Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File:                     2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier:          Ja7YGyonVOvJIsMInR+b+y4KIKkhOS7/4IjQqc+GJ8M=
Subject key identifier:   72:E1:C7:E2:0C:E2:4A:6A:89:FB:48:AC:BD:8E:E1:46:2E:57:57:F4
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer:       /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial:       01962E992A5CC85EDF7D22BFF0A2209EC515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number:          0C89
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: fEpupZ30Gl1dn8wgVRP+lLokP6AYIPFv+cpxSsD5Hsk=)
                          2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:5c:c8:5e:df:7d:22:bf:f0:a2:20:9e:c5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=72e1c7e20ce24a6a89fb48acbd8ee1462e5757f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:cc:2e:1c:a0:04:6b:4b:b3:1d:9e:1b:a1:
                    69:2a:2d:44:cd:c1:94:46:fe:56:27:7e:9a:5d:cf:
                    b0:3e:70:4e:d1:f3:4c:37:0c:12:b5:fd:57:f4:82:
                    38:20:f5:26:7f:51:5d:d6:20:6b:32:26:3a:8e:a0:
                    54:87:9a:ea:e9:4e:52:95:ac:b2:11:a8:0a:d7:d4:
                    de:f2:c8:a2:0f:99:0a:17:b5:ea:9f:3f:de:93:65:
                    30:87:b0:7d:9f:53:d9:d7:1c:ab:13:6b:51:ee:98:
                    68:57:6b:8b:b1:e7:7d:14:44:5d:99:28:0a:8f:ba:
                    e0:3c:f5:23:36:4c:5b:d5:3e:d8:f1:85:37:3a:06:
                    a5:c1:69:79:bf:0e:fd:87:41:bf:80:87:03:2b:28:
                    f2:5b:b8:a5:2d:26:40:23:6b:8e:7b:12:63:9d:25:
                    56:59:fa:81:69:b6:f7:f4:90:15:c3:1e:cc:d4:88:
                    a8:53:8e:58:37:95:20:77:f7:ba:51:dd:55:c6:c3:
                    03:ad:5d:9f:0f:55:75:d4:d9:60:76:c2:78:c8:a2:
                    42:6a:17:45:64:0c:38:c1:a1:15:a7:2f:e7:d3:bb:
                    3a:94:4e:35:8b:1e:3c:0e:87:bf:18:da:df:88:13:
                    ad:0a:15:7b:86:9b:1b:13:cf:d9:ab:19:c3:7a:c7:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E1:C7:E2:0C:E2:4A:6A:89:FB:48:AC:BD:8E:E1:46:2E:57:57:F4
            X509v3 Authority Key Identifier:
                keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:bb:39:56:ae:bf:f3:c7:41:17:76:87:3e:0a:af:96:a3:
         98:da:37:69:42:ac:11:6c:a0:ac:84:c8:6d:34:88:c0:a9:8c:
         40:2d:18:2a:0d:17:6e:ec:8b:8a:29:a7:20:94:43:2d:a2:43:
         0a:c7:35:77:a9:4a:1e:a3:b2:1a:a7:d7:47:73:53:73:d0:c3:
         ce:60:d0:6c:58:d1:8b:cd:61:1e:b1:4d:b1:4e:04:ab:3f:52:
         db:2b:b1:24:68:63:ce:0b:42:b9:a3:44:60:ab:fa:8e:a8:50:
         8c:08:cd:94:d6:ee:ca:f2:06:88:a5:4f:d7:63:82:5b:63:14:
         83:f0:da:c4:ad:73:0b:b6:b0:a2:61:90:aa:10:00:d1:e8:a2:
         9d:60:bf:ed:3b:91:5d:26:18:fc:ef:77:7d:a7:f7:ba:d7:80:
         0d:ba:f8:0a:4a:f8:54:d3:a1:fc:df:b2:eb:5e:b7:0f:ae:c7:
         03:f1:0c:7b:11:f0:15:7c:01:4a:2f:c8:ac:86:44:52:c7:d7:
         b6:f5:38:4f:b5:45:f6:74:6a:8e:6d:9f:d1:b1:46:0a:9d:75:
         5f:0c:35:22:1d:63:d5:75:d9:c8:00:01:35:cd:32:1f:b9:fa:
         db:30:18:8f:27:b8:f3:23:34:61:da:96:48:16:7b:ce:df:c2:
         e0:1e:dc:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumSpcyF7ffSK/8KIgnsUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYwZmYzNjVkNGJkOTA4ZGU5MDJlZWRhMDNiMjc5YzJm
ODA5ZDMwHhcNMjUwNDEzMTAwMTUxWhcNMjUwNDE0MTAwMTUxWjAzMTEwLwYDVQQD
Eyg3MmUxYzdlMjBjZTI0YTZhODlmYjQ4YWNiZDhlZTE0NjJlNTc1N2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbzMLhygBGtLsx2eG6FpKi1EzcGU
Rv5WJ36aXc+wPnBO0fNMNwwStf1X9II4IPUmf1Fd1iBrMiY6jqBUh5rq6U5Slayy
EagK19Te8siiD5kKF7Xqnz/ek2Uwh7B9n1PZ1xyrE2tR7phoV2uLsed9FERdmSgK
j7rgPPUjNkxb1T7Y8YU3OgalwWl5vw79h0G/gIcDKyjyW7ilLSZAI2uOexJjnSVW
WfqBabb39JAVwx7M1IioU45YN5Ugd/e6Ud1VxsMDrV2fD1V11NlgdsJ4yKJCahdF
ZAw4waEVpy/n07s6lE41ix48Doe/GNrfiBOtChV7hpsbE8/ZqxnDescI3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLhx+IM4kpqiftIrL2O4UYuV1f0MB8GA1UdIwQY
MBaAFNqvD/Nl1L2QjekC7toDsnnC+AnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAt
NDA5MTc2Zjg0NmQzLzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAtNDA5MTc2Zjg0NmQz
LzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdS7OVau
v/PHQRd2hz4Kr5ajmNo3aUKsEWygrITIbTSIwKmMQC0YKg0XbuyLiimnIJRDLaJD
Csc1d6lKHqOyGqfXR3NTc9DDzmDQbFjRi81hHrFNsU4Eqz9S2yuxJGhjzgtCuaNE
YKv6jqhQjAjNlNbuyvIGiKVP12OCW2MUg/DaxK1zC7awomGQqhAA0eiinWC/7TuR
XSYY/O93faf3uteADbr4Ckr4VNOh/N+y6163D67HA/EMexHwFXwBSi/IrIZEUsfX
tvU4T7VF9nRqjm2f0bFGCp11Xww1Ih1j1XXZyAABNc0yH7n62zAYjye48yM0YdqW
SBZ7zt/C4B7cDA==
-----END CERTIFICATE-----