Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
File:                     dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json)
Hash identifier:          u2KeZ3e6vF5wyM1LoXSfW+AmzLp+JHtTHl/lI0e31sU=
Subject key identifier:   33:20:04:34:3E:91:42:48:0C:45:4A:EF:5D:02:65:19:62:49:05:42
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Certificate issuer:       /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial:       01962FAB11C5E8E226ECBFD830ACA97DADDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (hash: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=)
                          2: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (hash: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=)
                          3: LYviAp3PxmjO3NYT62eUwATXCDA.roa (hash: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=)
                          4: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (hash: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=)
                          5: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (hash: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=)
                          6: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (hash: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=)
                          7: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (hash: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=)
                          8: VVGAKlexZnslyaxsj979p9-1tLc.roa (hash: zSg/YLF7G2TzXt0TnTqPgj/B+dgWPQfBczFUSMDRTig=)
                          9: YWpo66YDW4G278af10SMQAtiOHo.roa (hash: Y9X0J6r0SDlIe4fmcLli4bcOvBDBEcbJdPc8zKihBto=)
                          10: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: kYlmYTOZOCLya7WSiAUQLSrkiiqF8664e7wwNLH3sjc=)
                          11: jiri3_1wYxUytGVauPuF_p1QcDE.roa (hash: pAKnIcLWyugWirmmWEvyvb0vortDg2AUGgIHTvMYhkg=)
                          12: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (hash: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:11:c5:e8:e2:26:ec:bf:d8:30:ac:a9:7d:ad:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=332004343e9142480c454aef5d02651962490542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:9b:d9:aa:20:21:56:5b:9a:52:42:7a:47:
                    51:99:53:18:9b:f2:23:be:79:ad:f6:34:8d:ec:aa:
                    2f:aa:67:67:6e:f5:11:40:eb:e5:4c:2f:10:ef:6d:
                    72:aa:b3:6a:18:f6:b8:94:0f:f3:a2:9c:80:e7:6f:
                    e9:49:4c:10:3a:a0:e9:16:c8:60:2c:d0:0d:1f:13:
                    29:5b:14:d6:48:af:72:28:d7:6d:4f:52:25:df:4f:
                    01:f5:4e:6b:72:51:91:df:14:12:eb:2e:7b:53:94:
                    3c:f7:e6:07:fb:36:09:b9:43:80:e0:56:bf:fa:a2:
                    6f:63:36:43:9d:45:b9:c0:44:e4:67:ce:69:d4:8e:
                    71:ac:d1:8e:23:1e:c0:13:d2:b0:df:fe:9e:dd:d4:
                    84:29:90:ed:d4:92:e4:92:9d:7e:08:37:92:f3:78:
                    ed:ab:58:fb:3e:3e:6f:be:d9:bd:84:20:31:7f:d6:
                    30:59:c5:6e:8c:f6:b4:6f:94:36:79:25:52:68:32:
                    21:3c:ae:7a:15:b6:b1:0f:32:17:58:38:80:8c:2d:
                    78:48:b5:96:72:4c:6e:ea:d3:54:eb:c9:ef:dd:9a:
                    b9:ad:1c:14:d0:f3:6a:d8:b3:70:24:f3:95:e9:3e:
                    7c:44:86:55:2d:d1:38:20:6a:1f:2a:0f:22:1f:7b:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:20:04:34:3E:91:42:48:0C:45:4A:EF:5D:02:65:19:62:49:05:42
            X509v3 Authority Key Identifier:
                keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e7:cc:0a:f2:ce:34:3b:ea:43:c3:f9:49:0f:77:0b:ad:26:
         b7:dc:be:43:1e:0d:da:c3:08:33:ad:22:0d:fd:34:69:fc:7b:
         79:19:f5:98:25:4a:9d:78:7f:f3:02:08:f7:06:e5:82:53:e2:
         80:fc:13:9d:0b:53:65:e1:22:28:22:15:b1:20:bb:85:06:91:
         ea:df:b4:29:93:90:34:64:df:e0:f3:9a:94:36:c7:0c:61:c3:
         e9:25:af:6f:7c:32:52:23:ba:41:e4:f3:50:ce:26:ab:16:b5:
         3b:5a:5a:5f:c0:63:33:72:93:4d:90:a1:86:a0:9e:32:64:bb:
         84:78:2f:40:93:f7:4b:e1:b2:15:3f:c6:ce:b2:97:58:20:14:
         c8:10:3f:c4:8b:8a:79:cd:28:84:a1:15:b1:8e:53:3f:f0:97:
         45:d0:a5:32:52:7d:4f:52:77:3c:62:ab:07:db:e0:97:6b:ba:
         06:0b:8a:d1:75:f4:a0:61:05:37:5b:36:4c:0d:67:ac:39:ab:
         42:0f:3a:7d:1a:5a:60:ab:94:04:03:e5:c2:85:29:c6:16:9f:
         79:95:c4:e2:5e:61:7c:00:05:c4:12:9b:b8:a9:b4:33:09:78:
         1d:b6:7c:c4:18:9b:f7:9c:db:28:56:47:d6:41:dd:bf:99:15:
         6a:04:3e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxHF6OIm7L/YMKypfa3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjUwNDEzMTUwMTAyWhcNMjUwNDE0MTUwMTAyWjAzMTEwLwYDVQQD
EygzMzIwMDQzNDNlOTE0MjQ4MGM0NTRhZWY1ZDAyNjUxOTYyNDkwNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ6b2aogIVZbmlJCekdRmVMYm/Ij
vnmt9jSN7KovqmdnbvURQOvlTC8Q721yqrNqGPa4lA/zopyA52/pSUwQOqDpFshg
LNANHxMpWxTWSK9yKNdtT1Il308B9U5rclGR3xQS6y57U5Q89+YH+zYJuUOA4Fa/
+qJvYzZDnUW5wETkZ85p1I5xrNGOIx7AE9Kw3/6e3dSEKZDt1JLkkp1+CDeS83jt
q1j7Pj5vvtm9hCAxf9YwWcVujPa0b5Q2eSVSaDIhPK56FbaxDzIXWDiAjC14SLWW
ckxu6tNU68nv3Zq5rRwU0PNq2LNwJPOV6T58RIZVLdE4IGofKg8iH3vY2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMgBDQ+kUJIDEVK710CZRliSQVCMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARufMCvLO
NDvqQ8P5SQ93C60mt9y+Qx4N2sMIM60iDf00afx7eRn1mCVKnXh/8wII9wblglPi
gPwTnQtTZeEiKCIVsSC7hQaR6t+0KZOQNGTf4POalDbHDGHD6SWvb3wyUiO6QeTz
UM4mqxa1O1paX8BjM3KTTZChhqCeMmS7hHgvQJP3S+GyFT/GzrKXWCAUyBA/xIuK
ec0ohKEVsY5TP/CXRdClMlJ9T1J3PGKrB9vgl2u6BguK0XX0oGEFN1s2TA1nrDmr
Qg86fRpaYKuUBAPlwoUpxhafeZXE4l5hfAAFxBKbuKm0Mwl4HbZ8xBib95zbKFZH
1kHdv5kVagQ+0A==
-----END CERTIFICATE-----