Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
File:                     cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json)
Hash identifier:          eDcHaHl/2d5JLwDWFK48DAZaIMWPDJBw3TzUcNVHPK0=
Subject key identifier:   BD:64:74:AE:F7:AC:F9:F0:9A:2E:80:2A:E7:2B:83:64:41:78:BA:4D
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Certificate issuer:       /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial:       01962F3D4D40D71A8B63146FF45D2A969B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
Manifest number:          08BC
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: snMUScf9ae2ohgYq1mjjXKCv6/1Q/N+IoxmlGVs3pjo=)
                          2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4d:40:d7:1a:8b:63:14:6f:f4:5d:2a:96:9b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=bd6474aef7acf9f09a2e802ae72b83644178ba4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:e6:ed:28:d3:7f:df:60:9b:7d:ae:65:f9:
                    70:35:a5:df:a9:6b:34:93:3b:e7:81:e2:ac:7a:4b:
                    91:7d:98:bc:bd:05:a1:a8:d7:44:37:99:ac:e7:ce:
                    89:ad:3b:58:d2:7a:c9:51:c0:43:82:fb:8d:71:27:
                    3a:02:44:80:bd:4b:1b:aa:ea:6c:da:8e:ea:ae:27:
                    66:1c:75:6f:32:cd:f5:28:b2:35:e5:ea:75:21:e2:
                    ca:33:64:5d:e1:c8:9d:91:5b:90:1c:15:c7:a2:4c:
                    17:cb:1f:48:f0:dd:be:07:70:a7:43:3f:73:1f:12:
                    5e:0d:aa:7b:c6:90:be:da:ff:23:03:ca:9a:5d:d7:
                    b8:86:e4:36:58:0d:b0:fb:65:f2:2d:e4:b4:18:fc:
                    4b:41:17:ab:34:cb:b8:78:6a:5e:4b:4d:1a:ed:a4:
                    f7:fb:36:21:65:70:54:4b:1e:b0:b8:5c:6a:a5:7f:
                    ba:8e:c2:8f:29:f8:37:2b:e9:21:1f:37:27:5d:4c:
                    64:3c:f2:48:95:77:69:2b:a6:c8:0a:df:1d:a6:1c:
                    19:2b:a0:e9:f8:c2:de:57:11:a6:57:81:85:b1:cb:
                    62:c3:4b:c7:72:6d:f0:20:19:6e:48:6a:57:6c:ba:
                    85:73:27:5d:84:87:df:4e:17:8b:45:54:51:f6:7b:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:74:AE:F7:AC:F9:F0:9A:2E:80:2A:E7:2B:83:64:41:78:BA:4D
            X509v3 Authority Key Identifier:
                keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d9:a0:a2:45:22:37:1b:3c:05:d2:c8:57:32:e6:e6:9a:75:
         fc:b6:56:f6:90:38:1e:5c:fa:4d:56:a8:1f:b6:30:c0:30:e2:
         d4:63:78:46:7b:46:e6:b7:5d:38:e4:6f:9a:c2:a4:69:6a:26:
         c9:8e:fa:cf:6d:bb:15:cc:46:3d:93:b1:c7:16:5a:1c:08:4c:
         f5:a7:77:de:be:26:00:55:79:8c:98:c7:a6:85:0b:46:be:13:
         4b:7c:65:e6:0f:77:37:6f:94:87:d6:e2:03:03:33:25:4b:83:
         83:ba:a2:04:92:5e:72:f9:bf:2a:d9:65:cd:e9:48:1a:8d:1d:
         5e:8a:32:01:40:92:1a:d1:df:d0:68:d4:2c:cd:35:c2:3c:eb:
         c1:97:2d:ca:7b:92:c5:ad:81:95:f4:78:17:22:a3:91:79:c1:
         d6:86:c0:79:14:bf:ba:5e:b4:db:bf:a6:39:80:02:15:24:4e:
         1d:f2:96:c3:6f:d0:d0:23:4f:08:aa:7b:c8:20:f7:5a:a1:c4:
         8f:bc:24:ad:f4:3b:14:db:ee:57:96:b3:50:9e:14:42:a5:41:
         56:84:2b:83:c8:42:18:b9:22:2f:d8:97:d7:fd:7b:32:3d:ee:
         dd:4f:41:8a:de:a9:8f:01:22:f4:dd:82:0b:ea:af:63:0e:61:
         af:06:bc:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPU1A1xqLYxRv9F0qlpuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTI4MGIxMzM4ZjEyZmM2ZjYyMWM0YzkwNTYwYzdiYzU5
MDg5NjEwHhcNMjUwNDEzMTMwMTA4WhcNMjUwNDE0MTMwMTA4WjAzMTEwLwYDVQQD
EyhiZDY0NzRhZWY3YWNmOWYwOWEyZTgwMmFlNzJiODM2NDQxNzhiYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYrm7SjTf99gm32uZflwNaXfqWs0
kzvngeKsekuRfZi8vQWhqNdEN5ms586JrTtY0nrJUcBDgvuNcSc6AkSAvUsbqups
2o7qridmHHVvMs31KLI15ep1IeLKM2Rd4cidkVuQHBXHokwXyx9I8N2+B3CnQz9z
HxJeDap7xpC+2v8jA8qaXde4huQ2WA2w+2XyLeS0GPxLQRerNMu4eGpeS00a7aT3
+zYhZXBUSx6wuFxqpX+6jsKPKfg3K+khHzcnXUxkPPJIlXdpK6bICt8dphwZK6Dp
+MLeVxGmV4GFsctiw0vHcm3wIBluSGpXbLqFcyddhIffTheLRVRR9nsG5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1kdK73rPnwmi6AKucrg2RBeLpNMB8GA1UdIwQY
MBaAFHESgLEzjxL8b2IcTJBWDHvFkIlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgt
YmI0MTdlYzY0OWFiLzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgtYmI0MTdlYzY0OWFi
LzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNmgokUi
Nxs8BdLIVzLm5pp1/LZW9pA4Hlz6TVaoH7YwwDDi1GN4RntG5rddOORvmsKkaWom
yY76z227FcxGPZOxxxZaHAhM9ad33r4mAFV5jJjHpoULRr4TS3xl5g93N2+Uh9bi
AwMzJUuDg7qiBJJecvm/KtllzelIGo0dXooyAUCSGtHf0GjULM01wjzrwZctynuS
xa2BlfR4FyKjkXnB1obAeRS/ul6027+mOYACFSROHfKWw2/Q0CNPCKp7yCD3WqHE
j7wkrfQ7FNvuV5azUJ4UQqVBVoQrg8hCGLkiL9iX1/17Mj3u3U9Bit6pjwEi9N2C
C+qvYw5hrwa8Ww==
-----END CERTIFICATE-----