Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File:                     K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier:          VG+tRhj8QQ4y6VnBwDUGSqoABH5ItD8s0aiclPTYzk0=
Subject key identifier:   48:68:62:9D:A3:FB:7C:3A:F3:08:41:0B:DB:24:14:DE:75:15:5E:83
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer:       /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial:       01962F065569F7BB4E4A2D8AB9B33B5F0639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number:          0C4B
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=)
                          2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: OUMM2jJ8nKSE/jV/kre3+wwzgt3/U6Up7bgH8uTk1zk=)
                          3: iBl8t3z-BUajHzSAeaP-AzTEflQ.roa (hash: +f1NthgpfDbumeIw5C75bNKybF0uHgK0qHdvaGhDtxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:69:f7:bb:4e:4a:2d:8a:b9:b3:3b:5f:06:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=4868629da3fb7c3af308410bdb2414de75155e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:af:02:f3:b8:69:8c:f7:d7:0f:2f:7d:d6:
                    f0:26:ea:e8:93:4e:cb:8c:96:2a:28:83:c8:55:b3:
                    7d:c0:81:05:9f:15:17:da:c7:84:2c:86:e1:ca:49:
                    15:40:93:cc:39:e9:b0:88:5e:68:72:3a:34:54:b2:
                    aa:51:c4:70:d4:5d:32:d8:b3:0b:fd:6d:3f:0a:00:
                    48:90:e7:b7:10:25:7a:cb:5c:0a:23:40:32:90:91:
                    17:b5:68:a0:c0:27:e4:59:ec:74:bd:92:f5:05:22:
                    4c:8d:02:91:7b:6e:3a:6c:1a:37:65:20:37:b1:f8:
                    8e:3d:02:db:db:06:db:65:7f:62:d5:71:f7:ff:10:
                    ab:79:9f:19:0a:23:cc:a0:6c:99:d1:55:67:b5:95:
                    23:3e:18:91:b7:fa:e7:34:48:8e:3a:eb:64:2c:41:
                    7a:df:3e:b2:96:82:4b:c7:af:bb:db:a7:b7:df:4d:
                    5b:ba:df:b0:9d:0c:18:89:2a:4b:69:0f:0c:bc:10:
                    d7:8b:37:6d:8a:d2:46:bb:b6:9b:3c:0d:ca:4c:c1:
                    9a:27:2d:64:ea:93:25:b5:0e:30:9a:67:f4:b4:f6:
                    d6:66:d4:79:07:65:73:86:5e:25:3d:8c:fc:fb:f0:
                    75:24:85:c6:ba:91:d6:82:e0:0a:41:30:a1:76:0b:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:62:9D:A3:FB:7C:3A:F3:08:41:0B:DB:24:14:DE:75:15:5E:83
            X509v3 Authority Key Identifier:
                keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:d5:7a:c7:35:c6:01:c2:be:99:0e:ad:2a:5b:67:77:17:
         b3:c8:cc:bd:69:96:ec:94:f6:7b:38:2f:be:28:14:6d:24:be:
         4f:06:ab:64:22:72:ee:ce:0e:59:20:24:63:31:53:86:97:39:
         95:d7:f5:0b:8a:3f:ae:35:01:38:32:b8:1c:f5:e0:ae:64:ac:
         2e:4d:ad:6a:c6:5c:54:09:6d:66:c5:dd:66:54:48:71:24:ab:
         cf:38:b0:47:a9:18:72:26:a8:a4:92:f6:f7:4b:e0:c6:a3:82:
         5c:22:c4:fc:9a:63:31:87:86:4f:e9:07:86:df:22:9f:61:8f:
         b5:a2:77:0c:4c:97:38:43:da:bb:4d:94:ae:dd:63:42:cc:13:
         23:63:37:c4:7d:44:e0:b2:9b:63:7b:c2:37:88:d9:f9:7f:e5:
         a5:cd:91:5f:0e:90:49:44:53:97:e6:e6:fd:e1:63:55:7d:95:
         a2:ff:a6:b2:cb:22:01:40:45:c1:a4:90:63:87:f3:53:71:e7:
         58:30:87:ef:1b:a6:b0:da:c6:22:c5:75:90:38:d0:a5:da:34:
         31:d8:c9:dd:dc:0e:b6:26:79:01:8d:0e:10:a0:af:ae:44:8a:
         02:d8:bd:55:88:2e:f4:05:30:cd:38:c2:3a:20:f4:64:f1:09:
         6c:34:e2:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlVp97tOSi2KubM7XwY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiN2FiNjU2OWRlNzhkM2M0YTA4MmZkZTZkZDFkNmEzZjBk
NTA5YzIwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
Eyg0ODY4NjI5ZGEzZmI3YzNhZjMwODQxMGJkYjI0MTRkZTc1MTU1ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJyvAvO4aYz31w8vfdbwJurok07L
jJYqKIPIVbN9wIEFnxUX2seELIbhykkVQJPMOemwiF5ocjo0VLKqUcRw1F0y2LML
/W0/CgBIkOe3ECV6y1wKI0AykJEXtWigwCfkWex0vZL1BSJMjQKRe246bBo3ZSA3
sfiOPQLb2wbbZX9i1XH3/xCreZ8ZCiPMoGyZ0VVntZUjPhiRt/rnNEiOOutkLEF6
3z6yloJLx6+726e3301but+wnQwYiSpLaQ8MvBDXizdtitJGu7abPA3KTMGaJy1k
6pMltQ4wmmf0tPbWZtR5B2Vzhl4lPYz8+/B1JIXGupHWguAKQTChdgs+VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhoYp2j+3w68whBC9skFN51FV6DMB8GA1UdIwQY
MBaAFCt6tlad5408Sggv3m3R1qPw1QnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0Yzgt
M2ZjOTY1OTRiNGM1LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0YzgtM2ZjOTY1OTRiNGM1
LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYzVesc1
xgHCvpkOrSpbZ3cXs8jMvWmW7JT2ezgvvigUbSS+TwarZCJy7s4OWSAkYzFThpc5
ldf1C4o/rjUBODK4HPXgrmSsLk2tasZcVAltZsXdZlRIcSSrzziwR6kYciaopJL2
90vgxqOCXCLE/JpjMYeGT+kHht8in2GPtaJ3DEyXOEPau02Urt1jQswTI2M3xH1E
4LKbY3vCN4jZ+X/lpc2RXw6QSURTl+bm/eFjVX2Vov+msssiAUBFwaSQY4fzU3Hn
WDCH7xumsNrGIsV1kDjQpdo0MdjJ3dwOtiZ5AY0OEKCvrkSKAti9VYgu9AUwzTjC
OiD0ZPEJbDTikw==
-----END CERTIFICATE-----