Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File:                     FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier:          gElzpBf5Yqmpx1VlWc7WCOUZ/BzFyw4N85bSZxbdHDo=
Subject key identifier:   59:F1:CA:00:6B:14:39:DF:86:C2:95:66:A0:A7:17:23:50:E9:71:1C
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer:       /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial:       01962FAB5810F844442D6AC606FAF5A8BFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number:          13FB
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: xOl80wi5zETkvZ253KT2CYoIzCbjxYzSGj3ZtC98arc=)
                          2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:10:f8:44:44:2d:6a:c6:06:fa:f5:a8:bf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=59f1ca006b1439df86c29566a0a7172350e9711c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:6e:92:21:79:94:ca:de:16:94:4b:12:c4:
                    92:a0:87:33:08:86:30:b3:af:17:23:d5:c6:31:4a:
                    09:0b:5e:5c:7e:cb:b5:8b:e3:1e:8d:9c:91:fd:65:
                    64:5a:2c:27:96:49:ca:bc:67:20:12:f5:3c:3c:57:
                    ba:c8:02:87:d1:82:a4:3a:14:0a:93:b9:97:a5:6d:
                    18:46:5f:38:38:27:a4:7d:07:9f:2e:35:8c:11:2c:
                    2a:33:70:c3:e4:46:97:41:24:9c:a0:25:ff:c0:93:
                    2e:94:19:a8:df:3d:70:6d:ec:59:f8:01:35:5b:10:
                    58:e7:20:f3:3b:8d:fa:09:73:9d:e4:f2:74:05:8b:
                    6f:72:58:22:9f:0e:d7:bc:07:9f:32:b0:7e:f0:89:
                    91:e2:52:ce:fe:cc:72:3c:10:3e:ac:15:c0:a3:e3:
                    e3:b3:7d:8a:6e:7c:ba:5f:69:ce:2f:05:aa:26:bf:
                    8e:29:69:00:0b:1d:ce:45:bb:f6:50:9f:09:11:b9:
                    92:a2:9d:5b:2f:1c:89:fb:1d:30:d9:dc:8d:e8:21:
                    e2:3d:36:e1:a5:2b:7b:92:9b:76:a4:10:99:ee:2b:
                    69:2d:11:93:eb:1d:90:91:13:0d:84:0f:ba:05:83:
                    ee:2c:6f:b3:00:ed:92:66:b0:88:0e:a8:a0:c3:b7:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F1:CA:00:6B:14:39:DF:86:C2:95:66:A0:A7:17:23:50:E9:71:1C
            X509v3 Authority Key Identifier:
                keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:4f:92:df:e5:5f:81:67:29:57:2e:f2:4f:fb:f9:da:55:
         8f:8b:54:83:a7:84:4f:2e:26:71:ae:47:59:29:20:d7:49:65:
         16:8d:a9:fb:af:b0:ad:29:0a:cc:fa:02:ff:25:65:47:31:62:
         ee:f6:d7:10:c5:86:0b:0f:4c:f7:0d:10:f1:bf:36:7e:ca:ac:
         12:c5:68:b7:08:ac:e1:13:52:b1:73:6f:ca:9c:8b:11:49:ad:
         ed:bf:89:20:e8:be:cc:2d:d4:e8:0d:f8:68:1b:ed:75:6c:fe:
         ce:d3:a0:b9:31:ea:c4:fc:99:16:73:10:f8:a6:32:29:21:66:
         db:10:5e:3f:ea:44:9a:6f:fa:89:40:dc:81:70:d2:7b:58:bb:
         b4:69:1d:ac:2a:06:1d:43:45:f5:de:24:95:5e:d6:32:26:c4:
         64:ce:80:f7:5c:0b:54:a5:5d:9f:1c:d1:c5:1b:d1:48:79:e5:
         9f:c9:64:2e:44:2f:db:ce:e4:8e:87:36:dd:e4:08:06:60:4f:
         ea:66:bd:a5:1c:2f:63:ff:f5:a1:49:af:52:61:2f:49:fb:4c:
         92:a6:88:66:38:c7:fc:2f:56:b0:fc:e3:df:84:3b:f2:db:a4:
         f3:e5:24:02:e4:fd:6f:7b:71:55:17:6e:19:15:e2:6a:6b:46:
         b5:2e:7c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1gQ+ERELWrGBvr1qL/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzFmMTU3YzNhNWJkNWNmZjVkMWE0N2Q0MTk2NDhhMjdl
MzVhOWIwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
Eyg1OWYxY2EwMDZiMTQzOWRmODZjMjk1NjZhMGE3MTcyMzUwZTk3MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT5ukiF5lMreFpRLEsSSoIczCIYw
s68XI9XGMUoJC15cfsu1i+MejZyR/WVkWiwnlknKvGcgEvU8PFe6yAKH0YKkOhQK
k7mXpW0YRl84OCekfQefLjWMESwqM3DD5EaXQSScoCX/wJMulBmo3z1wbexZ+AE1
WxBY5yDzO436CXOd5PJ0BYtvclginw7XvAefMrB+8ImR4lLO/sxyPBA+rBXAo+Pj
s32Kbny6X2nOLwWqJr+OKWkACx3ORbv2UJ8JEbmSop1bLxyJ+x0w2dyN6CHiPTbh
pSt7kpt2pBCZ7itpLRGT6x2QkRMNhA+6BYPuLG+zAO2SZrCIDqigw7cFSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnxygBrFDnfhsKVZqCnFyNQ6XEcMB8GA1UdIwQY
MBaAFBVx8VfDpb1c/10aR9QZZIon41qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDIt
MDJkZGNkNmJkYTkyLzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDItMDJkZGNkNmJkYTky
LzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwVPkt/l
X4FnKVcu8k/7+dpVj4tUg6eETy4mca5HWSkg10llFo2p+6+wrSkKzPoC/yVlRzFi
7vbXEMWGCw9M9w0Q8b82fsqsEsVotwis4RNSsXNvypyLEUmt7b+JIOi+zC3U6A34
aBvtdWz+ztOguTHqxPyZFnMQ+KYyKSFm2xBeP+pEmm/6iUDcgXDSe1i7tGkdrCoG
HUNF9d4klV7WMibEZM6A91wLVKVdnxzRxRvRSHnln8lkLkQv287kjoc23eQIBmBP
6ma9pRwvY//1oUmvUmEvSftMkqaIZjjH/C9WsPzj34Q78tuk8+UkAuT9b3txVRdu
GRXiamtGtS58yA==
-----END CERTIFICATE-----