Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File:                     KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier:          z03h5c6yaDmobRtEXAyFsmvsG54yEnkE0SSBMCZmBDA=
Subject key identifier:   6E:17:9C:3B:0A:64:05:62:57:78:0D:25:81:64:C6:70:72:A2:CA:86
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer:       /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial:       01962F065E2BC34EF03228FDF0C569B96C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number:          0B84
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 3Q4b3ZrB5hBNl0sc19tX6sYik8M.roa (hash: Y2d6NgWxe37Sh2Kw4xqcfrnYvSssw7Fp3dHdg6i9y18=)
                          2: GL9mMoVzYzt9cAMp9ZMhDNvyxpY.roa (hash: sr1sGLjbfiu/0SvHpnzyQUaLuHxB9sxU75fTY0SHxZw=)
                          3: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: GdP2iORzsOg97fVvoxM3KbPgu8MVvfeNFyIGBKWDnDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:2b:c3:4e:f0:32:28:fd:f0:c5:69:b9:6c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=6e179c3b0a64056257780d258164c67072a2ca86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c1:77:eb:f1:2f:dd:28:48:60:8f:fd:51:78:
                    02:8f:6b:67:18:1f:ef:17:d0:e9:68:04:5b:ae:5c:
                    84:76:35:02:2d:44:96:21:70:cc:9e:87:b4:15:c5:
                    8e:3b:eb:22:de:46:eb:21:09:d6:7f:f3:2b:9e:16:
                    a8:95:15:d1:eb:e0:96:23:b2:68:87:e1:10:60:25:
                    57:54:26:18:5d:e3:8d:d9:d0:7f:01:72:dd:6f:1e:
                    be:b9:d2:6c:16:b0:b5:8a:98:28:44:a8:ae:dd:ac:
                    0f:f6:ac:cf:0f:59:bd:20:1e:3b:89:bf:2a:47:a0:
                    a4:3b:bb:ec:c9:da:b7:8b:d5:91:6b:13:a5:c2:8d:
                    9a:97:0d:34:58:79:f4:22:fc:48:32:df:8b:4a:8d:
                    f6:8a:35:e7:9a:97:3f:69:5b:36:77:c5:21:b6:54:
                    99:d9:17:66:ff:f0:f6:d9:60:71:ba:58:62:f0:6d:
                    f6:2b:4d:8c:37:fe:94:cf:84:05:2d:aa:ad:1f:17:
                    6b:76:28:90:4a:dd:be:4c:61:6d:28:70:54:7e:e1:
                    64:74:92:da:4f:c4:db:15:5e:0c:cb:b4:12:bf:0a:
                    d9:c7:5a:d6:01:20:5f:2e:b4:15:67:5a:40:9f:4b:
                    22:2f:c5:39:0d:e1:50:4e:f0:7f:f0:1f:1b:b2:fc:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:9C:3B:0A:64:05:62:57:78:0D:25:81:64:C6:70:72:A2:CA:86
            X509v3 Authority Key Identifier:
                keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b5:57:33:5a:f9:f2:09:7b:68:7b:af:39:d8:5c:af:cd:11:
         97:51:06:a7:7b:62:4e:ef:cd:7f:68:4c:50:37:a8:25:6c:41:
         e4:7c:6b:2f:93:4c:57:b5:19:c2:b1:53:15:fe:e4:65:8c:9a:
         22:71:fb:45:ff:78:cd:95:8e:e8:67:e0:43:82:8b:b1:4f:4a:
         10:ab:8c:45:7e:a4:9b:21:16:16:50:63:82:18:11:4d:b9:4f:
         1d:49:cd:40:35:79:9f:dc:8f:ab:d8:2c:3d:34:a5:37:af:41:
         ce:a2:78:9a:04:2f:65:b9:b4:69:94:7f:32:8d:82:16:dc:5f:
         55:c9:e9:b5:ff:3c:b6:77:9c:2b:75:25:34:95:c3:4b:ba:b0:
         43:11:0f:45:c8:67:e4:0b:13:a5:b7:30:da:bc:5d:b3:91:ab:
         34:19:86:00:18:a9:57:0a:d1:ed:1d:10:df:23:76:9c:9f:18:
         7c:97:8b:f9:81:56:3f:78:70:03:f7:58:1c:99:57:58:ad:12:
         dc:0b:3b:e1:97:fa:a6:b0:b9:eb:90:ab:ab:4b:f3:b4:37:df:
         e6:d0:45:1c:e4:d5:8e:8f:84:7d:5b:8e:23:78:0f:1a:0a:68:
         c7:7c:13:ab:c2:9f:00:83:eb:ab:79:d3:2b:3b:33:f1:9a:22:
         6c:8e:1f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBl4rw07wMij98MVpuWxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzE5NGY0YjUyYjlmZjQzM2YyYmYwZDE2YjU4YzExYzdj
ZjExMzEwHhcNMjUwNDEzMTIwMTA4WhcNMjUwNDE0MTIwMTA4WjAzMTEwLwYDVQQD
Eyg2ZTE3OWMzYjBhNjQwNTYyNTc3ODBkMjU4MTY0YzY3MDcyYTJjYTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8F36/Ev3ShIYI/9UXgCj2tnGB/v
F9DpaARbrlyEdjUCLUSWIXDMnoe0FcWOO+si3kbrIQnWf/MrnhaolRXR6+CWI7Jo
h+EQYCVXVCYYXeON2dB/AXLdbx6+udJsFrC1ipgoRKiu3awP9qzPD1m9IB47ib8q
R6CkO7vsydq3i9WRaxOlwo2alw00WHn0IvxIMt+LSo32ijXnmpc/aVs2d8UhtlSZ
2Rdm//D22WBxulhi8G32K02MN/6Uz4QFLaqtHxdrdiiQSt2+TGFtKHBUfuFkdJLa
T8TbFV4My7QSvwrZx1rWASBfLrQVZ1pAn0siL8U5DeFQTvB/8B8bsvwfbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4XnDsKZAViV3gNJYFkxnByosqGMB8GA1UdIwQY
MBaAFClxlPS1K5/0M/K/DRa1jBHHzxExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUt
NWE5ODg5MzFlYTMzLzEvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMz
LzEvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLVXM1r5
8gl7aHuvOdhcr80Rl1EGp3tiTu/Nf2hMUDeoJWxB5HxrL5NMV7UZwrFTFf7kZYya
InH7Rf94zZWO6GfgQ4KLsU9KEKuMRX6kmyEWFlBjghgRTblPHUnNQDV5n9yPq9gs
PTSlN69BzqJ4mgQvZbm0aZR/Mo2CFtxfVcnptf88tnecK3UlNJXDS7qwQxEPRchn
5AsTpbcw2rxds5GrNBmGABipVwrR7R0Q3yN2nJ8YfJeL+YFWP3hwA/dYHJlXWK0S
3As74Zf6prC565Crq0vztDff5tBFHOTVjo+EfVuOI3gPGgpox3wTq8KfAIPrq3nT
Kzsz8ZoibI4fuQ==
-----END CERTIFICATE-----