Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          vq+PvXAj8iGPVwSavj55h3wLIE77xZhCiG2fqtYeKes=
Subject key identifier:   42:15:5E:94:ED:B9:5A:47:BA:62:62:E3:5F:E3:82:1B:2D:1D:79:B4
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       01962E2B3B9B339EE60847EEA4FA6609AAC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: BUuoPdUgpRssN_8s1xD5RE2knSk.roa (hash: i3w2fhY/oY9rEDtPXwfXHRtgj9nEgJpg1E4G0VvBSNE=)
                          2: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: y4Vv0lgKkZT0zif1h641/i1xtryLoBDu2NPKGFEb6AQ=)
                          3: hI-d9_-nLNRhqznA_vGtUzzzpi4.roa (hash: 1ticuQGef+AQNaEeVWAc8kEXscPJuukVCdQXQ58jy44=)
                          4: yp6VXJ9ttEuEqrWfh1dI64LQkQ8.roa (hash: Mr06/vk6uaXb+ILhJfXZxgC4nSBWLm8yARcjAKzBYPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3b:9b:33:9e:e6:08:47:ee:a4:fa:66:09:aa:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=42155e94edb95a47ba6262e35fe3821b2d1d79b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:d2:6d:1f:66:d8:14:e3:35:1f:0c:05:39:
                    3b:51:f9:ee:a7:a8:cd:79:9c:0b:ab:80:e8:02:6c:
                    bc:30:b7:fd:28:dd:b5:c4:84:84:95:32:34:94:6c:
                    87:3d:b7:fc:32:cb:46:24:32:04:44:2d:de:0e:8c:
                    5f:12:dd:3c:21:00:51:63:e1:ef:d6:a5:01:a8:aa:
                    d3:3d:c8:41:e3:87:3f:06:d3:df:5d:10:b4:8a:2f:
                    44:dd:83:9d:d4:28:a4:af:43:e8:f0:c9:49:39:56:
                    32:4f:92:f2:3b:e2:f6:4d:ee:94:fa:7c:62:e0:8a:
                    d2:18:83:ca:61:b5:e3:74:ea:ae:3c:7d:80:27:4c:
                    44:27:fc:9d:3e:26:6c:a1:a0:a4:7c:34:7d:62:ce:
                    14:52:9a:c5:fe:79:ce:e1:19:8c:48:5f:22:5e:f8:
                    ec:06:a2:17:19:58:4b:66:8b:ff:ca:d1:65:81:84:
                    81:ff:fe:18:c4:e2:22:51:8a:d1:12:5a:c1:19:4c:
                    68:9e:6a:64:e1:fc:18:d1:4f:0d:93:d6:1f:3c:ec:
                    cc:5c:77:90:96:7d:71:b6:19:f5:e1:38:aa:ad:67:
                    88:3c:3a:48:6c:a4:ee:45:b5:54:48:07:cf:34:dd:
                    cd:b5:63:dc:20:aa:67:be:63:cd:ff:2d:2c:10:d9:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:5E:94:ED:B9:5A:47:BA:62:62:E3:5F:E3:82:1B:2D:1D:79:B4
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:49:c0:31:9b:17:bd:66:65:4c:32:39:e8:73:5a:6a:e6:
         f7:68:bc:b5:5b:cd:e9:3b:2d:ca:6b:71:f7:4c:78:25:40:fd:
         1c:31:90:4e:e5:1d:6d:f5:51:d8:46:3e:32:0a:b7:37:a2:8e:
         69:68:e7:97:49:e9:a1:51:c4:52:58:30:ae:77:5c:5b:c9:b6:
         7b:87:b3:35:32:9c:09:87:2d:c9:e9:81:dc:73:ef:df:68:0d:
         f7:8f:da:61:b3:a7:17:68:57:db:ba:fc:d9:a1:78:79:10:02:
         95:95:ee:c8:dc:61:32:f4:63:89:4e:0f:ee:4f:aa:40:ab:81:
         b1:ae:77:40:f5:e8:20:d5:9f:78:55:b5:4f:2e:9d:13:34:fd:
         9b:dd:d4:2e:83:ed:3d:3c:db:ce:38:a6:77:2a:d1:20:60:79:
         3e:70:e8:79:d3:e0:0c:21:98:ba:d3:8d:bf:94:0a:e0:4d:ed:
         eb:af:8f:9f:6c:88:82:bb:b6:07:84:19:94:d5:e6:b9:01:db:
         b1:30:e9:15:20:9e:cf:58:0e:91:5d:e6:97:94:ab:ce:32:79:
         bf:4e:a7:9f:28:18:23:30:a1:b1:cd:a2:e4:87:1c:84:25:c7:
         27:8f:40:c5:8a:38:57:4c:e6:ed:8a:3e:08:02:18:d1:75:4a:
         88:62:7f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzubM57mCEfupPpmCarDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MWYzNmZjYmY3MzM0ZWZmNmI5MWU4MDI5N2VhNWIyNWM0
ZWNmZDIwHhcNMjUwNDEzMDgwMTQ3WhcNMjUwNDE0MDgwMTQ3WjAzMTEwLwYDVQQD
Eyg0MjE1NWU5NGVkYjk1YTQ3YmE2MjYyZTM1ZmUzODIxYjJkMWQ3OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy3SbR9m2BTjNR8MBTk7Ufnup6jN
eZwLq4DoAmy8MLf9KN21xISElTI0lGyHPbf8MstGJDIERC3eDoxfEt08IQBRY+Hv
1qUBqKrTPchB44c/BtPfXRC0ii9E3YOd1Cikr0Po8MlJOVYyT5LyO+L2Te6U+nxi
4IrSGIPKYbXjdOquPH2AJ0xEJ/ydPiZsoaCkfDR9Ys4UUprF/nnO4RmMSF8iXvjs
BqIXGVhLZov/ytFlgYSB//4YxOIiUYrRElrBGUxonmpk4fwY0U8Nk9YfPOzMXHeQ
ln1xthn14TiqrWeIPDpIbKTuRbVUSAfPNN3NtWPcIKpnvmPN/y0sENkRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIVXpTtuVpHumJi41/jghstHXm0MB8GA1UdIwQY
MBaAFIQfNvy/czTv9rkegCl+pbJcTs/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQt
OTVkZGIwOTc0ZTRiLzEvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQtOTVkZGIwOTc0ZTRi
LzEvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3tJwDGb
F71mZUwyOehzWmrm92i8tVvN6Tstymtx90x4JUD9HDGQTuUdbfVR2EY+Mgq3N6KO
aWjnl0npoVHEUlgwrndcW8m2e4ezNTKcCYctyemB3HPv32gN94/aYbOnF2hX27r8
2aF4eRAClZXuyNxhMvRjiU4P7k+qQKuBsa53QPXoINWfeFW1Ty6dEzT9m93ULoPt
PTzbzjimdyrRIGB5PnDoedPgDCGYutONv5QK4E3t66+Pn2yIgru2B4QZlNXmuQHb
sTDpFSCez1gOkV3ml5SrzjJ5v06nnygYIzChsc2i5IcchCXHJ49AxYo4V0zm7Yo+
CAIY0XVKiGJ/Ng==
-----END CERTIFICATE-----