Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File:                     rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier:          u4eFLPcYnyXXhtCigq+44vMB1LQTMxhiQPT6DDJGddk=
Subject key identifier:   C7:0C:F0:36:4F:4D:76:7A:3F:75:44:5B:2B:15:38:79:FA:0C:BA:56
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer:       /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial:       01962ECFD05F98C9B51C84F957CFCFD0B282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number:          0925
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
                          2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: O7n8vl/Taz84VUHdCPb2UIPy3/hQYRPGC5by5zcJqjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d0:5f:98:c9:b5:1c:84:f9:57:cf:cf:d0:b2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=c70cf0364f4d767a3f75445b2b153879fa0cba56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:d7:17:32:0e:5a:51:3b:48:1a:78:4d:95:
                    37:11:93:27:9f:4e:96:1f:02:7b:b5:7e:01:82:d9:
                    66:3f:89:6f:35:fc:31:e2:d0:9d:7e:59:fe:e5:0c:
                    da:d7:ab:25:a5:89:17:96:e3:57:fc:b9:3a:7d:04:
                    29:ac:68:77:d5:a2:9e:c8:71:5a:3f:f6:4c:0c:9f:
                    48:46:e5:f9:32:d7:2e:35:22:9e:9e:70:27:57:68:
                    19:4d:fa:db:d8:a3:00:f4:30:be:df:55:8d:42:67:
                    25:7c:51:09:3f:46:24:7e:08:a3:d8:da:cd:c5:6b:
                    3f:f4:93:03:32:f6:4d:8e:f7:8f:94:95:05:88:d6:
                    82:64:b2:07:68:2d:6c:6d:22:a7:a1:8e:ec:1e:cc:
                    a0:e6:e5:66:b5:a6:0a:ba:92:6c:b1:20:9c:85:8b:
                    12:15:fc:b3:2a:ce:db:6e:4e:cf:90:62:de:66:de:
                    e3:2a:6e:7d:19:87:24:41:26:5e:8c:85:42:47:9a:
                    8e:0e:f0:39:9c:30:6d:d9:c4:dd:8e:4f:4f:8b:3b:
                    48:be:bc:a7:d8:d9:41:1e:64:4e:12:3a:f2:c5:ae:
                    3d:67:49:b3:15:15:32:3a:3c:56:ff:75:30:f8:05:
                    1e:e1:35:41:0b:47:aa:ec:a6:c5:f0:3c:e6:77:e1:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0C:F0:36:4F:4D:76:7A:3F:75:44:5B:2B:15:38:79:FA:0C:BA:56
            X509v3 Authority Key Identifier:
                keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:02:0d:12:49:33:18:4f:c3:ed:65:c3:da:94:fc:af:19:
         70:10:2b:a5:4b:bf:1c:3f:5d:01:3a:88:f3:ca:b7:70:aa:97:
         90:8d:b6:34:22:17:52:58:2d:77:dc:53:e8:f6:f5:24:9d:1d:
         6e:65:3f:fa:b7:6c:e9:55:c8:97:8f:b0:16:2f:73:6e:cd:a2:
         09:c9:d3:2c:06:69:19:41:06:42:ad:1b:ca:b7:65:34:e2:b7:
         63:cc:b5:24:94:16:6b:b7:d7:5d:58:56:0a:24:95:5e:7f:e6:
         09:c6:d9:9b:f3:40:70:a1:5e:cb:0b:73:ed:9c:92:e7:cd:d9:
         96:68:14:8d:ed:72:5f:ac:fc:28:47:16:eb:29:d1:85:7c:72:
         57:df:ad:a2:83:e1:7d:f4:45:d8:5b:a2:f6:6c:a9:c0:57:c4:
         f2:23:03:eb:6a:eb:8e:72:0c:52:a3:cc:e1:2c:a8:e3:9b:ea:
         6d:1e:59:cb:2f:a7:61:ac:97:92:49:84:30:ea:52:dd:cc:f5:
         8a:b0:ac:41:13:12:14:ba:ef:99:0a:b6:b5:7b:c4:9f:f0:7b:
         b8:ac:b2:9b:42:96:d9:01:0e:6a:64:93:1a:66:d0:ae:d6:3f:
         8f:0c:5f:92:09:e5:d3:90:f0:b0:6d:e0:2f:1f:f5:da:72:fb:
         71:c1:8b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9BfmMm1HIT5V8/P0LKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTg3ZmExZjM2M2VkOGQ4MTc4MjgyYzY3NDgwODFkY2Mz
NDI4MDMwHhcNMjUwNDEzMTEwMTMzWhcNMjUwNDE0MTEwMTMzWjAzMTEwLwYDVQQD
EyhjNzBjZjAzNjRmNGQ3NjdhM2Y3NTQ0NWIyYjE1Mzg3OWZhMGNiYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUrXFzIOWlE7SBp4TZU3EZMnn06W
HwJ7tX4BgtlmP4lvNfwx4tCdfln+5Qza16slpYkXluNX/Lk6fQQprGh31aKeyHFa
P/ZMDJ9IRuX5MtcuNSKennAnV2gZTfrb2KMA9DC+31WNQmclfFEJP0Ykfgij2NrN
xWs/9JMDMvZNjvePlJUFiNaCZLIHaC1sbSKnoY7sHsyg5uVmtaYKupJssSCchYsS
FfyzKs7bbk7PkGLeZt7jKm59GYckQSZejIVCR5qODvA5nDBt2cTdjk9PiztIvryn
2NlBHmROEjryxa49Z0mzFRUyOjxW/3Uw+AUe4TVBC0eq7KbF8Dzmd+F9VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcM8DZPTXZ6P3VEWysVOHn6DLpWMB8GA1UdIwQY
MBaAFKyYf6HzY+2NgXgoLGdICB3MNCgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDgwNTMtMzgxMi00NDk3LTk3Nzct
OWNlNzk4ZDAxZjhkLzEvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yZDgwNTMtMzgxMi00NDk3LTk3NzctOWNlNzk4ZDAxZjhk
LzEvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6YCDRJJ
MxhPw+1lw9qU/K8ZcBArpUu/HD9dATqI88q3cKqXkI22NCIXUlgtd9xT6Pb1JJ0d
bmU/+rds6VXIl4+wFi9zbs2iCcnTLAZpGUEGQq0byrdlNOK3Y8y1JJQWa7fXXVhW
CiSVXn/mCcbZm/NAcKFeywtz7ZyS583ZlmgUje1yX6z8KEcW6ynRhXxyV9+tooPh
ffRF2Fui9mypwFfE8iMD62rrjnIMUqPM4Syo45vqbR5Zyy+nYayXkkmEMOpS3cz1
irCsQRMSFLrvmQq2tXvEn/B7uKyym0KW2QEOamSTGmbQrtY/jwxfkgnl05DwsG3g
Lx/12nL7ccGLug==
-----END CERTIFICATE-----