Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          BZoUQLaFsaCfnBIT3/+dEhYyLNOxq9H4CpOBNDuW0No=
Subject key identifier:   99:AD:3D:FC:FB:EE:CF:0B:58:2A:60:7F:F3:88:B3:2A:90:B6:78:7F
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       01962DF3C6856785F35B2C6DE4B9FC761544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: D9pFICMxQjzlVIETiGIPWLpQJ4hqFfqZ8wN3uop58S0=)
                          2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c6:85:67:85:f3:5b:2c:6d:e4:b9:fc:76:15:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=99ad3dfcfbeecf0b582a607ff388b32a90b6787f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:ee:18:bf:a9:06:e1:2b:c2:fe:b5:c1:d5:
                    6c:89:d6:57:4c:86:d3:38:16:be:d0:fe:7d:92:9c:
                    18:4a:95:5b:91:63:df:25:32:08:a2:76:d0:9f:e1:
                    0c:2c:6b:88:90:21:05:36:18:d8:69:98:b1:09:f8:
                    d2:ce:25:c2:27:6c:7b:95:ee:1c:b6:65:ee:79:4a:
                    42:7b:1f:1e:83:be:87:a9:2f:00:22:a8:75:12:53:
                    7a:89:36:d8:85:71:88:6c:88:d2:f5:da:1b:ac:cb:
                    03:8c:83:7d:17:3e:33:8c:95:6f:6b:0e:b1:14:62:
                    0e:20:19:f7:42:93:1a:9d:e7:e4:40:45:19:ad:50:
                    30:24:e5:9d:d9:55:eb:67:a4:e1:ed:dd:1b:55:b7:
                    77:ab:07:65:c1:e1:3d:d6:cb:7a:29:b7:6a:e3:1f:
                    91:56:6b:42:a9:46:c1:4a:4a:1d:db:d7:64:f8:9f:
                    2c:9b:59:7c:44:e7:79:0f:c5:34:a6:24:b8:41:30:
                    b3:7f:5c:a4:fe:74:7f:00:99:ba:8b:98:2f:4e:ff:
                    da:84:40:ae:16:d0:6e:9d:d0:dc:c9:93:82:5c:53:
                    d8:78:c1:ae:d5:92:de:a7:60:a1:5a:b1:b8:b7:7f:
                    74:bc:19:b7:64:5e:cd:7b:65:35:08:e0:39:d7:83:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:3D:FC:FB:EE:CF:0B:58:2A:60:7F:F3:88:B3:2A:90:B6:78:7F
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:75:33:56:0d:9c:fd:9a:c3:80:d8:82:79:c0:5c:51:0f:68:
         b6:2f:a5:8e:53:86:fe:b7:0d:62:a0:30:ce:50:d4:f9:88:05:
         31:fe:20:0e:15:e3:28:6d:ac:86:f0:7e:48:45:6f:c8:38:81:
         74:22:cf:75:a5:b3:b6:30:ea:17:f5:56:6e:da:cf:fd:ae:ab:
         67:32:ff:09:c4:d2:4c:56:ab:f2:35:ba:32:13:6d:a2:83:46:
         21:f1:f4:c9:40:66:ac:0d:f8:7c:c9:0a:f6:ee:80:64:93:44:
         29:a1:a0:9a:9e:8e:00:d4:ae:f5:a3:bb:8e:f3:b0:5b:49:bf:
         9a:0c:8d:a9:94:37:0c:43:39:6d:2c:c6:e7:1c:b1:8b:b6:8d:
         1b:8e:4b:12:5d:d2:e8:ef:cd:0a:99:02:4c:6d:0b:e8:95:23:
         ee:2c:4d:b9:6c:4a:eb:58:3e:9a:bb:51:76:f2:91:6f:0a:a2:
         6d:44:37:ca:2f:57:81:e6:45:bb:0c:00:a5:6d:f5:fe:c9:8d:
         1e:39:21:07:37:d2:7d:6e:bd:bd:aa:b5:d7:5b:b1:5e:ef:a5:
         ba:dc:3e:ea:95:53:07:86:66:25:6e:b0:4f:8d:53:47:ef:fb:
         77:37:b4:b4:3a:79:47:9e:03:7e:c0:dd:96:b8:0c:d3:7a:60:
         d8:12:9b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88aFZ4XzWyxt5Ln8dhVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNWYzZjJlYmY4MGM3NzY2OTI1MGE3NTliZTFlNWM5MWUz
ODg0MzUwHhcNMjUwNDEzMDcwMTEyWhcNMjUwNDE0MDcwMTEyWjAzMTEwLwYDVQQD
Eyg5OWFkM2RmY2ZiZWVjZjBiNTgyYTYwN2ZmMzg4YjMyYTkwYjY3ODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yzuGL+pBuErwv61wdVsidZXTIbT
OBa+0P59kpwYSpVbkWPfJTIIonbQn+EMLGuIkCEFNhjYaZixCfjSziXCJ2x7le4c
tmXueUpCex8eg76HqS8AIqh1ElN6iTbYhXGIbIjS9dobrMsDjIN9Fz4zjJVvaw6x
FGIOIBn3QpManefkQEUZrVAwJOWd2VXrZ6Th7d0bVbd3qwdlweE91st6Kbdq4x+R
VmtCqUbBSkod29dk+J8sm1l8ROd5D8U0piS4QTCzf1yk/nR/AJm6i5gvTv/ahECu
FtBundDcyZOCXFPYeMGu1ZLep2ChWrG4t390vBm3ZF7Ne2U1COA514PMpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmtPfz77s8LWCpgf/OIsyqQtnh/MB8GA1UdIwQY
MBaAFPNfPy6/gMd2aSUKdZvh5ckeOIQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjkt
NWNhYzk0YjgzNmI2LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjktNWNhYzk0YjgzNmI2
LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHUzVg2c
/ZrDgNiCecBcUQ9oti+ljlOG/rcNYqAwzlDU+YgFMf4gDhXjKG2shvB+SEVvyDiB
dCLPdaWztjDqF/VWbtrP/a6rZzL/CcTSTFar8jW6MhNtooNGIfH0yUBmrA34fMkK
9u6AZJNEKaGgmp6OANSu9aO7jvOwW0m/mgyNqZQ3DEM5bSzG5xyxi7aNG45LEl3S
6O/NCpkCTG0L6JUj7ixNuWxK61g+mrtRdvKRbwqibUQ3yi9XgeZFuwwApW31/smN
HjkhBzfSfW69vaq111uxXu+lutw+6pVTB4ZmJW6wT41TR+/7dze0tDp5R54DfsDd
lrgM03pg2BKbyg==
-----END CERTIFICATE-----