Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File:                     81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier:          edRi0e0PBtcnGRi+OjoTug9TA8BoWP6xYj5fXAbwIW8=
Subject key identifier:   F3:EA:27:BF:09:68:75:D4:8C:1F:36:91:25:15:A5:CE:66:D7:68:1E
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer:       /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial:       01962E98BF59F2E7500EC7FAFCD8A5AC5501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number:          0B8D
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: FoNmHGiQnX3vs71EOvciGTjPd1ZhoagqTjl2Bs0T8RU=)
                          2: FFFquzyoI6V8zUirU5qgTnYffFE.roa (hash: UkzzNUPit9F8YYAkgHSPwBmxXN79Y3LDHaSScH7xgPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bf:59:f2:e7:50:0e:c7:fa:fc:d8:a5:ac:55:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=f3ea27bf096875d48c1f36912515a5ce66d7681e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:ad:ec:4c:0a:7b:06:7c:e1:73:3b:2d:75:
                    57:68:4b:0f:d9:42:58:91:8d:eb:16:1c:90:27:d9:
                    42:ec:0a:2b:84:e7:92:3c:df:aa:f1:3a:3a:a9:ce:
                    d7:8d:f2:b7:94:b8:21:32:9a:03:1b:1e:87:ff:09:
                    73:64:b9:ae:45:11:2a:46:93:64:82:a3:72:59:15:
                    10:ec:d9:bf:65:7d:51:07:1c:71:5a:75:60:b3:a7:
                    5b:64:26:b1:38:43:0e:ab:50:aa:da:cf:54:bb:5a:
                    43:70:c0:c0:3e:21:e4:91:c3:5b:19:7d:b5:62:39:
                    95:ad:1f:fd:e6:b8:bf:33:0a:78:f4:7f:4b:95:d6:
                    3a:a3:96:6a:b7:79:86:74:d9:e8:44:4d:0d:f5:10:
                    ab:08:ea:c4:f6:47:72:ab:02:68:de:14:97:12:cd:
                    0c:80:a6:0f:17:57:97:00:ea:30:d5:62:12:66:34:
                    fd:f4:76:60:7a:50:25:13:eb:a0:42:ff:a2:97:57:
                    b0:d5:3c:e3:23:2c:23:a1:17:72:73:2c:c5:da:6c:
                    ad:f0:eb:05:90:af:43:58:ed:75:96:66:9e:5e:0b:
                    69:3f:a3:17:09:4d:8e:ff:05:67:20:d7:ab:56:29:
                    62:bc:75:e7:1c:21:43:08:17:6c:eb:41:a2:25:26:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:27:BF:09:68:75:D4:8C:1F:36:91:25:15:A5:CE:66:D7:68:1E
            X509v3 Authority Key Identifier:
                keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:5b:fb:b5:7a:6b:51:c6:d7:54:c6:61:eb:0e:4a:c8:3c:
         9e:5f:62:cf:9f:60:dc:52:4c:bf:43:e0:45:7b:92:b3:20:fb:
         74:c1:c2:df:8b:88:4d:4d:73:ae:cd:89:cf:60:ef:51:f4:5a:
         fa:1e:69:f1:11:a6:d2:5e:19:e9:a8:af:be:4e:ad:e4:a0:43:
         6d:36:39:49:99:71:63:97:89:39:5d:88:06:2f:81:42:9e:e0:
         2b:7f:51:8d:aa:82:a8:ac:fb:db:14:17:aa:ef:36:7d:fc:bf:
         58:c8:03:5d:f7:82:ac:d3:8e:cf:c2:64:c9:72:d3:7f:88:c7:
         ba:db:58:3a:18:e4:af:a9:b0:f2:6d:fb:28:27:6f:54:7d:6b:
         8b:26:c5:b9:39:4a:42:4c:9f:e6:0f:46:bf:53:1b:13:a2:a3:
         5d:c9:6d:c9:52:4a:7d:cd:2f:91:ea:c6:ed:8a:5c:61:80:6a:
         a9:d1:f1:d7:b3:29:1b:94:d6:60:f6:71:c5:fe:2e:3f:f0:05:
         5c:f9:58:12:4e:a4:8f:22:e9:08:18:01:b5:f2:e7:ed:a9:b9:
         e9:00:83:cb:e6:e0:f5:8d:dc:8f:65:1b:be:9b:a6:21:11:11:
         aa:8d:03:c0:bc:d5:ec:2c:77:ea:ae:bb:42:2d:09:72:18:87:
         7d:99:4c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumL9Z8udQDsf6/NilrFUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTZjZGQ1YTQ5Y2U2YzQyYTlhMzVmYTc3Yjk3Mjc4MTk2
ODg4OTYwHhcNMjUwNDEzMTAwMTI0WhcNMjUwNDE0MTAwMTI0WjAzMTEwLwYDVQQD
EyhmM2VhMjdiZjA5Njg3NWQ0OGMxZjM2OTEyNTE1YTVjZTY2ZDc2ODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWt7EwKewZ84XM7LXVXaEsP2UJY
kY3rFhyQJ9lC7AorhOeSPN+q8To6qc7XjfK3lLghMpoDGx6H/wlzZLmuRREqRpNk
gqNyWRUQ7Nm/ZX1RBxxxWnVgs6dbZCaxOEMOq1Cq2s9Uu1pDcMDAPiHkkcNbGX21
YjmVrR/95ri/Mwp49H9LldY6o5Zqt3mGdNnoRE0N9RCrCOrE9kdyqwJo3hSXEs0M
gKYPF1eXAOow1WISZjT99HZgelAlE+ugQv+il1ew1TzjIywjoRdycyzF2myt8OsF
kK9DWO11lmaeXgtpP6MXCU2O/wVnINerVilivHXnHCFDCBds60GiJSYrLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPqJ78JaHXUjB82kSUVpc5m12geMB8GA1UdIwQY
MBaAFPNWzdWknObEKpo1+ne5cngZaIiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMt
NTc2OGQzN2Y3YmI1LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMtNTc2OGQzN2Y3YmI1
LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNFb+7V6
a1HG11TGYesOSsg8nl9iz59g3FJMv0PgRXuSsyD7dMHC34uITU1zrs2Jz2DvUfRa
+h5p8RGm0l4Z6aivvk6t5KBDbTY5SZlxY5eJOV2IBi+BQp7gK39RjaqCqKz72xQX
qu82ffy/WMgDXfeCrNOOz8JkyXLTf4jHuttYOhjkr6mw8m37KCdvVH1riybFuTlK
Qkyf5g9Gv1MbE6KjXcltyVJKfc0vkerG7YpcYYBqqdHx17MpG5TWYPZxxf4uP/AF
XPlYEk6kjyLpCBgBtfLn7am56QCDy+bg9Y3cj2UbvpumIRERqo0DwLzV7Cx36q67
Qi0JchiHfZlMow==
-----END CERTIFICATE-----