1Q+6JuRljkHNrWm7Xy4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10bEo5bUpUVkQ3b201R1dPUWMydGFidGZMZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvM2NjZTIyLWMzMDEtNGJiYy1iMDI3
LTY0ZWVjYWVkMTFkYy8xLzEtdGxKOW1KVFZEN29tNUdXT1FjMnRhYnRmTGcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY5LzNjY2UyMi1jMzAxLTRiYmMtYjAyNy02NGVlY2FlZDEx
ZGMvMS8xLXRsSjltSlRWRDdvbTVHV09RYzJ0YWJ0ZkxnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeTp
7OsaqVkpE7IlB4wKiiDCNKEofZSr9joDdGQE+t4qck++vBCB6i2a+mvFPJi5WTgV
UOQEXpS6h7H8M34ZICCiGIl+l3D4eBgfi0m7uyse1KeEKNPE+Ay2Um6nibrs3k32
c8iDiy2p1kUfIaDDtpCKCmpr5+cggDsaHnCCIvscmc2nNeJFzOKcAygm3oVKw34Z
S8rp+Hjodyh5bsx9Ro546Vhejiur4U8l4S3hQ4SRDtS3aoLvBTGCRFrIrRTUMmAW
QTPqY/2x4m+Lp4IVNTENy3fBgpPtNlumbiG3a1gq+LR5z/azGSXAhwGnkijYEUxS
vjzq2QBXAecCR5NBKw==
-----END CERTIFICATE-----