Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File:                     _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier:          u0Xkb5NkftZidKd34HAga8YMLiOehBrWXgpw2ekJTds=
Subject key identifier:   6A:81:B4:32:68:A9:E2:89:20:B7:DE:1B:E1:C3:9C:99:3B:C3:C8:6F
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer:       /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial:       01962F74861F80A4EAFEFCAFC15E2E2F49C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number:          02FD
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
                          2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: bsJeohFAEVaO4G9y2L+LOAH7f7u2wId2k4PeeP9GA0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:1f:80:a4:ea:fe:fc:af:c1:5e:2e:2f:49:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=6a81b43268a9e28920b7de1be1c39c993bc3c86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:9c:c7:1b:6e:65:c6:0c:87:1d:0b:6c:f0:
                    98:6a:0a:b7:0a:f3:7e:f3:42:c7:75:34:e3:19:ac:
                    93:a9:8e:9e:34:f8:ce:3a:21:7b:48:c5:fb:4e:44:
                    a1:e9:08:b3:5a:be:82:f8:2f:b5:75:54:0f:81:55:
                    e9:6f:59:44:15:ad:62:8b:40:8a:71:76:2e:b3:83:
                    e0:53:2d:4d:d3:27:49:72:2b:bc:46:b3:3c:13:66:
                    67:b4:9a:13:5c:16:31:ea:70:85:ca:e7:05:41:82:
                    fa:b5:24:67:73:73:a9:ee:6c:74:7a:ad:3e:31:96:
                    18:b0:6a:1f:73:28:57:b0:2d:f7:54:94:4d:c7:b7:
                    d0:7c:74:49:ac:75:ff:bf:00:5a:0b:b3:69:c5:6d:
                    7f:e1:53:57:29:25:3d:b6:1b:12:f3:73:81:fc:f7:
                    e2:93:ef:50:d5:f3:21:f7:4b:5d:1a:56:59:de:98:
                    e9:07:41:12:91:d0:1e:56:f6:52:55:5b:82:91:d2:
                    52:29:89:f5:bb:df:ff:bd:3a:43:bf:3b:1c:16:1f:
                    e5:ab:25:a3:45:f0:f0:f8:ab:84:ad:79:0d:b5:1d:
                    b1:37:b0:22:d7:74:6b:d7:61:62:c4:12:40:84:57:
                    a1:e0:05:15:4d:8f:77:37:e6:f0:48:57:7f:c9:54:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:81:B4:32:68:A9:E2:89:20:B7:DE:1B:E1:C3:9C:99:3B:C3:C8:6F
            X509v3 Authority Key Identifier:
                keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:81:08:37:b9:e6:43:8d:d4:ca:c5:dc:d1:f5:a7:14:3c:
         af:e4:13:ad:b0:e4:0d:6a:55:2e:9d:31:a8:7e:04:4e:d7:9b:
         ef:1f:49:38:13:d8:4b:f3:8f:1a:46:5e:7e:a9:ab:a3:b9:b7:
         f5:91:3a:90:f5:e5:78:38:f0:16:8a:57:2f:46:28:b9:9e:d2:
         af:31:0e:30:95:55:cc:b5:7c:29:ad:58:09:14:d9:8f:f9:bc:
         1b:03:8b:06:bf:e3:29:29:f1:8b:67:f7:fb:d0:43:b4:74:97:
         ea:9f:38:10:13:87:bf:cd:ef:26:1e:ec:e4:80:67:51:78:74:
         0c:3d:64:52:51:74:6b:c0:05:94:34:38:ea:5e:47:aa:29:16:
         d0:3f:e1:22:df:b1:99:74:f8:81:45:06:43:d2:85:73:4a:c8:
         f2:6c:e5:ad:c5:cc:5d:31:dd:48:0b:af:8c:8d:2b:e9:50:9c:
         ef:84:e7:47:71:95:0e:3a:24:fb:1d:c7:a7:27:f5:69:6e:44:
         8c:af:4e:d6:2a:6c:5e:d4:74:e8:cb:22:8b:55:f6:d0:e4:34:
         2c:d8:12:3b:c3:7e:dd:61:85:e3:a8:5a:ce:7c:4a:e9:66:00:
         be:b7:e2:e8:4e:7e:b7:bc:38:74:17:36:1b:d0:94:d8:37:eb:
         3e:4a:f7:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIYfgKTq/vyvwV4uL0nEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2
MmU4OWYwHhcNMjUwNDEzMTQwMTI3WhcNMjUwNDE0MTQwMTI3WjAzMTEwLwYDVQQD
Eyg2YTgxYjQzMjY4YTllMjg5MjBiN2RlMWJlMWMzOWM5OTNiYzNjODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWecxxtuZcYMhx0LbPCYagq3CvN+
80LHdTTjGayTqY6eNPjOOiF7SMX7TkSh6QizWr6C+C+1dVQPgVXpb1lEFa1ii0CK
cXYus4PgUy1N0ydJciu8RrM8E2ZntJoTXBYx6nCFyucFQYL6tSRnc3Op7mx0eq0+
MZYYsGofcyhXsC33VJRNx7fQfHRJrHX/vwBaC7NpxW1/4VNXKSU9thsS83OB/Pfi
k+9Q1fMh90tdGlZZ3pjpB0ESkdAeVvZSVVuCkdJSKYn1u9//vTpDvzscFh/lqyWj
RfDw+KuErXkNtR2xN7Ai13Rr12FixBJAhFeh4AUVTY93N+bwSFd/yVQirwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqBtDJoqeKJILfeG+HDnJk7w8hvMB8GA1UdIwQY
MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt
N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl
LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfumBCDe5
5kON1MrF3NH1pxQ8r+QTrbDkDWpVLp0xqH4ETteb7x9JOBPYS/OPGkZefqmro7m3
9ZE6kPXleDjwFopXL0YouZ7SrzEOMJVVzLV8Ka1YCRTZj/m8GwOLBr/jKSnxi2f3
+9BDtHSX6p84EBOHv83vJh7s5IBnUXh0DD1kUlF0a8AFlDQ46l5HqikW0D/hIt+x
mXT4gUUGQ9KFc0rI8mzlrcXMXTHdSAuvjI0r6VCc74TnR3GVDjok+x3Hpyf1aW5E
jK9O1ipsXtR06Msii1X20OQ0LNgSO8N+3WGF46haznxK6WYAvrfi6E5+t7w4dBc2
G9CU2DfrPkr3YA==
-----END CERTIFICATE-----