Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File:                     AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier:          2WtYIwH/DMmEfXAaQFN7vEfZPMBPfkQ6ifx6fNPga+s=
Subject key identifier:   9A:8F:14:B3:DE:15:8B:D1:89:65:35:14:22:7B:B9:6E:9C:7A:15:FC
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer:       /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial:       01962DF3F428E2EE999AA018D0F8C0E56101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number:          11FF
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: r7PuEOm+IMCHlripGZotidvJBNVkT069insI45QkJNo=)
                          2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f4:28:e2:ee:99:9a:a0:18:d0:f8:c0:e5:61:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=9a8f14b3de158bd189653514227bb96e9c7a15fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:5c:2d:ee:57:d2:6a:79:0a:a6:4c:1c:ce:
                    a8:61:f9:0c:fa:6a:97:1d:68:51:bb:1a:15:36:e5:
                    91:1d:73:4b:45:d9:be:5c:c4:4d:ae:ac:52:9c:88:
                    e6:4c:18:4c:f1:92:59:95:d1:8d:4b:d8:23:4b:3e:
                    9e:0b:ee:17:c1:93:73:20:5a:cc:8e:04:82:a1:a5:
                    36:8c:1f:e8:54:fc:5a:c3:4f:6a:a8:00:aa:db:42:
                    21:bf:73:c4:d0:16:28:7c:5b:f3:e2:3f:0d:ec:21:
                    12:63:27:62:11:ed:c6:0d:0b:d7:1b:60:d6:01:6d:
                    43:bb:5c:03:46:ac:6b:fd:5e:0e:1e:be:3f:96:e3:
                    5a:ab:4a:9c:0f:42:7e:ee:bc:a7:14:52:68:d4:63:
                    c3:10:a0:08:ad:6a:a2:e7:e9:b2:9b:51:39:56:bf:
                    7f:79:ab:3f:95:44:b5:a2:27:f1:0a:a8:cb:2a:7f:
                    35:43:65:21:58:97:a9:43:77:de:f5:0e:2c:13:3b:
                    56:39:e5:20:f3:4c:4d:b7:2a:ac:c5:b3:62:42:c7:
                    64:8c:e8:db:38:06:ac:1d:97:93:40:d8:17:d7:a8:
                    88:fd:ca:03:f1:35:6c:29:4a:91:01:31:cc:30:53:
                    78:af:86:57:bb:6b:16:6a:4b:10:3d:69:c0:c1:ef:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8F:14:B3:DE:15:8B:D1:89:65:35:14:22:7B:B9:6E:9C:7A:15:FC
            X509v3 Authority Key Identifier:
                keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:bc:aa:e8:04:1c:77:cf:a5:13:24:93:5c:e8:90:15:98:
         9b:61:da:20:df:b9:8d:66:1f:0f:13:17:58:e3:af:e6:33:ab:
         e9:6e:1d:dc:95:fc:75:67:19:66:f4:d4:7f:e1:0a:ce:2d:8f:
         87:15:af:f0:7f:6f:2c:9c:f0:a0:29:49:da:85:47:33:58:e3:
         b3:11:09:df:5b:24:c9:de:d9:e2:57:a5:4f:2f:4f:33:ef:93:
         2a:cf:5c:0e:8d:20:42:2a:31:08:17:38:69:98:47:0d:dd:0a:
         96:7d:29:0d:af:51:32:37:86:95:03:c6:42:dc:02:fe:fc:88:
         6b:39:26:5a:e5:88:fc:0e:2d:87:e8:55:87:9a:ae:50:fb:f0:
         e6:ed:a2:a3:b6:98:d7:f3:ae:31:9b:cb:30:15:a2:25:52:8e:
         2e:7a:8a:24:ab:d8:f1:64:f9:3e:fe:9d:ec:89:97:19:26:13:
         b1:16:7b:38:e5:12:97:b5:0e:ba:8e:8b:86:e1:28:11:bd:a9:
         64:17:3c:92:0f:36:1d:18:f3:f0:a7:3e:13:aa:6c:eb:62:72:
         9b:c9:b7:57:0a:4a:31:e1:ee:e7:47:9e:b6:91:b4:08:cd:66:
         7c:a3:f6:bd:0d:a0:8c:40:cd:54:4d:04:eb:a0:9c:f0:54:a6:
         24:5c:a9:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/Qo4u6ZmqAY0PjA5WEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWNmZWUzYzJiNmVhNDlkMjllMTAzZTIzYTUyMmM2MmUz
ODUzMTEwHhcNMjUwNDEzMDcwMTI0WhcNMjUwNDE0MDcwMTI0WjAzMTEwLwYDVQQD
Eyg5YThmMTRiM2RlMTU4YmQxODk2NTM1MTQyMjdiYjk2ZTljN2ExNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaJcLe5X0mp5CqZMHM6oYfkM+mqX
HWhRuxoVNuWRHXNLRdm+XMRNrqxSnIjmTBhM8ZJZldGNS9gjSz6eC+4XwZNzIFrM
jgSCoaU2jB/oVPxaw09qqACq20Ihv3PE0BYofFvz4j8N7CESYydiEe3GDQvXG2DW
AW1Du1wDRqxr/V4OHr4/luNaq0qcD0J+7rynFFJo1GPDEKAIrWqi5+mym1E5Vr9/
eas/lUS1oifxCqjLKn81Q2UhWJepQ3fe9Q4sEztWOeUg80xNtyqsxbNiQsdkjOjb
OAasHZeTQNgX16iI/coD8TVsKUqRATHMMFN4r4ZXu2sWaksQPWnAwe/wvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqPFLPeFYvRiWU1FCJ7uW6cehX8MB8GA1UdIwQY
MBaAFAFc/uPCtupJ0p4QPiOlIsYuOFMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2Yt
NGJmNzZjZTM1NjFkLzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2YtNGJmNzZjZTM1NjFk
LzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKea8qugE
HHfPpRMkk1zokBWYm2HaIN+5jWYfDxMXWOOv5jOr6W4d3JX8dWcZZvTUf+EKzi2P
hxWv8H9vLJzwoClJ2oVHM1jjsxEJ31skyd7Z4lelTy9PM++TKs9cDo0gQioxCBc4
aZhHDd0Kln0pDa9RMjeGlQPGQtwC/vyIazkmWuWI/A4th+hVh5quUPvw5u2io7aY
1/OuMZvLMBWiJVKOLnqKJKvY8WT5Pv6d7ImXGSYTsRZ7OOUSl7UOuo6LhuEoEb2p
ZBc8kg82HRjz8Kc+E6ps62Jym8m3VwpKMeHu50eetpG0CM1mfKP2vQ2gjEDNVE0E
66Cc8FSmJFypcw==
-----END CERTIFICATE-----