Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File:                     cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier:          IkqoCgSyj2P3koLGH8Bud515A8kXCWvqLnpbVRF/pX4=
Subject key identifier:   F8:B7:A5:55:08:AA:F3:C1:65:8B:85:12:2D:EC:B9:01:7B:0B:D6:1B
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       01962F06AB251E54B49A256D4903FB175504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number:          0BE6
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (hash: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=)
                          2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: ueVKcqhZBM2sNRhIrePhOYykg908A7frZjnLAjRINIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ab:25:1e:54:b4:9a:25:6d:49:03:fb:17:55:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=f8b7a55508aaf3c1658b85122decb9017b0bd61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b4:02:e5:aa:4a:6c:9a:57:09:0e:ed:82:95:
                    88:d1:79:e5:2c:6a:69:f8:c6:a3:e0:96:25:f6:c6:
                    8b:7b:a2:75:bb:db:86:45:b4:3c:e4:43:0b:fb:97:
                    fe:b3:cb:fb:c9:37:c2:42:4b:b2:e7:fe:c3:77:2a:
                    62:aa:3e:1c:21:29:dd:34:f8:f9:d1:dc:a4:b3:7d:
                    79:51:0a:50:cd:7e:5c:7d:9b:29:52:53:c8:d5:aa:
                    c3:8e:6c:55:46:2f:f7:0b:0e:75:0a:f1:86:fb:2b:
                    74:1f:c0:e5:2f:d3:ac:79:68:f1:f8:14:b5:bc:d3:
                    d8:e8:3e:a4:e1:cd:c8:9a:cf:9d:09:80:44:09:ae:
                    f0:22:2d:a1:0a:dd:a1:ba:27:ba:71:d7:0c:e7:23:
                    41:b5:ca:82:99:22:aa:f1:31:a5:de:6d:ef:2a:b9:
                    98:00:bb:5e:c0:6d:fa:c2:90:6c:e2:15:0d:42:35:
                    d8:61:7d:37:5a:71:9f:ec:df:6e:f6:e1:07:7b:d8:
                    1b:0f:8a:d2:c0:41:0e:94:38:b9:97:73:4c:cd:7f:
                    d8:c6:00:e3:48:3b:4e:bb:f6:94:a6:be:0b:69:54:
                    6f:e4:56:49:42:65:01:08:60:fd:08:5d:c6:be:f0:
                    82:66:c7:01:1c:78:59:25:ff:56:a8:99:6f:d3:6f:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:A5:55:08:AA:F3:C1:65:8B:85:12:2D:EC:B9:01:7B:0B:D6:1B
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:80:3f:6e:6e:36:da:9a:e6:c2:0d:94:e7:87:bd:56:b9:b8:
         a9:6b:13:31:c1:fe:fd:dc:69:3c:da:ac:44:b2:38:64:9e:4f:
         97:0a:fe:8b:b2:56:a6:9e:d7:a3:b7:e6:29:f4:b8:e9:34:72:
         91:26:ff:c7:db:d6:3d:ca:26:c4:d3:b4:aa:6a:2d:91:f1:bc:
         bb:34:cf:6a:9c:64:18:05:5a:15:3b:53:de:53:45:97:e0:b3:
         62:9f:73:05:af:5f:6b:ab:cc:1b:32:8d:7e:02:14:39:72:6f:
         59:5c:67:aa:58:0d:a8:5d:9b:44:67:a1:e1:05:1e:da:15:53:
         87:6c:8d:66:41:e6:f5:43:95:50:f4:c6:f0:62:11:e2:6f:1d:
         f0:4f:5e:05:f7:4f:f7:86:cb:d3:14:4b:2a:d3:36:cb:65:4f:
         99:bc:98:24:a3:bc:a3:74:17:34:be:56:17:2f:98:09:e4:a9:
         b0:3c:a3:c6:cd:ac:6b:1e:9b:0a:a6:fe:86:39:bc:fc:03:2c:
         22:db:b0:aa:49:10:77:b1:2f:b9:79:b7:6a:a1:50:9e:68:ca:
         fa:06:d5:2f:af:f9:0a:c0:32:f6:5b:d3:90:3e:0c:eb:90:a9:
         a8:eb:b0:75:17:d0:03:00:b7:cd:11:12:8b:f0:fb:78:fd:d6:
         4b:1d:7c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqslHlS0miVtSQP7F1UEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2FmOGI3OTBhYzA5MjNiMjQzMDdlZTAwOGYyNjFkMTBk
OTU2MGIwHhcNMjUwNDEzMTIwMTI4WhcNMjUwNDE0MTIwMTI4WjAzMTEwLwYDVQQD
EyhmOGI3YTU1NTA4YWFmM2MxNjU4Yjg1MTIyZGVjYjkwMTdiMGJkNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57QC5apKbJpXCQ7tgpWI0XnlLGpp
+Maj4JYl9saLe6J1u9uGRbQ85EML+5f+s8v7yTfCQkuy5/7Ddypiqj4cISndNPj5
0dyks315UQpQzX5cfZspUlPI1arDjmxVRi/3Cw51CvGG+yt0H8DlL9OseWjx+BS1
vNPY6D6k4c3Ims+dCYBECa7wIi2hCt2huie6cdcM5yNBtcqCmSKq8TGl3m3vKrmY
ALtewG36wpBs4hUNQjXYYX03WnGf7N9u9uEHe9gbD4rSwEEOlDi5l3NMzX/YxgDj
SDtOu/aUpr4LaVRv5FZJQmUBCGD9CF3GvvCCZscBHHhZJf9WqJlv0296HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi3pVUIqvPBZYuFEi3suQF7C9YbMB8GA1UdIwQY
MBaAFHE6+LeQrAkjskMH7gCPJh0Q2VYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2Mt
NDc0MTQ3NjZiNmJhLzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2MtNDc0MTQ3NjZiNmJh
LzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIA/bm42
2prmwg2U54e9Vrm4qWsTMcH+/dxpPNqsRLI4ZJ5Plwr+i7JWpp7Xo7fmKfS46TRy
kSb/x9vWPcomxNO0qmotkfG8uzTPapxkGAVaFTtT3lNFl+CzYp9zBa9fa6vMGzKN
fgIUOXJvWVxnqlgNqF2bRGeh4QUe2hVTh2yNZkHm9UOVUPTG8GIR4m8d8E9eBfdP
94bL0xRLKtM2y2VPmbyYJKO8o3QXNL5WFy+YCeSpsDyjxs2sax6bCqb+hjm8/AMs
ItuwqkkQd7EvuXm3aqFQnmjK+gbVL6/5CsAy9lvTkD4M65CpqOuwdRfQAwC3zRES
i/D7eP3WSx18Wg==
-----END CERTIFICATE-----