Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File:                     czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier:          YtxXe4iPrZT+VjPbvBLzGK3rvRqg615AP/qxaZf+at4=
Subject key identifier:   51:E1:F7:D0:AA:49:53:BA:FE:A0:7D:7B:B3:49:63:6C:A4:B2:77:03
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer:       /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial:       01962E9905BBEECC7333CEDA2824EB5BEF98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number:          03DA
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: t7DzBrMvoTHvsrTIExm2lH8XeASKZXOAKxK9Q9yMa5Q=)
                          2: x22xk2A-Apb8dLpmSadyKyJCkDo.roa (hash: gu74rPveiHXJ2A/NDXg+xf+4EJriNsSl+5m/7KHQAxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:05:bb:ee:cc:73:33:ce:da:28:24:eb:5b:ef:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=51e1f7d0aa4953bafea07d7bb349636ca4b27703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:78:83:99:68:65:a2:3f:a4:2d:da:5a:3a:
                    13:cd:95:39:e1:5c:0c:fa:75:bc:86:8a:7e:f9:3f:
                    06:38:23:c1:e0:88:e1:57:51:07:89:a9:0e:dd:d2:
                    b2:f0:5f:b2:c3:9e:72:e9:36:d4:20:1f:73:7d:82:
                    d4:08:84:13:e8:a7:b2:a6:be:02:ee:fa:f2:f9:5f:
                    85:be:c0:a1:3a:60:c0:80:f5:10:d8:b6:9e:4a:5b:
                    ff:89:ea:f9:7d:76:94:33:49:3a:ab:c0:83:07:b7:
                    a7:5e:0f:15:28:70:1c:bf:34:6b:d8:a3:6a:c8:09:
                    c9:1e:04:e8:ec:e1:ee:62:e9:19:94:02:28:68:de:
                    9f:ea:05:f7:9a:68:90:ee:70:04:62:2e:91:ad:18:
                    96:ed:5e:a1:c8:82:f3:5e:63:f4:ac:3e:42:57:3b:
                    c9:67:ec:bd:96:b3:ab:52:9e:d8:f0:3e:9e:82:79:
                    0d:41:7a:0e:8c:ae:14:88:7c:13:a7:0e:0b:ab:25:
                    e1:6f:04:4e:a0:ac:13:8d:32:df:b3:ff:a8:53:ac:
                    9a:79:47:9c:2f:d5:30:5e:e9:92:9f:16:a0:e9:e8:
                    bf:e7:da:db:8d:cd:1b:0b:52:70:b7:ef:a2:80:c6:
                    99:9a:dd:55:1a:70:16:2e:73:64:5d:23:42:ff:72:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:F7:D0:AA:49:53:BA:FE:A0:7D:7B:B3:49:63:6C:A4:B2:77:03
            X509v3 Authority Key Identifier:
                keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:47:20:10:6a:5b:4a:15:e4:36:80:88:20:ee:da:94:71:eb:
         af:42:b4:c4:b2:80:a5:b0:6b:15:9e:2e:ac:7c:bb:8d:20:ee:
         26:9d:a0:f2:c2:b6:b5:bb:f2:af:a7:2a:39:22:6a:8f:ff:92:
         a1:47:08:e3:5c:df:37:ec:15:ff:50:8d:3a:61:20:08:e2:75:
         2e:eb:40:2d:50:c4:04:62:ea:d1:a1:1c:62:10:41:33:0d:58:
         ca:1f:12:a2:0e:47:8a:06:f6:58:4b:51:45:9b:6f:45:a0:12:
         d9:68:fb:5c:36:1d:8f:10:74:c4:a1:78:00:04:b2:db:44:c9:
         a3:af:f1:15:37:36:0e:ff:81:26:9e:e6:b4:c9:93:01:06:63:
         e6:6a:fe:51:a7:00:fa:f9:8b:97:bb:1a:30:ab:99:82:8a:3d:
         81:9f:30:22:2e:c5:50:2d:40:7c:bc:a1:4a:4f:fc:04:d9:8c:
         c3:11:ba:da:93:99:c4:2d:b3:92:aa:dd:df:30:e5:d6:f3:8f:
         15:e1:58:06:a0:0c:8f:fa:62:0c:87:88:78:e2:b2:22:8b:c4:
         c4:66:04:a2:5e:25:c1:6d:fb:56:79:b9:ce:21:1a:48:96:a2:
         7c:97:3e:b6:60:3d:b0:bf:6b:a4:f6:d3:c9:c9:6e:d7:3e:1b:
         c8:da:2e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQW77sxzM87aKCTrW++YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzFkYmVkMDg5N2NjZTg1YzE0ODM3MWI0N2NjODA3ODJl
NWU3MmIwHhcNMjUwNDEzMTAwMTQyWhcNMjUwNDE0MTAwMTQyWjAzMTEwLwYDVQQD
Eyg1MWUxZjdkMGFhNDk1M2JhZmVhMDdkN2JiMzQ5NjM2Y2E0YjI3NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1J4g5loZaI/pC3aWjoTzZU54VwM
+nW8hop++T8GOCPB4IjhV1EHiakO3dKy8F+yw55y6TbUIB9zfYLUCIQT6Keypr4C
7vry+V+FvsChOmDAgPUQ2LaeSlv/ier5fXaUM0k6q8CDB7enXg8VKHAcvzRr2KNq
yAnJHgTo7OHuYukZlAIoaN6f6gX3mmiQ7nAEYi6RrRiW7V6hyILzXmP0rD5CVzvJ
Z+y9lrOrUp7Y8D6egnkNQXoOjK4UiHwTpw4LqyXhbwROoKwTjTLfs/+oU6yaeUec
L9UwXumSnxag6ei/59rbjc0bC1Jwt++igMaZmt1VGnAWLnNkXSNC/3IdFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHh99CqSVO6/qB9e7NJY2yksncDMB8GA1UdIwQY
MBaAFHMx2+0Il8zoXBSDcbR8yAeC5ecrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmIt
MDQ2NTA3MmU0MWEzLzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmItMDQ2NTA3MmU0MWEz
LzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0cgEGpb
ShXkNoCIIO7alHHrr0K0xLKApbBrFZ4urHy7jSDuJp2g8sK2tbvyr6cqOSJqj/+S
oUcI41zfN+wV/1CNOmEgCOJ1LutALVDEBGLq0aEcYhBBMw1Yyh8Sog5Higb2WEtR
RZtvRaAS2Wj7XDYdjxB0xKF4AASy20TJo6/xFTc2Dv+BJp7mtMmTAQZj5mr+UacA
+vmLl7saMKuZgoo9gZ8wIi7FUC1AfLyhSk/8BNmMwxG62pOZxC2zkqrd3zDl1vOP
FeFYBqAMj/piDIeIeOKyIovExGYEol4lwW37Vnm5ziEaSJaifJc+tmA9sL9rpPbT
yclu1z4byNouHQ==
-----END CERTIFICATE-----