Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File:                     T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier:          HJLphNNVaIqLVqaAZhELI5X1WOTfQ0yZNVm8BF1Zf64=
Subject key identifier:   40:A1:95:43:4D:E8:96:04:FF:A6:98:63:73:5C:71:8D:82:30:3B:CB
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer:       /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial:       01962F0642BBCB3F38C8C7B2F8B5DB109883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number:          0195
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
                          2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: EE3C0Wud38BWE6kJB6AGEqDWdtNXVQvKuAP2x2vQ6aQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:42:bb:cb:3f:38:c8:c7:b2:f8:b5:db:10:98:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=40a195434de89604ffa69863735c718d82303bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3e:44:51:87:f0:08:2e:54:14:de:49:f8:a6:
                    0a:01:fd:1c:28:b4:d3:85:ec:9b:f3:0f:40:ec:e4:
                    d5:cc:b5:dc:62:2e:a5:19:44:01:8d:ae:8c:25:1b:
                    d2:13:5e:4d:e5:6c:93:a2:1c:3f:72:88:8c:a2:7d:
                    79:99:8c:bb:dc:33:6e:bb:73:cf:17:e4:75:d5:1c:
                    08:e4:92:15:ca:14:ee:75:2d:6a:81:d9:ed:08:f5:
                    2d:6b:bc:83:18:66:ab:8a:c7:8f:87:fa:b1:b3:40:
                    9d:9a:95:ef:14:44:49:ce:00:19:a7:b8:3c:96:5d:
                    d5:7c:a4:65:45:07:63:03:e6:91:ae:6f:79:e6:50:
                    b4:e8:21:83:2c:77:a7:f3:37:1b:ae:3a:c8:9e:7b:
                    c0:af:c2:41:0e:1a:d1:52:d4:ec:35:cc:0d:e4:e0:
                    e0:f5:a7:81:f3:aa:7d:fc:0b:3a:b2:90:1d:77:e1:
                    17:86:58:33:68:82:a0:02:6e:0a:a2:34:c1:ff:ca:
                    97:b8:f4:34:12:3e:bc:00:6b:f6:61:0c:52:0a:3e:
                    49:ac:f8:48:96:ee:36:66:df:e3:85:90:bd:2a:15:
                    6c:d2:d1:f7:f1:f0:c2:cf:59:12:c8:20:ef:7c:d4:
                    e1:b9:e2:1c:64:18:9e:e8:cf:99:7b:30:39:44:6b:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A1:95:43:4D:E8:96:04:FF:A6:98:63:73:5C:71:8D:82:30:3B:CB
            X509v3 Authority Key Identifier:
                keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:57:45:0a:cb:c9:c6:07:7f:e7:54:65:8a:38:c4:31:70:
         e5:ff:f6:1d:74:ce:3d:e0:6c:38:31:6b:3f:cc:59:6c:fb:73:
         62:8c:ca:55:6b:ce:06:c7:3b:e7:ec:3d:91:0f:fe:90:2c:e3:
         58:36:d1:76:68:d9:6e:1a:d0:93:84:e2:5c:be:7c:8d:f6:23:
         ba:5f:2a:ce:67:85:13:ca:9b:69:ab:eb:61:8f:3c:30:06:71:
         c2:c3:12:00:dc:81:ee:99:82:56:7d:11:5e:2a:3c:ca:57:84:
         91:7e:eb:32:fb:1e:56:f5:29:dd:7a:00:eb:5b:3b:97:0e:05:
         70:5f:3f:2d:97:b8:c4:08:00:51:fa:4c:13:27:e6:09:ee:3c:
         1d:11:f2:48:7c:16:43:88:d1:e9:6c:46:59:1b:de:f5:14:6d:
         6b:6c:c6:47:3a:3a:6a:7a:8c:2f:10:74:4a:fe:a0:59:73:c1:
         75:d8:bb:67:0a:04:ef:de:f7:f6:53:37:5e:98:2e:1a:36:ef:
         5e:ce:d1:79:6c:4e:d9:52:5b:f5:43:9c:65:38:5d:14:60:1d:
         ca:70:df:98:70:88:7d:56:66:e5:dd:bc:d2:1f:c3:e0:60:c6:
         9e:6f:a8:69:14:61:d2:07:d8:45:f1:5b:02:d6:0b:79:ff:75:
         37:5e:fb:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBkK7yz84yMey+LXbEJiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDIwN2ZjNWFkMDc3M2MzZDhlOTNlNGIzMDYxOWMxM2Jh
ODFjYjQwHhcNMjUwNDEzMTIwMTAxWhcNMjUwNDE0MTIwMTAxWjAzMTEwLwYDVQQD
Eyg0MGExOTU0MzRkZTg5NjA0ZmZhNjk4NjM3MzVjNzE4ZDgyMzAzYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz5EUYfwCC5UFN5J+KYKAf0cKLTT
heyb8w9A7OTVzLXcYi6lGUQBja6MJRvSE15N5WyTohw/coiMon15mYy73DNuu3PP
F+R11RwI5JIVyhTudS1qgdntCPUta7yDGGarisePh/qxs0CdmpXvFERJzgAZp7g8
ll3VfKRlRQdjA+aRrm955lC06CGDLHen8zcbrjrInnvAr8JBDhrRUtTsNcwN5ODg
9aeB86p9/As6spAdd+EXhlgzaIKgAm4KojTB/8qXuPQ0Ej68AGv2YQxSCj5JrPhI
lu42Zt/jhZC9KhVs0tH38fDCz1kSyCDvfNThueIcZBie6M+ZezA5RGtWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEChlUNN6JYE/6aYY3NccY2CMDvLMB8GA1UdIwQY
MBaAFE/SB/xa0Hc8PY6T5LMGGcE7qBy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUt
NDdkZmRmMmIwZmQ2LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZmY0NjUtYjU0Ny00MTUyLWE3NjUtNDdkZmRmMmIwZmQ2
LzEvVDlJSF9GclFkenc5anBQa3N3WVp3VHVvSExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUg1XRQrL
ycYHf+dUZYo4xDFw5f/2HXTOPeBsODFrP8xZbPtzYozKVWvOBsc75+w9kQ/+kCzj
WDbRdmjZbhrQk4TiXL58jfYjul8qzmeFE8qbaavrYY88MAZxwsMSANyB7pmCVn0R
Xio8yleEkX7rMvseVvUp3XoA61s7lw4FcF8/LZe4xAgAUfpMEyfmCe48HRHySHwW
Q4jR6WxGWRve9RRta2zGRzo6anqMLxB0Sv6gWXPBddi7ZwoE79739lM3XpguGjbv
Xs7ReWxO2VJb9UOcZThdFGAdynDfmHCIfVZm5d280h/D4GDGnm+oaRRh0gfYRfFb
AtYLef91N177Ag==
-----END CERTIFICATE-----