Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File:                     mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier:          2+urhhVRORwfV29OA/+WBgzT6bLEXvbOQyKnzvmnVcI=
Subject key identifier:   70:F3:7E:E6:B1:5B:29:2D:0C:ED:79:E4:CC:38:08:04:88:89:49:F2
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer:       /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial:       01962F073E9DB4979E7609AB64ED886D2991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number:          0E97
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: GM4FjF5iGCwwZrvF5OPLK7EJcKc.roa (hash: TNBXDdJILbU4GHZNotTea3UIv8zTS99ELWCKcINIuvk=)
                          2: cMpaW7cVC0wOITYTuoFWwIF5n44.roa (hash: 4diQ6JOCI3p/sKjl0F+QVRHdBT8AYRe0IlWz174rlII=)
                          3: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: e2dY89QnPTlM/OQ3tXWaeeM47SWm/U9oEsyBtdP2W40=)
                          4: q11-oGTlQe1qTZRc7a_TUm1IpLc.roa (hash: LcRd4esaozcBtrhM5u7DUki+tNg95Mjqju0EcrMRViM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3e:9d:b4:97:9e:76:09:ab:64:ed:88:6d:29:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=70f37ee6b15b292d0ced79e4cc380804888949f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:53:1b:77:26:00:3e:f6:6a:a6:3f:55:bd:a1:
                    8d:76:f0:35:9e:f7:88:46:bc:64:a2:4e:4f:db:f8:
                    08:fd:b2:bf:43:9f:c4:f2:94:aa:63:38:18:f8:4f:
                    95:48:3b:e3:78:36:c5:3e:5b:ca:32:bb:78:85:e9:
                    ad:42:05:88:e5:19:fb:3b:c0:65:8a:f4:e3:cc:d0:
                    e2:3e:1d:25:5a:4d:e7:98:d9:ec:eb:ef:3c:f3:50:
                    36:70:74:95:e8:b9:f9:84:54:9b:80:02:a1:8f:6b:
                    e2:35:fe:3f:27:88:4d:d1:a0:2b:9b:a3:b9:ad:66:
                    41:f8:7e:06:8a:63:f6:cb:b0:5f:01:9c:0e:35:77:
                    73:56:13:12:5a:65:d4:5b:60:a5:ac:a7:74:91:77:
                    a9:bf:7d:a2:ea:22:d0:64:2c:30:2e:0c:20:bc:45:
                    1e:a7:24:0a:f1:66:5c:97:15:42:5f:91:f5:d5:9a:
                    08:ab:63:fb:5e:ba:00:a4:cf:44:3a:8e:49:11:b6:
                    2b:e5:85:83:de:92:22:fe:6b:b0:6a:06:d6:d8:c7:
                    c0:39:b8:0f:df:99:a7:21:2e:fe:17:f4:cd:ff:ce:
                    d8:93:00:43:63:6f:99:3a:cb:e3:71:c2:d4:d4:69:
                    a1:e8:65:71:c3:10:db:f5:d2:33:0b:65:5e:20:6a:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F3:7E:E6:B1:5B:29:2D:0C:ED:79:E4:CC:38:08:04:88:89:49:F2
            X509v3 Authority Key Identifier:
                keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:57:a1:86:ab:eb:24:86:14:62:6e:35:db:08:3a:b9:4f:92:
         8b:d7:73:e0:0e:5f:84:bd:f2:9c:eb:57:1c:dd:b4:3f:75:ac:
         f3:18:30:36:18:3a:8a:26:4b:f3:53:f8:63:30:21:32:e6:b2:
         29:dc:75:85:4b:83:3f:77:e4:e4:0b:83:b8:1f:ec:5d:02:ef:
         19:b1:26:58:c1:5b:7b:00:d4:b1:89:89:58:a9:17:aa:23:47:
         6e:d7:15:23:a1:86:09:e2:16:1d:33:6e:1d:ef:81:5e:fa:42:
         98:77:79:c1:95:17:64:63:02:fd:c6:1f:59:c4:92:b4:2c:9e:
         95:11:75:9c:d2:34:64:84:27:7a:be:52:8c:93:82:ac:0a:ad:
         1e:95:d7:d6:5b:d4:a4:44:ea:a9:90:cd:39:58:d7:ca:91:74:
         9a:ad:3d:c8:07:23:b9:05:76:ea:bf:e8:f1:1b:60:b9:8e:b7:
         dd:85:60:ab:d8:15:96:5d:0a:68:7d:fb:26:cc:71:69:ab:ea:
         6e:62:f8:2b:d9:a1:61:b7:b4:ed:22:81:ba:4b:37:d5:94:ab:
         85:b5:06:6f:53:e8:af:98:25:ae:32:41:75:88:73:60:dc:46:
         7b:56:27:0c:fd:2a:69:e7:73:51:09:4e:82:1c:9d:6e:ba:1b:
         32:39:ca:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBz6dtJeedgmrZO2IbSmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGNiZGYwNjMyYTEwMTYxM2E4ZjZjOTQ0OWIyOWVkNDVj
MWE4NzIwHhcNMjUwNDEzMTIwMjA1WhcNMjUwNDE0MTIwMjA1WjAzMTEwLwYDVQQD
Eyg3MGYzN2VlNmIxNWIyOTJkMGNlZDc5ZTRjYzM4MDgwNDg4ODk0OWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lMbdyYAPvZqpj9VvaGNdvA1nveI
Rrxkok5P2/gI/bK/Q5/E8pSqYzgY+E+VSDvjeDbFPlvKMrt4hemtQgWI5Rn7O8Bl
ivTjzNDiPh0lWk3nmNns6+8881A2cHSV6Ln5hFSbgAKhj2viNf4/J4hN0aArm6O5
rWZB+H4GimP2y7BfAZwONXdzVhMSWmXUW2ClrKd0kXepv32i6iLQZCwwLgwgvEUe
pyQK8WZclxVCX5H11ZoIq2P7XroApM9EOo5JEbYr5YWD3pIi/muwagbW2MfAObgP
35mnIS7+F/TN/87YkwBDY2+ZOsvjccLU1Gmh6GVxwxDb9dIzC2VeIGr6HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDzfuaxWyktDO155Mw4CASIiUnyMB8GA1UdIwQY
MBaAFJncvfBjKhAWE6j2yUSbKe1FwahyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWR5OThHTXFFQllUcVBiSlJKc3A3VVhCcUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80ZjNkMWItODM2MS00MTFlLWExNDgt
ODg1OGE1NTlmMjUxLzEvbWR5OThHTXFFQllUcVBiSlJKc3A3VVhCcUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My80ZjNkMWItODM2MS00MTFlLWExNDgtODg1OGE1NTlmMjUx
LzEvbWR5OThHTXFFQllUcVBiSlJKc3A3VVhCcUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVehhqvr
JIYUYm412wg6uU+Si9dz4A5fhL3ynOtXHN20P3Ws8xgwNhg6iiZL81P4YzAhMuay
Kdx1hUuDP3fk5AuDuB/sXQLvGbEmWMFbewDUsYmJWKkXqiNHbtcVI6GGCeIWHTNu
He+BXvpCmHd5wZUXZGMC/cYfWcSStCyelRF1nNI0ZIQner5SjJOCrAqtHpXX1lvU
pETqqZDNOVjXypF0mq09yAcjuQV26r/o8RtguY633YVgq9gVll0KaH37Jsxxaavq
bmL4K9mhYbe07SKBuks31ZSrhbUGb1Por5glrjJBdYhzYNxGe1YnDP0qaedzUQlO
ghydbrobMjnKNg==
-----END CERTIFICATE-----