Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File:                     2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier:          AjmP5isw7+ozy+BAOPcbz3K11YFEFiXQ9NpUj1+wVLE=
Subject key identifier:   64:39:2D:A9:89:73:89:B0:1B:D5:90:F5:AA:14:9B:AB:09:30:60:6A
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer:       /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial:       01962F3D6DBBD884E55EF365726977CD8F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number:          0FC6
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: A7izjLNYijtBs1PgjlSh/Xfsi7nQ6J81rT9uLpNiYmk=)
                          2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6d:bb:d8:84:e5:5e:f3:65:72:69:77:cd:8f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=64392da9897389b01bd590f5aa149bab0930606a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:1f:2c:ba:1d:0e:b1:e4:35:85:df:2b:08:
                    27:b7:06:b3:9c:ee:4c:38:cf:ea:c8:d8:d6:a2:71:
                    27:7e:ad:19:f6:36:5b:45:f2:b7:ec:60:80:5f:4e:
                    07:2b:3a:0f:d4:21:50:e2:5c:a3:8c:e0:e1:fd:a1:
                    88:8b:04:3c:98:67:ed:51:d3:0f:23:4d:2f:1c:54:
                    98:ab:f6:3f:61:31:06:32:a6:6c:a8:0e:b5:13:15:
                    0e:fb:77:95:6e:2f:57:29:06:a7:d1:fa:fd:f5:4f:
                    fa:da:09:4d:c8:59:4b:7b:83:0b:43:ab:77:56:60:
                    ea:37:46:e5:c6:1d:9b:d3:64:4b:44:36:69:99:09:
                    ea:5f:f8:43:5a:15:28:af:0a:27:ff:e4:fe:3b:fe:
                    bd:ae:31:3a:48:b1:4e:bf:8d:66:1e:0d:36:6b:e7:
                    4e:28:2d:4e:1b:98:d6:05:d9:4a:eb:0d:25:d3:f4:
                    49:51:fb:b7:a2:b4:71:4a:f1:dd:06:4a:e0:d8:b5:
                    aa:0d:cd:a8:21:71:e5:9f:b5:31:c6:9c:10:fb:03:
                    cb:bf:2b:b1:9f:5d:89:16:bf:c5:dd:b1:2d:e6:f6:
                    77:3e:b0:64:52:eb:1d:c2:05:66:b7:20:27:c8:b8:
                    e9:da:fd:65:ea:10:4d:69:e7:7a:8c:85:73:33:63:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:39:2D:A9:89:73:89:B0:1B:D5:90:F5:AA:14:9B:AB:09:30:60:6A
            X509v3 Authority Key Identifier:
                keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:f4:e0:d2:86:0f:ae:2a:ae:2b:69:ab:35:ad:cd:27:d9:
         64:4a:af:87:a1:1c:27:73:8c:60:58:2e:73:55:b9:b2:ea:99:
         87:91:68:37:7c:a9:26:1f:4c:09:5b:d5:34:ad:c3:bb:43:d6:
         4e:10:b3:f6:f5:3e:a8:3b:82:e6:90:ba:ca:d8:35:3f:bc:b0:
         00:eb:8f:9c:a1:ad:24:f2:a2:d4:eb:8d:85:15:b4:03:f9:48:
         31:12:39:5d:6c:a5:65:da:7b:62:71:14:a5:db:2c:b1:d6:3d:
         d4:8a:8a:5a:36:35:53:4f:99:62:da:5c:f6:32:cd:b8:d1:27:
         4b:05:9a:b3:b3:f2:03:8a:78:c3:e7:99:59:61:d6:8f:ba:be:
         46:9d:40:cd:e2:12:33:de:54:1c:2d:cb:3a:d5:03:67:e7:c2:
         06:15:dd:14:ed:67:cc:eb:7f:33:e2:47:e9:a2:81:c7:82:7e:
         2a:7e:07:4a:66:40:3f:d3:1d:2f:d6:6e:33:b8:91:22:cd:77:
         6e:34:12:fd:e1:39:bf:1e:80:9f:76:93:0f:1b:3e:a3:ab:40:
         e3:34:d6:b7:c1:d7:01:81:64:a0:d5:e5:a4:0e:7e:b7:82:dc:
         d2:07:27:1b:0a:ed:fc:bb:fc:8a:bd:8d:8f:44:75:93:47:38:
         0c:5b:a0:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPW272ITlXvNlcml3zY+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2UzMDJjMjFhOWRkYTY3NTA5ZmM4ZjEzZGFmNGM2MmFj
ZmYwZWUwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
Eyg2NDM5MmRhOTg5NzM4OWIwMWJkNTkwZjVhYTE0OWJhYjA5MzA2MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KUfLLodDrHkNYXfKwgntwaznO5M
OM/qyNjWonEnfq0Z9jZbRfK37GCAX04HKzoP1CFQ4lyjjODh/aGIiwQ8mGftUdMP
I00vHFSYq/Y/YTEGMqZsqA61ExUO+3eVbi9XKQan0fr99U/62glNyFlLe4MLQ6t3
VmDqN0blxh2b02RLRDZpmQnqX/hDWhUorwon/+T+O/69rjE6SLFOv41mHg02a+dO
KC1OG5jWBdlK6w0l0/RJUfu3orRxSvHdBkrg2LWqDc2oIXHln7UxxpwQ+wPLvyux
n12JFr/F3bEt5vZ3PrBkUusdwgVmtyAnyLjp2v1l6hBNaed6jIVzM2PFswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ5LamJc4mwG9WQ9aoUm6sJMGBqMB8GA1UdIwQY
MBaAFNk+MCwhqd2mdQn8jxPa9MYqz/DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct
YWUxNzU5OTE2ZGYwLzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw
LzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr704NKG
D64qritpqzWtzSfZZEqvh6EcJ3OMYFguc1W5suqZh5FoN3ypJh9MCVvVNK3Du0PW
ThCz9vU+qDuC5pC6ytg1P7ywAOuPnKGtJPKi1OuNhRW0A/lIMRI5XWylZdp7YnEU
pdsssdY91IqKWjY1U0+ZYtpc9jLNuNEnSwWas7PyA4p4w+eZWWHWj7q+Rp1AzeIS
M95UHC3LOtUDZ+fCBhXdFO1nzOt/M+JH6aKBx4J+Kn4HSmZAP9MdL9ZuM7iRIs13
bjQS/eE5vx6An3aTDxs+o6tA4zTWt8HXAYFkoNXlpA5+t4Lc0gcnGwrt/Lv8ir2N
j0R1k0c4DFug8Q==
-----END CERTIFICATE-----