Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File:                     IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier:          GxD/R4alVxp3sywgSWcwlexb5oyXGnUknONnTZMRg/k=
Subject key identifier:   B3:00:22:1C:A5:7D:95:86:AF:29:7F:94:F3:9E:95:3C:49:3E:85:68
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer:       /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial:       01962ECF8115B3D43707D34CD30EDA4EBE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number:          0F51
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: aOmcE8G/O8fsVnMudBmaM7GRkCOtYSXLXvTJdi4Fn4E=)
                          2: g3nTkjVHfCtnRgD2iYnxWWRZOIk.roa (hash: 8O+KUIsUB5NmSou/PBbO/5fJhmgcsiY9mA8eGOd3AB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:81:15:b3:d4:37:07:d3:4c:d3:0e:da:4e:be:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=b300221ca57d9586af297f94f39e953c493e8568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:a0:17:55:71:c3:37:f8:0d:41:50:8d:6b:
                    30:8d:23:d7:07:4c:92:ef:77:7e:25:6e:3c:22:94:
                    fc:55:ea:2d:09:62:dd:ba:65:01:55:c4:05:e0:65:
                    68:07:9f:0d:1f:b2:59:0b:b8:31:b8:11:47:82:3c:
                    ce:be:d9:4f:29:f7:58:67:f9:87:02:af:5e:c7:ff:
                    c0:18:59:da:91:45:5e:61:bf:2f:82:52:6c:21:b0:
                    0d:49:13:11:56:ce:a6:c9:85:f4:c8:e7:8f:42:f3:
                    3e:8d:86:a8:03:5c:48:7e:e5:41:01:8f:2e:ea:04:
                    6a:c5:b1:53:34:7d:4c:39:18:c5:eb:4a:50:64:5a:
                    c4:6d:86:e1:54:f7:6d:88:4a:19:ff:01:3a:e2:b7:
                    1c:d3:88:00:9e:0f:a7:3f:84:38:9f:7a:68:4b:71:
                    04:13:45:e2:26:61:98:e0:17:de:ad:2c:fd:cd:30:
                    91:2a:fe:1b:84:bc:29:66:5a:b4:ff:c5:8d:18:7f:
                    0a:ad:d3:ad:c4:bc:c5:7f:11:fb:95:c4:e9:75:cb:
                    e3:29:eb:5a:36:0d:97:62:fa:51:55:a4:e7:11:64:
                    b9:8f:93:0b:1b:55:5b:07:0a:38:db:be:0d:45:16:
                    d6:fe:9f:24:6a:3f:dc:18:7a:4d:88:8b:1f:33:08:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:22:1C:A5:7D:95:86:AF:29:7F:94:F3:9E:95:3C:49:3E:85:68
            X509v3 Authority Key Identifier:
                keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:67:17:ca:df:5f:8d:15:13:cd:b4:fb:48:4f:1c:2a:3c:
         17:03:02:1f:57:4f:59:04:4b:f5:91:16:df:26:0e:aa:e8:f6:
         a8:da:21:6d:fa:7e:b7:4c:18:e1:17:94:87:57:b7:fa:82:54:
         94:cb:67:1d:9e:60:74:b5:83:1d:9c:9e:8f:54:f2:16:33:49:
         0c:85:0e:a2:a3:ef:50:88:4a:40:a3:78:c4:67:00:eb:dc:57:
         a4:8b:b1:27:38:1c:db:32:5a:d8:0f:97:1d:af:0e:ed:c4:50:
         d7:d9:6a:c0:6a:2e:6e:d7:e9:57:36:f5:e3:d5:39:04:d5:8a:
         3d:75:92:1f:0f:d4:ff:27:eb:50:ac:50:9b:f7:96:04:aa:05:
         95:88:68:24:04:77:a7:bf:9d:43:8a:85:fb:f1:0a:31:a6:3d:
         ee:07:24:46:1c:36:6d:75:2e:8b:c7:b4:c5:25:5d:d2:4c:26:
         97:2b:8d:32:55:96:8b:66:3b:1e:1f:6c:3c:5d:02:c9:3e:e7:
         c3:b8:f8:19:f6:0c:16:73:70:10:62:97:1d:5f:5a:f6:9a:37:
         d6:0e:ee:e7:bb:f8:cb:b0:d1:2b:31:df:17:39:30:8f:6e:b6:
         57:14:54:33:c7:5a:fc:5e:8a:ec:78:4a:b7:45:5e:53:3f:94:
         97:a6:5f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4EVs9Q3B9NM0w7aTr53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODJjZDNhYzVjNGRiNjdlYTczMWE2YjcxOThiN2Q2ZTRm
ZjExNWMwHhcNMjUwNDEzMTEwMTEzWhcNMjUwNDE0MTEwMTEzWjAzMTEwLwYDVQQD
EyhiMzAwMjIxY2E1N2Q5NTg2YWYyOTdmOTRmMzllOTUzYzQ5M2U4NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKugF1Vxwzf4DUFQjWswjSPXB0yS
73d+JW48IpT8VeotCWLdumUBVcQF4GVoB58NH7JZC7gxuBFHgjzOvtlPKfdYZ/mH
Aq9ex//AGFnakUVeYb8vglJsIbANSRMRVs6myYX0yOePQvM+jYaoA1xIfuVBAY8u
6gRqxbFTNH1MORjF60pQZFrEbYbhVPdtiEoZ/wE64rcc04gAng+nP4Q4n3poS3EE
E0XiJmGY4BferSz9zTCRKv4bhLwpZlq0/8WNGH8KrdOtxLzFfxH7lcTpdcvjKeta
Ng2XYvpRVaTnEWS5j5MLG1VbBwo4274NRRbW/p8kaj/cGHpNiIsfMwgt1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMAIhylfZWGryl/lPOelTxJPoVoMB8GA1UdIwQY
MBaAFCGCzTrFxNtn6nMaa3GYt9bk/xFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYt
NDY2M2JjOWRhOTY0LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYtNDY2M2JjOWRhOTY0
LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/pnF8rf
X40VE820+0hPHCo8FwMCH1dPWQRL9ZEW3yYOquj2qNohbfp+t0wY4ReUh1e3+oJU
lMtnHZ5gdLWDHZyej1TyFjNJDIUOoqPvUIhKQKN4xGcA69xXpIuxJzgc2zJa2A+X
Ha8O7cRQ19lqwGoubtfpVzb149U5BNWKPXWSHw/U/yfrUKxQm/eWBKoFlYhoJAR3
p7+dQ4qF+/EKMaY97gckRhw2bXUui8e0xSVd0kwmlyuNMlWWi2Y7Hh9sPF0CyT7n
w7j4GfYMFnNwEGKXHV9a9po31g7u57v4y7DRKzHfFzkwj262VxRUM8da/F6K7HhK
t0VeUz+Ul6ZfOQ==
-----END CERTIFICATE-----