Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File:                     Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier:          gT/NWIUnYx1keTh7IYfY7tmIWt2zvMGcTMmbVasbzWU=
Subject key identifier:   9B:59:16:F2:23:A3:90:B1:A9:F2:CF:FE:6B:F2:9B:60:BC:DB:4D:81
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer:       /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial:       01962F0655D5E7E79B76D99D3109CB47132F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=)
                          2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: AFXc2mKBGRCBW4kQqT7/D42rl3WY8yFOMasP8eS9xvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:d5:e7:e7:9b:76:d9:9d:31:09:cb:47:13:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=9b5916f223a390b1a9f2cffe6bf29b60bcdb4d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:37:9f:6c:a6:ea:d7:4a:12:b0:07:ab:3f:
                    5b:9e:02:b6:34:78:3c:3a:75:33:9f:d1:01:97:95:
                    5e:c0:d1:88:26:55:99:ba:b5:fa:15:10:a8:68:8b:
                    26:19:a2:b1:2e:5e:c8:c6:49:d7:96:db:a1:e7:66:
                    3d:30:e8:0f:06:60:41:6b:12:0a:25:51:f4:1a:4e:
                    22:50:2c:0f:c9:69:59:2a:ad:6f:d5:ed:b3:fe:39:
                    b7:34:ec:9c:62:99:36:cf:ce:5a:06:34:c8:f8:16:
                    f3:a4:fa:e8:8b:dc:1f:ac:46:04:75:48:4a:d2:5a:
                    bd:da:de:96:4c:9f:09:f0:14:a0:b5:d6:b6:c9:65:
                    eb:cb:79:bc:ff:4d:1b:6b:3d:62:e5:f4:1e:fb:bb:
                    e8:30:1d:cc:de:a1:75:0c:45:e5:d1:1b:5d:d3:39:
                    19:ab:ee:48:96:49:fb:9d:8a:fe:88:98:76:fa:f8:
                    dc:58:8b:94:41:d0:36:97:2a:51:b4:90:54:05:bd:
                    22:db:ee:f8:50:76:32:f6:a6:62:67:69:3d:1e:f5:
                    a3:25:25:89:fd:b6:9f:d0:8d:81:89:53:91:7f:46:
                    74:f5:a6:3b:d3:be:95:e4:ce:74:ec:05:83:61:66:
                    67:ec:8e:40:58:f0:a8:1b:82:f9:19:5e:85:e7:60:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:16:F2:23:A3:90:B1:A9:F2:CF:FE:6B:F2:9B:60:BC:DB:4D:81
            X509v3 Authority Key Identifier:
                keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:33:81:20:96:72:b1:b5:2b:d3:cf:bb:ec:51:57:fd:8c:f6:
         85:aa:b9:d0:be:df:99:bd:2d:62:83:77:88:f8:62:0e:49:9d:
         5b:d8:f8:e0:cd:6b:a5:06:50:a1:60:8b:de:c2:9a:f5:a4:6d:
         40:d0:12:38:40:e8:51:d0:37:67:b0:c7:8e:7f:59:c6:b4:62:
         cb:e1:42:67:1d:10:45:91:52:69:e5:6f:8d:68:96:d4:5a:69:
         b2:ed:19:b3:13:b5:eb:7a:b6:43:d6:74:9b:c3:ae:0e:a2:f9:
         b4:46:b2:8c:11:7a:16:4d:03:f4:c6:ca:95:d4:6e:48:30:fb:
         97:8e:ba:22:4b:2b:85:c7:49:9c:a6:b1:00:98:4c:25:4d:d7:
         8e:6b:32:68:dc:22:b5:8f:6e:4f:87:89:55:3a:1f:7a:c1:93:
         9f:fd:e0:e3:82:55:2d:bc:03:3f:0d:0a:6e:bd:22:5f:ca:a1:
         36:dd:c9:bf:55:71:9e:42:b1:73:e5:b6:50:04:49:7d:6b:7e:
         22:ea:58:6e:02:d9:64:8e:aa:ad:3c:8c:4d:4d:03:f9:1c:f5:
         0c:76:77:ac:db:6b:15:67:32:c9:9d:32:d4:40:4a:73:3b:e0:
         ba:59:c5:fc:49:6e:07:13:d3:27:aa:2f:1b:a3:20:c5:dc:32:
         41:5e:43:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlXV5+ebdtmdMQnLRxMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMGEyODdiZWE5MjU4OGZjNWRhZTRmOTNmYjI1NjI4ZjMy
ZDE5NmQwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
Eyg5YjU5MTZmMjIzYTM5MGIxYTlmMmNmZmU2YmYyOWI2MGJjZGI0ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9E3n2ym6tdKErAHqz9bngK2NHg8
OnUzn9EBl5VewNGIJlWZurX6FRCoaIsmGaKxLl7IxknXltuh52Y9MOgPBmBBaxIK
JVH0Gk4iUCwPyWlZKq1v1e2z/jm3NOycYpk2z85aBjTI+BbzpProi9wfrEYEdUhK
0lq92t6WTJ8J8BSgtda2yWXry3m8/00baz1i5fQe+7voMB3M3qF1DEXl0Rtd0zkZ
q+5Ilkn7nYr+iJh2+vjcWIuUQdA2lypRtJBUBb0i2+74UHYy9qZiZ2k9HvWjJSWJ
/baf0I2BiVORf0Z09aY7076V5M507AWDYWZn7I5AWPCoG4L5GV6F52Cw2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtZFvIjo5CxqfLP/mvym2C8202BMB8GA1UdIwQY
MBaAFD8KKHvqkliPxdrk+T+yVijzLRltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMt
MjEzMzVkMTA2M2FmLzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMtMjEzMzVkMTA2M2Fm
LzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDOBIJZy
sbUr08+77FFX/Yz2haq50L7fmb0tYoN3iPhiDkmdW9j44M1rpQZQoWCL3sKa9aRt
QNASOEDoUdA3Z7DHjn9ZxrRiy+FCZx0QRZFSaeVvjWiW1Fppsu0ZsxO163q2Q9Z0
m8OuDqL5tEayjBF6Fk0D9MbKldRuSDD7l466IksrhcdJnKaxAJhMJU3XjmsyaNwi
tY9uT4eJVTofesGTn/3g44JVLbwDPw0Kbr0iX8qhNt3Jv1VxnkKxc+W2UARJfWt+
IupYbgLZZI6qrTyMTU0D+Rz1DHZ3rNtrFWcyyZ0y1EBKczvgulnF/EluBxPTJ6ov
G6MgxdwyQV5DEg==
-----END CERTIFICATE-----