Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File:                     aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier:          qMwKTCuleg+nNNRtw7MsIK9KvEKiJ4J3NfvTx0Kw0c8=
Subject key identifier:   4E:C9:56:79:47:B9:0E:D6:D5:44:68:9C:DE:D1:F8:95:EB:65:71:E4
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer:       /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial:       01962E99953B4FD341C8166721788DF0DC90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number:          08E2
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: 2Iq1gJg2AYhcMzgk/yxk4zKov7Ze3Idlc1aPlwl+UJA=)
                          2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:3b:4f:d3:41:c8:16:67:21:78:8d:f0:dc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=4ec9567947b90ed6d544689cded1f895eb6571e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:6e:48:ec:0b:78:ae:ba:1f:e9:ee:7a:04:
                    63:e9:62:c3:9d:0c:e2:e2:86:b7:64:00:9d:a3:aa:
                    f7:4d:0c:c0:7d:40:55:4c:51:67:50:91:98:54:55:
                    3e:6c:b4:f9:89:20:fc:61:af:18:5c:9a:0a:73:b7:
                    78:06:9e:88:d4:2d:e3:17:c0:49:36:85:1c:50:92:
                    c1:d9:60:05:72:5b:df:f8:75:59:26:c3:6f:be:eb:
                    36:82:f3:4f:84:57:c0:24:91:73:56:bc:24:95:50:
                    31:82:d6:31:cb:b0:b2:d1:e9:ef:0e:a4:d7:48:13:
                    a8:0a:c2:5e:13:8f:dc:02:24:be:92:e5:d7:1c:40:
                    9b:5f:c1:41:c1:47:ce:db:12:27:0f:09:c6:dd:39:
                    77:c0:2a:3c:f7:a0:3d:f5:df:1f:6c:d0:92:d9:68:
                    3c:84:91:01:ad:f3:d5:6b:70:50:35:3a:ec:52:38:
                    c9:00:52:9c:a7:96:9f:25:0a:2d:fe:1c:6f:81:e1:
                    ed:ac:bd:ce:34:c7:c9:cd:83:bb:94:c6:30:d6:90:
                    56:5c:9c:ae:74:6c:7a:94:db:9f:d9:0e:bd:14:90:
                    73:cc:e5:9e:0c:3a:70:e8:2b:6c:10:2e:de:28:ad:
                    fc:e2:75:a2:5c:19:16:0b:73:91:16:cc:26:0c:3c:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:56:79:47:B9:0E:D6:D5:44:68:9C:DE:D1:F8:95:EB:65:71:E4
            X509v3 Authority Key Identifier:
                keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:2a:5e:b6:73:9b:b2:5b:06:2a:e7:2e:7c:5d:aa:0a:8b:e7:
         a0:90:ea:e9:a6:7a:6d:84:5c:3b:3f:3c:59:82:03:0f:5f:c5:
         74:8b:7f:95:64:42:c2:ed:56:b8:9e:3b:6d:99:ff:33:82:e9:
         8d:d3:33:0d:5d:77:fb:f4:63:84:a9:42:90:1c:db:95:fc:cc:
         a9:a4:77:f3:8d:e4:3c:f0:1b:6c:3b:74:44:c9:44:d3:4c:29:
         d6:33:a8:cc:77:ee:1d:dd:f0:59:77:69:79:d8:7f:59:01:b3:
         63:5a:d0:d0:59:f4:7d:31:4f:bd:2f:b1:86:8b:1f:7e:70:e5:
         83:be:cd:cb:80:10:d2:89:5c:fa:da:b3:4f:b0:de:fd:8c:73:
         8f:d4:02:3d:ce:a3:6d:ca:e0:f4:09:c3:bd:17:ea:86:a7:3c:
         c5:40:a6:5f:5a:3d:fd:4d:57:38:c1:7b:bc:37:31:2b:70:89:
         59:9c:6e:03:7b:04:14:a4:1c:bb:94:b7:c3:b5:24:59:a8:c5:
         57:45:b9:8a:e0:af:5d:ff:72:f9:b6:30:7e:2e:ec:1b:e4:5c:
         e0:b4:91:f1:14:8d:0d:88:de:62:7f:ce:74:d5:66:0b:b2:57:
         d3:2b:2b:76:30:24:c7:77:06:11:09:04:f9:9e:75:c4:5c:4c:
         e0:05:04:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZU7T9NByBZnIXiN8NyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw
MjQ5NTYwHhcNMjUwNDEzMTAwMjE5WhcNMjUwNDE0MTAwMjE5WjAzMTEwLwYDVQQD
Eyg0ZWM5NTY3OTQ3YjkwZWQ2ZDU0NDY4OWNkZWQxZjg5NWViNjU3MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoFuSOwLeK66H+nuegRj6WLDnQzi
4oa3ZACdo6r3TQzAfUBVTFFnUJGYVFU+bLT5iSD8Ya8YXJoKc7d4Bp6I1C3jF8BJ
NoUcUJLB2WAFclvf+HVZJsNvvus2gvNPhFfAJJFzVrwklVAxgtYxy7Cy0envDqTX
SBOoCsJeE4/cAiS+kuXXHECbX8FBwUfO2xInDwnG3Tl3wCo896A99d8fbNCS2Wg8
hJEBrfPVa3BQNTrsUjjJAFKcp5afJQot/hxvgeHtrL3ONMfJzYO7lMYw1pBWXJyu
dGx6lNuf2Q69FJBzzOWeDDpw6CtsEC7eKK384nWiXBkWC3ORFswmDDy8KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7JVnlHuQ7W1URonN7R+JXrZXHkMB8GA1UdIwQY
MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt
MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0
LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvSpetnOb
slsGKucufF2qCovnoJDq6aZ6bYRcOz88WYIDD1/FdIt/lWRCwu1WuJ47bZn/M4Lp
jdMzDV13+/RjhKlCkBzblfzMqaR3843kPPAbbDt0RMlE00wp1jOozHfuHd3wWXdp
edh/WQGzY1rQ0Fn0fTFPvS+xhosffnDlg77Ny4AQ0olc+tqzT7De/Yxzj9QCPc6j
bcrg9AnDvRfqhqc8xUCmX1o9/U1XOMF7vDcxK3CJWZxuA3sEFKQcu5S3w7UkWajF
V0W5iuCvXf9y+bYwfi7sG+Rc4LSR8RSNDYjeYn/OdNVmC7JX0ysrdjAkx3cGEQkE
+Z51xFxM4AUEcg==
-----END CERTIFICATE-----