Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File:                     _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier:          Bryp2Q2A+EKibTrGtXI+oxQVR54qAmJz+o5bXvtNGH8=
Subject key identifier:   2B:2F:9D:B7:04:F0:2A:B3:3F:B6:E6:D3:B2:8C:D8:69:77:E0:75:58
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer:       /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial:       01962F74685C96E17D03876E8E2064DE715C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number:          0B1E
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
                          2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: ErjOfqg++NNj2oRfJ3oURYLA6D3qzDB+sTy7pfcpuUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:5c:96:e1:7d:03:87:6e:8e:20:64:de:71:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=2b2f9db704f02ab33fb6e6d3b28cd86977e07558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:bd:77:c4:60:04:cc:cc:9b:ad:93:86:66:
                    25:d2:40:8c:3e:0b:61:18:cf:cb:98:fd:90:5e:ad:
                    e9:56:5f:53:90:3e:67:e7:d4:bf:43:d7:31:69:da:
                    07:bd:3b:60:73:23:b2:52:b1:9b:4f:23:9d:b9:23:
                    63:ff:d9:dd:70:8b:b3:aa:fd:aa:d3:07:99:0a:b4:
                    13:0d:5c:ea:54:cf:4a:9f:1f:21:ea:98:72:6f:ae:
                    c1:49:1d:ed:05:be:9b:d7:c9:d7:6b:62:e2:c9:11:
                    85:84:ef:f5:0a:45:8d:9a:48:56:61:50:8b:ed:3c:
                    e6:2f:e4:bb:93:41:ce:21:a5:e9:f7:f8:3f:a5:76:
                    fe:32:0a:05:47:a6:7e:18:b1:34:b2:86:05:32:c4:
                    11:ab:47:73:71:89:f2:d6:2c:c3:21:da:9e:75:84:
                    33:ff:c8:34:70:c9:01:25:cd:05:ca:68:58:14:36:
                    0e:8e:14:a1:f0:a6:ec:85:41:6d:1a:d4:04:e2:ca:
                    08:df:f2:96:7c:ca:e6:0c:5d:71:90:f1:ef:17:c8:
                    aa:ed:79:59:fd:47:09:bb:2f:04:41:b5:68:6d:54:
                    3c:e6:df:82:89:27:1d:20:7c:21:c5:f8:68:0b:50:
                    99:6b:07:44:bb:6d:55:8e:ee:4b:0b:16:e6:17:50:
                    9a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2F:9D:B7:04:F0:2A:B3:3F:B6:E6:D3:B2:8C:D8:69:77:E0:75:58
            X509v3 Authority Key Identifier:
                keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bd:c2:7a:d5:7e:3d:77:83:3a:6f:6c:e8:22:b2:f4:11:95:
         fc:03:9b:f3:aa:23:5e:7c:fa:4e:a8:53:af:a5:39:df:2e:56:
         fd:4c:ee:c1:8f:84:a6:de:3e:ac:3d:15:ed:b1:d7:32:29:0c:
         b7:5b:2a:2b:10:3a:fc:46:b7:75:33:d2:a5:44:18:6a:04:cd:
         84:e7:4a:67:fa:8a:c9:6b:3c:f3:4d:3b:04:85:da:23:fe:80:
         f3:59:a9:27:0b:d0:ed:d2:59:6f:be:c0:fd:b8:0a:ca:c0:23:
         5e:d2:ca:47:4c:d5:4a:d2:bd:fa:7c:4f:b7:43:93:88:87:32:
         2d:dc:4d:4b:47:45:74:03:ef:3a:84:2b:14:54:da:84:32:a6:
         6e:26:b3:42:9b:ca:35:43:2d:ad:bf:36:a6:c6:45:6c:7f:b7:
         8f:67:97:f7:e4:65:12:fd:1d:37:39:81:27:ca:63:86:e2:e5:
         c3:23:2e:20:5e:48:57:ae:de:1e:46:e5:39:50:83:1f:37:03:
         e4:ca:ce:29:23:16:f7:95:2a:87:84:75:94:27:65:7d:c1:82:
         74:6c:96:43:e0:72:c3:08:07:99:8e:3d:4e:86:1e:62:5c:77:
         44:4d:e0:b8:69:a2:5f:1f:e5:86:fa:62:f6:6a:b9:ba:e1:63:
         36:14:ae:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGhcluF9A4dujiBk3nFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMmUyMmNjMTU4NTllZDRhMDc4NGJmZDA4NTg0YjNjOGZi
MjlmOWEwHhcNMjUwNDEzMTQwMTIwWhcNMjUwNDE0MTQwMTIwWjAzMTEwLwYDVQQD
EygyYjJmOWRiNzA0ZjAyYWIzM2ZiNmU2ZDNiMjhjZDg2OTc3ZTA3NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqS9d8RgBMzMm62ThmYl0kCMPgth
GM/LmP2QXq3pVl9TkD5n59S/Q9cxadoHvTtgcyOyUrGbTyOduSNj/9ndcIuzqv2q
0weZCrQTDVzqVM9Knx8h6phyb67BSR3tBb6b18nXa2LiyRGFhO/1CkWNmkhWYVCL
7TzmL+S7k0HOIaXp9/g/pXb+MgoFR6Z+GLE0soYFMsQRq0dzcYny1izDIdqedYQz
/8g0cMkBJc0FymhYFDYOjhSh8KbshUFtGtQE4soI3/KWfMrmDF1xkPHvF8iq7XlZ
/UcJuy8EQbVobVQ85t+CiScdIHwhxfhoC1CZawdEu21Vju5LCxbmF1CapQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsvnbcE8CqzP7bm07KM2Gl34HVYMB8GA1UdIwQY
MBaAFP4uIswVhZ7UoHhL/QhYSzyPsp+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQt
ODA2MGM1MDNkODZlLzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZjljMTAtYzg1Yy00YmJmLWEyNWQtODA2MGM1MDNkODZl
LzEvX2k0aXpCV0ZudFNnZUV2OUNGaExQSS15bjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmb3CetV+
PXeDOm9s6CKy9BGV/AOb86ojXnz6TqhTr6U53y5W/UzuwY+Ept4+rD0V7bHXMikM
t1sqKxA6/Ea3dTPSpUQYagTNhOdKZ/qKyWs88007BIXaI/6A81mpJwvQ7dJZb77A
/bgKysAjXtLKR0zVStK9+nxPt0OTiIcyLdxNS0dFdAPvOoQrFFTahDKmbiazQpvK
NUMtrb82psZFbH+3j2eX9+RlEv0dNzmBJ8pjhuLlwyMuIF5IV67eHkblOVCDHzcD
5MrOKSMW95Uqh4R1lCdlfcGCdGyWQ+BywwgHmY49ToYeYlx3RE3guGmiXx/lhvpi
9mq5uuFjNhSu3Q==
-----END CERTIFICATE-----