Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File:                     cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier:          ZoTzWxKHIKJCZ+t9Y12BXvHodGRZ8bTAxNcyae3o1zI=
Subject key identifier:   72:81:8E:FE:89:A5:82:EE:C0:64:7F:8D:03:E2:7A:70:49:BE:B6:F1
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer:       /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial:       01962F0672239FFDD0BF36B5BBE4E68D459E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (hash: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=)
                          2: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: QF9dhUxEVlEKWDG0ScRMXOI6HiZU90yGVUvHTOMtsMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:72:23:9f:fd:d0:bf:36:b5:bb:e4:e6:8d:45:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=72818efe89a582eec0647f8d03e27a7049beb6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:58:12:f5:30:ea:90:bc:77:fe:93:2f:ab:
                    9d:e9:88:b6:a2:c6:fc:03:42:0d:f3:2e:33:97:2c:
                    9a:b6:85:7d:31:f7:5c:f2:7f:98:86:27:23:47:dd:
                    a5:dd:23:a4:12:07:72:5a:56:1e:e2:76:10:c3:7e:
                    76:33:6c:64:0d:6c:df:6c:a1:5b:cf:1c:85:76:87:
                    e1:2d:36:ce:04:cb:1f:11:7c:ad:cc:b0:f5:fc:6a:
                    47:ea:dc:df:dd:85:2e:52:3e:b4:ec:3a:e0:54:78:
                    75:3d:34:89:3e:16:8a:a9:ee:8f:b0:05:4b:dc:b2:
                    46:39:19:19:9a:0d:ef:7a:ec:40:05:3c:f7:13:d1:
                    40:40:16:a1:c9:d8:99:2a:9a:2a:42:45:00:f7:a6:
                    58:6c:6a:64:29:b2:ba:5f:4a:44:b3:85:83:d5:6e:
                    b7:71:40:c8:12:3a:7e:51:e8:b1:79:df:64:3b:dd:
                    2d:32:19:3d:e9:dd:6b:26:6c:f9:82:5c:80:2d:13:
                    a7:c3:39:92:2c:37:83:de:38:b3:30:4b:09:e3:0a:
                    63:33:3c:13:9f:8d:2b:88:f6:9a:b6:aa:0a:8d:34:
                    62:c3:ec:0f:48:ee:29:23:63:21:a2:57:4f:44:ee:
                    41:1d:aa:8c:bf:6e:ee:71:cb:e2:6b:47:1c:b2:f2:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:81:8E:FE:89:A5:82:EE:C0:64:7F:8D:03:E2:7A:70:49:BE:B6:F1
            X509v3 Authority Key Identifier:
                keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c3:2f:65:08:4e:91:83:28:a6:21:bf:4e:c7:79:b1:af:fe:
         79:0f:8a:0f:eb:58:d9:0c:30:eb:70:44:a8:83:ee:f1:5b:2d:
         e1:c3:97:0d:8e:d8:7e:d4:65:4a:67:46:25:72:80:4b:79:46:
         21:97:f3:7d:fc:50:b2:0a:24:98:99:4b:c4:23:8c:e4:3b:9b:
         74:07:f0:41:28:e6:47:1e:67:0a:64:f6:0d:5d:25:06:57:e8:
         f3:96:1c:ff:0c:0b:da:2c:4a:7b:ab:81:ab:93:3e:95:58:be:
         dc:79:96:45:ae:2b:45:0b:8a:15:77:9a:54:67:51:1d:2f:ba:
         ae:4c:87:10:06:14:2d:fe:a5:3c:3f:79:55:4d:17:94:28:c4:
         59:67:96:77:ff:18:44:e5:04:83:0d:54:f9:89:e9:74:77:06:
         f7:bd:16:a8:94:73:19:2b:64:9b:06:2c:2b:4e:ef:a1:a9:30:
         ca:2d:65:61:d1:22:3f:93:35:58:59:45:00:ca:54:ef:19:e1:
         e4:cd:8f:60:9d:e7:dc:52:42:5f:ba:b7:ed:2a:40:e7:4c:da:
         6e:69:39:ba:8b:0a:44:20:d9:4c:94:f4:e7:af:20:03:8f:3e:
         4d:0c:84:ea:02:6a:6a:91:04:97:61:4b:dd:02:61:df:7a:6e:
         5e:b0:6d:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnIjn/3Qvza1u+TmjUWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy
MWU0NWMwHhcNMjUwNDEzMTIwMTEzWhcNMjUwNDE0MTIwMTEzWjAzMTEwLwYDVQQD
Eyg3MjgxOGVmZTg5YTU4MmVlYzA2NDdmOGQwM2UyN2E3MDQ5YmViNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf5YEvUw6pC8d/6TL6ud6Yi2osb8
A0IN8y4zlyyatoV9Mfdc8n+YhicjR92l3SOkEgdyWlYe4nYQw352M2xkDWzfbKFb
zxyFdofhLTbOBMsfEXytzLD1/GpH6tzf3YUuUj607DrgVHh1PTSJPhaKqe6PsAVL
3LJGORkZmg3veuxABTz3E9FAQBahydiZKpoqQkUA96ZYbGpkKbK6X0pEs4WD1W63
cUDIEjp+Ueixed9kO90tMhk96d1rJmz5glyALROnwzmSLDeD3jizMEsJ4wpjMzwT
n40riPaatqoKjTRiw+wPSO4pI2MholdPRO5BHaqMv27uccvia0ccsvK6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKBjv6JpYLuwGR/jQPienBJvrbxMB8GA1UdIwQY
MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt
OTc1YWQwM2Q4OGU2LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2
LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsMvZQhO
kYMopiG/Tsd5sa/+eQ+KD+tY2Qww63BEqIPu8Vst4cOXDY7YftRlSmdGJXKAS3lG
IZfzffxQsgokmJlLxCOM5DubdAfwQSjmRx5nCmT2DV0lBlfo85Yc/wwL2ixKe6uB
q5M+lVi+3HmWRa4rRQuKFXeaVGdRHS+6rkyHEAYULf6lPD95VU0XlCjEWWeWd/8Y
ROUEgw1U+YnpdHcG970WqJRzGStkmwYsK07voakwyi1lYdEiP5M1WFlFAMpU7xnh
5M2PYJ3n3FJCX7q37SpA50zabmk5uosKRCDZTJT0568gA48+TQyE6gJqapEEl2FL
3QJh33puXrBtLA==
-----END CERTIFICATE-----