Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File:                     _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier:          rjGhBE1/epssvLf2DxUDqOy4QBc6XA3OTVr+ApMI/iU=
Subject key identifier:   06:72:26:B5:DB:0D:B3:65:02:02:DB:96:42:32:CE:5D:D1:16:1A:20
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer:       /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial:       01962FAB306479BE6A0BCD24A979D534CBD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number:          0E8D
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
                          2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
                          3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: 6z4whpJtn0w9CLAfVpDCXjM/XkSnQHrUKHEuFDFU0Fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:30:64:79:be:6a:0b:cd:24:a9:79:d5:34:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=067226b5db0db3650202db964232ce5dd1161a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:67:df:76:45:db:c5:63:3a:ac:07:ea:ba:
                    d1:2a:f7:8c:b6:1f:ae:e3:dc:7b:fa:4b:05:d8:c6:
                    3b:e5:4d:78:3d:63:ac:85:62:3b:a0:4b:18:76:84:
                    ca:19:92:a3:c9:de:5d:bd:6e:af:be:91:6f:5b:6c:
                    68:9a:81:e5:76:70:a7:e0:f5:1c:13:6a:ba:b5:fd:
                    83:7a:0d:9c:78:e9:83:36:70:01:ac:f6:c9:5a:b4:
                    c7:f0:fa:56:7c:a2:e4:0f:29:9a:01:3b:4d:38:93:
                    04:b4:43:7f:89:de:d7:b3:c7:28:46:f1:3a:1b:5c:
                    ae:4c:46:cb:d8:e7:fe:a9:43:45:1f:10:e7:a0:da:
                    ae:97:ea:6d:94:61:96:0b:62:40:d6:d9:8e:96:a2:
                    7b:7d:28:c3:5b:34:6f:9e:c1:8a:c4:5e:f6:c1:b1:
                    13:0b:cb:db:11:df:6f:b0:7e:06:89:b0:cf:35:b8:
                    a1:b9:62:ef:03:a3:6e:b5:14:40:87:4f:73:ee:03:
                    dc:29:cb:b1:e7:92:28:bc:5c:b0:9b:33:3a:33:c3:
                    78:9c:d5:33:3d:4e:70:fd:e7:11:2b:cb:e1:fe:b5:
                    24:02:fc:16:ef:31:15:b6:ca:0c:f1:0f:e8:22:1f:
                    70:cb:86:9d:b7:19:aa:1a:ea:cd:70:f6:d1:4e:de:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:26:B5:DB:0D:B3:65:02:02:DB:96:42:32:CE:5D:D1:16:1A:20
            X509v3 Authority Key Identifier:
                keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2f:ec:8c:c0:31:29:25:53:a3:e4:2d:cb:3d:bd:d3:c3:c1:
         d6:2f:11:10:d3:4f:1d:f0:59:30:97:c1:e0:02:2c:ea:36:5a:
         89:8b:6a:91:17:d2:0f:55:49:de:02:95:4d:5b:83:b2:38:4e:
         38:2d:f4:4c:38:37:36:37:5b:72:92:7a:7c:e9:76:0f:66:7d:
         4f:78:e4:eb:57:99:5b:a7:7f:8c:d0:fc:5e:a8:cd:c1:e1:f7:
         ff:d7:46:b6:6f:90:b0:a6:7d:f5:13:ee:c2:7f:ab:ed:73:be:
         67:3b:08:3e:a1:02:58:fe:43:e7:d3:bb:49:39:af:d4:b0:07:
         eb:8d:54:a1:c8:ca:38:c6:43:40:0d:de:9e:dc:f3:df:2c:aa:
         07:2b:ea:1a:dd:0f:96:6a:f4:fd:69:9d:40:51:4f:fd:b9:9f:
         80:01:a0:4b:02:28:6d:6d:77:51:08:c5:72:fd:f4:45:b5:93:
         6e:08:b8:84:57:e0:7d:b3:4c:ff:5c:8c:22:98:83:b3:5b:77:
         f7:8f:ed:2d:ea:07:ea:b3:c8:38:5c:e1:e1:15:09:99:e9:37:
         e9:c6:36:4e:42:af:d9:d7:37:6e:bb:b5:95:90:8d:b6:e3:80:
         16:1f:a1:1f:05:5d:02:e1:f4:da:24:d5:ac:ff:89:5c:43:2d:
         e1:7e:d4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzBkeb5qC80kqXnVNMvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjUwNDEzMTUwMTEwWhcNMjUwNDE0MTUwMTEwWjAzMTEwLwYDVQQD
EygwNjcyMjZiNWRiMGRiMzY1MDIwMmRiOTY0MjMyY2U1ZGQxMTYxYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/xn33ZF28VjOqwH6rrRKveMth+u
49x7+ksF2MY75U14PWOshWI7oEsYdoTKGZKjyd5dvW6vvpFvW2xomoHldnCn4PUc
E2q6tf2Deg2ceOmDNnABrPbJWrTH8PpWfKLkDymaATtNOJMEtEN/id7Xs8coRvE6
G1yuTEbL2Of+qUNFHxDnoNqul+ptlGGWC2JA1tmOlqJ7fSjDWzRvnsGKxF72wbET
C8vbEd9vsH4GibDPNbihuWLvA6NutRRAh09z7gPcKcux55IovFywmzM6M8N4nNUz
PU5w/ecRK8vh/rUkAvwW7zEVtsoM8Q/oIh9wy4adtxmqGurNcPbRTt523QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZyJrXbDbNlAgLblkIyzl3RFhogMB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWS/sjMAx
KSVTo+Qtyz2908PB1i8RENNPHfBZMJfB4AIs6jZaiYtqkRfSD1VJ3gKVTVuDsjhO
OC30TDg3NjdbcpJ6fOl2D2Z9T3jk61eZW6d/jND8XqjNweH3/9dGtm+QsKZ99RPu
wn+r7XO+ZzsIPqECWP5D59O7STmv1LAH641UocjKOMZDQA3entzz3yyqByvqGt0P
lmr0/WmdQFFP/bmfgAGgSwIobW13UQjFcv30RbWTbgi4hFfgfbNM/1yMIpiDs1t3
94/tLeoH6rPIOFzh4RUJmek36cY2TkKv2dc3bru1lZCNtuOAFh+hHwVdAuH02iTV
rP+JXEMt4X7UzA==
-----END CERTIFICATE-----