Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File:                     FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier:          sfutcCWZAad4OXaOAkOTPooKHtOSXW1LtV81P5pAXHo=
Subject key identifier:   00:57:0D:88:FF:3F:CE:42:23:77:E9:19:74:F3:74:10:AC:39:38:A7
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer:       /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial:       01962FAB3EE6B350841B41F14C86A6E2C62C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
                          2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: PyOvxMykNmUoA9ziqGYr2FyWncL8asjmzUGSKLnn1oM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3e:e6:b3:50:84:1b:41:f1:4c:86:a6:e2:c6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=00570d88ff3fce422377e91974f37410ac3938a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:ad:85:9f:62:f3:45:b7:3e:51:d9:5c:d0:
                    ac:4d:70:64:05:49:ae:2c:c0:85:c8:d8:09:b8:11:
                    1a:1d:76:09:67:16:fb:b0:2d:99:07:0b:79:17:c5:
                    64:3d:30:8e:5e:9b:e7:6c:f3:fe:39:3d:a4:f6:bf:
                    9f:57:8b:a4:98:83:e5:fd:90:6d:2b:f7:43:b5:85:
                    74:84:c7:0a:45:fc:97:49:c2:d1:25:f7:ab:db:87:
                    cf:95:37:f2:eb:40:ed:77:d7:30:8d:96:e0:00:ff:
                    8b:7a:7d:9f:7f:6e:99:6c:4f:4d:58:f0:92:36:01:
                    e1:23:64:b2:00:17:44:5a:e0:d0:03:0a:63:23:11:
                    5a:7b:e4:cf:62:65:fd:79:44:b5:a4:06:12:54:1d:
                    46:db:43:b5:a5:f9:49:92:29:1b:2d:b4:b2:dd:30:
                    7a:e5:d7:1b:d7:ad:c7:2f:07:6d:82:f4:a2:b6:be:
                    10:fe:86:24:2e:4e:13:ab:ef:93:5e:36:b2:a3:c5:
                    22:07:79:42:38:58:44:64:44:3b:39:fd:0f:b5:d3:
                    78:c7:b3:d6:30:3c:08:82:64:fb:1b:c2:a4:54:b7:
                    e1:be:1c:77:85:6b:49:c9:cb:36:28:2e:aa:f0:b9:
                    dd:89:5a:f8:d0:65:52:f8:00:3c:4b:48:51:3b:59:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:0D:88:FF:3F:CE:42:23:77:E9:19:74:F3:74:10:AC:39:38:A7
            X509v3 Authority Key Identifier:
                keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:df:f1:03:e8:c2:b1:a5:06:38:06:72:e1:0d:88:0b:22:
         cb:f5:41:b7:f6:9c:e1:44:9d:fc:33:4b:1c:20:c0:f3:a1:c3:
         2f:16:7b:10:54:76:57:96:d7:23:4f:99:d4:b0:a2:ec:02:42:
         14:67:c7:c1:dd:0e:ab:33:fb:a0:12:84:e4:4c:89:05:f7:02:
         a5:23:9c:70:c7:59:d9:da:54:b3:2c:c3:bf:39:00:0d:0a:a3:
         47:21:94:c0:b1:9a:60:0f:4f:09:52:a2:43:fa:96:1b:27:c4:
         68:bc:b6:07:02:f5:72:0d:8c:9e:aa:25:a5:bc:92:2a:44:fb:
         5c:dc:f8:3a:8a:c5:5f:21:31:3b:eb:a0:72:73:a7:20:d2:cc:
         7f:cd:71:45:34:05:f1:63:d7:12:33:60:fd:e1:b3:60:06:d6:
         c3:df:44:28:a6:7a:e3:f0:f5:56:e0:a8:a8:42:51:f7:2b:66:
         11:41:d1:79:06:fa:3b:86:60:12:ae:ce:f9:1e:4c:9a:b2:53:
         f0:e0:76:dd:93:92:24:b9:8e:54:39:6e:26:01:05:54:a1:f1:
         20:be:d1:9e:5f:07:61:a1:2a:b1:6b:a1:53:e3:e0:7f:21:d0:
         9c:92:b8:ff:f9:f5:f0:c1:fc:16:91:2c:e9:d1:f5:86:cb:d8:
         4e:c0:c4:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqz7ms1CEG0HxTIam4sYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTA5NzBkZGJiNzYxOWNjODIxODZkZGI1MzZlYjRlODk4
NWQyZGUwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
EygwMDU3MGQ4OGZmM2ZjZTQyMjM3N2U5MTk3NGYzNzQxMGFjMzkzOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFOthZ9i80W3PlHZXNCsTXBkBUmu
LMCFyNgJuBEaHXYJZxb7sC2ZBwt5F8VkPTCOXpvnbPP+OT2k9r+fV4ukmIPl/ZBt
K/dDtYV0hMcKRfyXScLRJfer24fPlTfy60Dtd9cwjZbgAP+Len2ff26ZbE9NWPCS
NgHhI2SyABdEWuDQAwpjIxFae+TPYmX9eUS1pAYSVB1G20O1pflJkikbLbSy3TB6
5dcb163HLwdtgvSitr4Q/oYkLk4Tq++TXjayo8UiB3lCOFhEZEQ7Of0PtdN4x7PW
MDwIgmT7G8KkVLfhvhx3hWtJycs2KC6q8LndiVr40GVS+AA8S0hRO1lXWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABXDYj/P85CI3fpGXTzdBCsOTinMB8GA1UdIwQY
MBaAFBaQlw3bt2GcyCGG3bU2606JhdLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUt
Y2MwM2JkMzE1ZmY5LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUtY2MwM2JkMzE1ZmY5
LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRPf8QPo
wrGlBjgGcuENiAsiy/VBt/ac4USd/DNLHCDA86HDLxZ7EFR2V5bXI0+Z1LCi7AJC
FGfHwd0OqzP7oBKE5EyJBfcCpSOccMdZ2dpUsyzDvzkADQqjRyGUwLGaYA9PCVKi
Q/qWGyfEaLy2BwL1cg2MnqolpbySKkT7XNz4OorFXyExO+ugcnOnINLMf81xRTQF
8WPXEjNg/eGzYAbWw99EKKZ64/D1VuCoqEJR9ytmEUHReQb6O4ZgEq7O+R5MmrJT
8OB23ZOSJLmOVDluJgEFVKHxIL7Rnl8HYaEqsWuhU+PgfyHQnJK4//n18MH8FpEs
6dH1hsvYTsDEsA==
-----END CERTIFICATE-----