Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File:                     K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier:          CqHoSeviU4d3PQwq6wB62xLB+94OHFQ8B0vpEMkxVW8=
Subject key identifier:   4A:36:6D:17:FE:69:4C:4C:F0:44:4B:C5:F4:20:25:0A:48:F1:45:F5
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer:       /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial:       01962E6193B900011098B724086DEC683780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: AF/yF8Ecg59uxDt7EdzLYud1xyjrVwJVguOat0ra06E=)
                          2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:93:b9:00:01:10:98:b7:24:08:6d:ec:68:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=4a366d17fe694c4cf0444bc5f420250a48f145f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:f9:c3:18:ba:13:78:ae:39:03:fc:b1:b1:
                    b4:d7:f6:4a:67:23:88:5d:5d:45:fa:eb:f4:92:ad:
                    55:67:f0:79:62:a3:b3:18:c0:2a:f9:38:f2:e2:e0:
                    bb:ed:27:e9:c9:35:55:a1:20:ab:f0:b0:6b:51:3b:
                    14:29:4c:80:3c:63:f6:0d:ec:30:62:de:20:de:b2:
                    74:ad:96:38:e5:5c:b6:3e:11:14:82:0c:4f:09:a6:
                    3d:36:8d:22:c2:cc:3c:cb:14:08:92:99:a2:b0:d2:
                    c0:e5:cd:ac:1e:99:ac:d3:27:5a:0b:79:8c:96:c4:
                    df:cd:e9:e6:01:5b:bf:f2:2c:be:cf:c8:18:2a:96:
                    8e:bc:76:85:cb:d8:d4:e0:f0:cd:be:eb:b1:70:e0:
                    4f:e6:80:ed:a4:cf:c0:92:62:b3:01:f4:15:64:9f:
                    ea:36:d0:33:c6:3d:f1:1c:29:82:5f:86:bf:8d:d6:
                    43:22:cc:32:ca:94:49:5f:cd:65:49:fc:cd:dd:db:
                    69:bd:3e:02:02:f4:6f:b7:d7:e8:b8:f3:ea:4d:72:
                    90:8f:77:ea:19:fa:1d:0c:32:1e:50:bd:ce:34:c8:
                    f2:c1:a1:ef:07:67:b0:c9:e6:18:b5:2a:81:27:7f:
                    69:c5:1a:e6:c1:c5:18:57:3b:25:1b:99:08:a5:7d:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:6D:17:FE:69:4C:4C:F0:44:4B:C5:F4:20:25:0A:48:F1:45:F5
            X509v3 Authority Key Identifier:
                keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:88:0d:d7:25:a6:59:5d:50:6d:4b:b0:93:c9:4a:9a:bd:
         e3:e2:0e:4d:16:a2:8c:66:23:0b:63:be:59:bd:e4:cb:00:f4:
         fc:35:66:06:17:1a:1d:55:96:99:c1:d9:6d:1c:bc:dd:60:fc:
         57:ac:a9:d7:8a:5d:3a:dd:d0:0f:29:62:ff:ee:60:cb:e4:98:
         64:25:a4:4a:10:4b:6a:bc:61:69:47:14:30:45:e8:03:25:6c:
         80:a4:23:05:19:52:6c:fd:cc:5e:36:a7:48:03:23:b1:bc:75:
         43:c1:43:aa:e7:b0:fd:43:af:a5:94:e0:cf:7e:5b:38:dc:1e:
         69:cb:9a:9a:0c:84:43:f6:8b:1f:a6:1a:41:b6:9d:5a:06:1a:
         fd:ab:67:5b:b3:3f:2f:7f:48:81:c8:8f:97:cb:ae:7f:78:15:
         f6:2f:aa:28:64:1f:14:34:9b:f7:3e:ed:33:96:cb:0d:9b:3b:
         12:73:3f:e6:b8:3d:a2:e6:38:27:47:83:17:ea:50:f5:ae:0c:
         fa:10:48:f1:c7:2b:fd:5c:1d:3d:c4:48:31:d4:98:f7:1a:8f:
         9a:2f:4f:5d:d6:42:15:cd:67:d0:24:bd:fc:dd:41:d0:70:68:
         02:70:f0:0e:81:31:13:08:46:f8:92:2b:ce:16:12:97:f0:ee:
         b3:23:b2:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZO5AAEQmLckCG3saDeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWFkZTNjMTkxMjc4YjJhYThhZDc2NzQyZWViYmRlZmU3
Mjg1ZTYwHhcNMjUwNDEzMDkwMTA4WhcNMjUwNDE0MDkwMTA4WjAzMTEwLwYDVQQD
Eyg0YTM2NmQxN2ZlNjk0YzRjZjA0NDRiYzVmNDIwMjUwYTQ4ZjE0NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FX5wxi6E3iuOQP8sbG01/ZKZyOI
XV1F+uv0kq1VZ/B5YqOzGMAq+Tjy4uC77SfpyTVVoSCr8LBrUTsUKUyAPGP2Deww
Yt4g3rJ0rZY45Vy2PhEUggxPCaY9No0iwsw8yxQIkpmisNLA5c2sHpms0ydaC3mM
lsTfzenmAVu/8iy+z8gYKpaOvHaFy9jU4PDNvuuxcOBP5oDtpM/AkmKzAfQVZJ/q
NtAzxj3xHCmCX4a/jdZDIswyypRJX81lSfzN3dtpvT4CAvRvt9fouPPqTXKQj3fq
GfodDDIeUL3ONMjywaHvB2ewyeYYtSqBJ39pxRrmwcUYVzslG5kIpX0+jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo2bRf+aUxM8ERLxfQgJQpI8UX1MB8GA1UdIwQY
MBaAFCua3jwZEniyqorXZ0Luu97+coXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMt
Y2MwNTNmNmExZWU2LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMtY2MwNTNmNmExZWU2
LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPOIDdcl
plldUG1LsJPJSpq94+IOTRaijGYjC2O+Wb3kywD0/DVmBhcaHVWWmcHZbRy83WD8
V6yp14pdOt3QDyli/+5gy+SYZCWkShBLarxhaUcUMEXoAyVsgKQjBRlSbP3MXjan
SAMjsbx1Q8FDquew/UOvpZTgz35bONweacuamgyEQ/aLH6YaQbadWgYa/atnW7M/
L39IgciPl8uuf3gV9i+qKGQfFDSb9z7tM5bLDZs7EnM/5rg9ouY4J0eDF+pQ9a4M
+hBI8ccr/VwdPcRIMdSY9xqPmi9PXdZCFc1n0CS9/N1B0HBoAnDwDoExEwhG+JIr
zhYSl/DusyOyTQ==
-----END CERTIFICATE-----