Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File:                     ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier:          peAU0/JlMxnOrkNp8HlPxYlriFCBXzckI1F7l+DsfHM=
Subject key identifier:   91:D0:B1:41:74:8D:FA:54:47:AF:F3:09:44:41:7A:16:E3:A5:8F:CD
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer:       /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial:       01962DF43595C0BE6C4E664C96D95C9EF2A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
                          2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: 30uqbGXx5psdX6Ar5LdL2FqYmDT8+sEQcbwtysfSURQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:35:95:c0:be:6c:4e:66:4c:96:d9:5c:9e:f2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=91d0b141748dfa5447aff30944417a16e3a58fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:c2:72:01:b2:0f:0a:06:69:ea:96:bc:b5:
                    46:af:46:f6:8a:f9:40:7f:a1:ff:db:e6:19:68:65:
                    39:eb:92:88:5e:ae:bb:62:38:9d:46:5b:5f:36:bf:
                    39:2b:cc:c3:97:a8:40:62:4a:08:b0:03:8b:4d:14:
                    92:d6:c1:37:29:d1:c5:c1:55:32:98:ab:4b:50:e2:
                    06:e0:88:e2:c8:5f:4c:db:7a:50:79:31:75:47:d3:
                    79:8c:5c:93:4a:9f:0e:78:b4:6c:60:9f:69:78:7d:
                    4e:51:78:94:57:d8:8c:6a:33:08:0f:86:91:9f:aa:
                    5c:ad:5f:c6:3c:0e:7e:f3:b3:74:ef:aa:a5:dc:04:
                    94:e5:a8:bb:b5:cf:6d:61:68:43:2e:40:c4:48:37:
                    dc:70:77:44:92:b3:21:31:35:de:0e:06:58:e4:f5:
                    b0:59:2c:be:f8:f1:c1:67:a5:be:f7:91:54:d5:d8:
                    bc:0a:75:46:e8:8f:66:75:85:65:3a:7a:9b:7e:0b:
                    e7:52:aa:f6:7a:45:de:a5:69:96:8f:3f:15:4f:97:
                    bd:ca:79:74:b4:40:02:66:a1:95:fc:3c:3b:07:2d:
                    a8:ad:d8:85:3a:d4:f5:a6:f2:cb:9f:7d:e8:55:5e:
                    bb:19:45:a9:43:b1:17:9d:1d:de:0b:c2:3f:ed:cd:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D0:B1:41:74:8D:FA:54:47:AF:F3:09:44:41:7A:16:E3:A5:8F:CD
            X509v3 Authority Key Identifier:
                keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:84:b4:6a:f4:f0:0a:dc:db:08:2b:33:35:4a:0d:7b:33:3b:
         25:a7:d6:3d:79:79:8e:9e:17:b3:b1:08:20:0d:da:a1:5e:1a:
         45:6a:34:73:d9:9b:1b:17:fc:53:cf:59:62:fd:a4:63:83:f9:
         e9:a1:ee:27:5d:ea:fd:1f:15:61:f8:03:b1:1d:27:da:c6:b2:
         39:63:bf:f0:85:de:bc:ff:26:ae:e6:c6:89:f8:e6:29:68:52:
         de:b5:97:c7:91:d1:f3:c0:09:3c:91:72:a5:c7:44:e9:de:8f:
         91:b3:04:a6:4b:4e:44:7c:84:22:72:84:65:e7:cc:98:94:52:
         ff:4c:22:44:06:28:8b:06:6b:63:2b:30:78:f2:ff:44:77:89:
         83:31:3e:63:40:f3:75:f9:85:43:d4:00:8f:92:98:eb:d4:07:
         cc:a5:d2:dc:cc:af:fd:02:d2:87:4e:9f:0a:2b:9b:c4:f9:eb:
         ca:3a:9a:60:d1:1f:5e:ff:21:b5:8b:bd:0a:72:64:02:a1:3a:
         63:81:85:92:0b:a5:a0:33:ee:30:86:d0:ba:02:1a:ef:48:ff:
         4a:81:0e:2b:5d:41:89:2b:f0:3e:7f:5f:95:83:c5:fa:24:9b:
         9d:bf:bb:5d:9f:74:50:c5:43:12:cd:32:d6:f2:a0:02:2d:c2:
         b1:2e:7a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DWVwL5sTmZMltlcnvKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGY2ZmI2ZjVjODBjYTRhNjAzODI3Yzk2YjNiZGY2MGFk
NTYzYWEwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg5MWQwYjE0MTc0OGRmYTU0NDdhZmYzMDk0NDQxN2ExNmUzYTU4ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlHCcgGyDwoGaeqWvLVGr0b2ivlA
f6H/2+YZaGU565KIXq67YjidRltfNr85K8zDl6hAYkoIsAOLTRSS1sE3KdHFwVUy
mKtLUOIG4IjiyF9M23pQeTF1R9N5jFyTSp8OeLRsYJ9peH1OUXiUV9iMajMID4aR
n6pcrV/GPA5+87N076ql3ASU5ai7tc9tYWhDLkDESDfccHdEkrMhMTXeDgZY5PWw
WSy++PHBZ6W+95FU1di8CnVG6I9mdYVlOnqbfgvnUqr2ekXepWmWjz8VT5e9ynl0
tEACZqGV/Dw7By2ordiFOtT1pvLLn33oVV67GUWpQ7EXnR3eC8I/7c1nwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHQsUF0jfpUR6/zCURBehbjpY/NMB8GA1UdIwQY
MBaAFKMPb7b1yAykpgOCfJazvfYK1WOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgt
ODBhYjc3OWVlZDEwLzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgtODBhYjc3OWVlZDEw
LzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIS0avTw
CtzbCCszNUoNezM7JafWPXl5jp4Xs7EIIA3aoV4aRWo0c9mbGxf8U89ZYv2kY4P5
6aHuJ13q/R8VYfgDsR0n2sayOWO/8IXevP8mrubGifjmKWhS3rWXx5HR88AJPJFy
pcdE6d6PkbMEpktORHyEInKEZefMmJRS/0wiRAYoiwZrYyswePL/RHeJgzE+Y0Dz
dfmFQ9QAj5KY69QHzKXS3Myv/QLSh06fCiubxPnryjqaYNEfXv8htYu9CnJkAqE6
Y4GFkguloDPuMIbQugIa70j/SoEOK11BiSvwPn9flYPF+iSbnb+7XZ90UMVDEs0y
1vKgAi3CsS560A==
-----END CERTIFICATE-----