Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File:                     DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier:          G1xbku6X0LphLl2Oa2r+6YffiNonkVPRz2ZRTLG1OeM=
Subject key identifier:   DA:F6:2C:65:C3:BA:8E:CE:E8:38:26:CB:5D:3F:18:6F:9E:0C:BD:09
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer:       /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial:       01962E61A183C0B0CC280A36CDDDBA2AF806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number:          022A
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: WFq/nvnUXDPLASJ6GI4iayc8Ei/FJ5UXuZoOn4NTKgY=)
                          2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a1:83:c0:b0:cc:28:0a:36:cd:dd:ba:2a:f8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=daf62c65c3ba8ecee83826cb5d3f186f9e0cbd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:81:bd:55:30:e4:2e:ed:b7:9a:6c:4d:c6:
                    75:34:b7:c1:47:79:a5:a0:6e:43:8b:a7:7c:cf:e9:
                    5e:2f:e3:29:f5:7c:47:d2:11:50:81:c4:20:15:3a:
                    c6:63:59:9b:6b:d9:95:a5:84:4c:45:a6:c4:e7:14:
                    f1:5d:f4:7b:9b:46:83:99:83:bc:a7:ce:0e:33:1c:
                    c1:77:de:02:d2:b8:76:49:fe:aa:e9:4e:c2:f7:ff:
                    67:8e:f1:84:7a:1c:b2:ce:1d:5b:81:fa:34:af:ed:
                    c4:8e:c9:2d:9d:9f:0e:96:20:9b:cc:5d:a7:58:dd:
                    86:91:56:f4:91:7d:e5:22:cc:59:8e:8c:9b:af:fe:
                    12:cd:47:62:42:54:6f:be:23:60:88:cc:a7:08:b1:
                    dc:78:50:f7:cc:51:e3:df:e1:90:80:8a:28:eb:d2:
                    00:f7:72:b2:eb:98:e1:24:b0:04:5c:09:18:16:d7:
                    a0:f0:86:07:81:e0:fa:5e:d5:03:56:4a:fb:09:e1:
                    c4:a5:17:11:31:62:4c:bc:1e:13:60:22:27:9c:e9:
                    a8:da:4c:24:97:00:34:85:c2:ad:2f:b2:e1:2a:c3:
                    55:11:4c:ea:ea:38:04:e2:e1:80:b2:bb:c5:17:03:
                    24:37:ba:3a:28:7c:d5:04:04:c4:a0:41:2b:84:68:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:2C:65:C3:BA:8E:CE:E8:38:26:CB:5D:3F:18:6F:9E:0C:BD:09
            X509v3 Authority Key Identifier:
                keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:67:27:a1:72:25:3c:0c:7a:75:57:60:f2:cf:30:3c:52:
         46:40:31:76:fc:7f:8b:12:0b:f9:b8:19:fb:9f:ac:4d:23:13:
         3e:89:14:8f:42:fa:b4:6d:c3:0b:f8:35:73:d1:a1:65:82:20:
         6c:6b:64:05:4b:bb:84:0d:e1:61:d0:cd:ef:a3:e8:f5:a5:18:
         27:47:b6:9d:47:88:5f:15:c0:13:0a:69:a4:39:15:c6:8d:60:
         62:2f:e8:4e:2a:9e:35:d1:20:75:f0:f5:22:9e:1d:c8:61:4f:
         f2:e8:de:a2:71:b7:45:95:ac:4c:50:05:81:b5:7f:78:a4:1f:
         ed:6b:b0:c1:3a:5b:71:aa:80:a3:a1:36:2a:df:9b:d6:87:86:
         50:1f:a4:f1:e8:76:11:db:e9:5c:af:ef:6a:6b:7f:83:a8:b7:
         a8:f6:9b:91:71:02:54:9e:34:e0:60:97:0a:b3:ef:22:42:bd:
         42:05:2b:37:0f:7b:16:8c:e2:fc:65:10:94:4c:b4:0e:7b:32:
         e1:cc:ff:7f:e8:8f:41:6b:44:b7:c2:ee:c1:4f:f6:9e:f4:87:
         9a:d9:a0:4c:e5:c8:aa:f3:6c:b9:fe:ab:e7:9e:89:c5:21:a6:
         6b:f1:f2:20:1a:70:20:48:fc:bd:45:bd:03:63:8b:f0:d6:c4:
         6c:90:d1:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaGDwLDMKAo2zd26KvgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0
YjM3NzYwHhcNMjUwNDEzMDkwMTEyWhcNMjUwNDE0MDkwMTEyWjAzMTEwLwYDVQQD
EyhkYWY2MmM2NWMzYmE4ZWNlZTgzODI2Y2I1ZDNmMTg2ZjllMGNiZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI6BvVUw5C7tt5psTcZ1NLfBR3ml
oG5Di6d8z+leL+Mp9XxH0hFQgcQgFTrGY1mba9mVpYRMRabE5xTxXfR7m0aDmYO8
p84OMxzBd94C0rh2Sf6q6U7C9/9njvGEehyyzh1bgfo0r+3EjsktnZ8OliCbzF2n
WN2GkVb0kX3lIsxZjoybr/4SzUdiQlRvviNgiMynCLHceFD3zFHj3+GQgIoo69IA
93Ky65jhJLAEXAkYFteg8IYHgeD6XtUDVkr7CeHEpRcRMWJMvB4TYCInnOmo2kwk
lwA0hcKtL7LhKsNVEUzq6jgE4uGAsrvFFwMkN7o6KHzVBATEoEErhGhACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr2LGXDuo7O6Dgmy10/GG+eDL0JMB8GA1UdIwQY
MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It
ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl
LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfRnJ6Fy
JTwMenVXYPLPMDxSRkAxdvx/ixIL+bgZ+5+sTSMTPokUj0L6tG3DC/g1c9GhZYIg
bGtkBUu7hA3hYdDN76Po9aUYJ0e2nUeIXxXAEwpppDkVxo1gYi/oTiqeNdEgdfD1
Ip4dyGFP8ujeonG3RZWsTFAFgbV/eKQf7WuwwTpbcaqAo6E2Kt+b1oeGUB+k8eh2
EdvpXK/vamt/g6i3qPabkXECVJ404GCXCrPvIkK9QgUrNw97Fozi/GUQlEy0Dnsy
4cz/f+iPQWtEt8LuwU/2nvSHmtmgTOXIqvNsuf6r556JxSGma/HyIBpwIEj8vUW9
A2OL8NbEbJDRhw==
-----END CERTIFICATE-----