Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File:                     iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier:          ZSBF/t1WIWGvOK0W/otaZfFGJaJxBdATqrNG9HDSDjw=
Subject key identifier:   AE:B7:F3:80:4C:18:F0:96:E9:AC:0D:32:28:33:5E:0D:6F:F2:65:57
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer:       /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial:       01962E994BA9B073F13785971CEC09715EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number:          111E
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: YR9oUfcPn7hi-EfIp0zPWNgdoLI.roa (hash: gZUlOd3rhYgj7y7iYiifqKrTqOs4vDy8o9fKugEnj2M=)
                          2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: pb4D4gKu9uHMVLjVk/4fzIHzOQrtI7SB0OVSu3dNxQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4b:a9:b0:73:f1:37:85:97:1c:ec:09:71:5e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=aeb7f3804c18f096e9ac0d3228335e0d6ff26557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:c6:cc:6a:3b:d5:05:a4:c3:70:dd:b0:69:
                    94:8a:d6:96:51:dd:e6:13:6d:4f:35:5b:c6:21:8c:
                    8d:5a:41:30:1c:79:61:b6:09:b6:3a:27:5f:ea:ba:
                    48:04:20:cc:3a:fe:8a:d8:32:e3:b0:fc:96:f0:04:
                    43:67:29:60:df:be:44:f2:e8:f3:43:35:2b:14:dd:
                    50:c4:0c:cf:7f:b8:c7:4a:00:43:6b:52:11:20:29:
                    ca:72:2e:2c:38:26:0e:e9:61:32:8e:91:23:18:0f:
                    e5:25:6e:22:a2:58:12:35:1a:bb:6b:e8:56:22:e9:
                    06:9b:bd:81:e2:98:af:21:65:49:f6:4e:4c:a2:ec:
                    13:2d:9c:0e:6c:ca:d1:90:9d:53:dd:8e:4b:95:97:
                    ed:87:56:e3:df:2c:dd:7f:8d:53:9d:b9:55:0a:7f:
                    a0:b4:9a:c9:1f:e2:1e:c1:b3:7a:aa:67:d6:7e:aa:
                    c3:94:6f:2d:0a:9c:5d:5e:47:43:43:ad:2a:0b:3a:
                    72:4c:b6:e3:05:d5:bf:15:e9:b0:90:65:62:d8:89:
                    03:84:49:4c:40:ef:cf:ef:1b:3e:5e:d6:e0:f0:f7:
                    1f:3d:38:57:d7:35:1b:1a:0d:ea:b1:f8:a1:82:32:
                    80:e9:cc:ad:7c:da:e5:4a:9e:dc:46:a3:1f:c9:ad:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:F3:80:4C:18:F0:96:E9:AC:0D:32:28:33:5E:0D:6F:F2:65:57
            X509v3 Authority Key Identifier:
                keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:5f:91:29:38:2e:81:f1:45:b8:2a:e4:75:4f:c0:c3:19:
         3d:9a:d6:fe:bd:1e:74:a9:51:5e:ff:91:84:3b:58:2d:cb:1d:
         26:04:6e:36:a9:0f:77:4a:75:a9:15:d5:20:aa:cc:9b:63:bf:
         00:7e:7d:26:5e:45:b1:93:aa:8d:0e:78:37:2c:5f:31:35:27:
         07:81:a1:c6:86:7e:12:2d:15:ce:91:a2:83:83:8e:81:4e:91:
         69:2b:e9:3e:95:6e:51:3b:5a:b1:b8:1d:29:d0:8b:7b:e7:1f:
         42:f0:18:14:4c:68:b0:23:33:74:16:11:07:0b:72:4e:7a:72:
         9c:72:c8:f4:aa:96:30:02:8d:9a:ab:14:3c:9d:65:89:cf:6a:
         a6:a8:e3:a3:e9:00:8e:5d:23:b5:ca:8b:55:98:68:3a:c8:a9:
         f4:ee:fb:8d:83:be:0c:65:4a:ac:dc:56:7d:87:8a:e8:d0:f4:
         60:05:5d:0b:23:8a:4d:24:7d:19:73:99:76:7c:57:87:93:9f:
         c0:0a:4c:0e:4c:df:e3:ea:6f:87:93:b5:a5:24:50:1a:9b:54:
         f8:04:aa:97:cb:87:82:ab:50:1e:d3:68:94:f9:7a:9b:93:ec:
         bc:55:d1:7e:e0:14:c1:46:e8:4f:04:d2:ad:02:49:ac:0c:92:
         d0:3a:50:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUupsHPxN4WXHOwJcV7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjFmZmFkZTkzMGJkMWZkMmUxNzg4Y2ZmNDA3ZDlkMzQx
MzRlMTcwHhcNMjUwNDEzMTAwMjAwWhcNMjUwNDE0MTAwMjAwWjAzMTEwLwYDVQQD
EyhhZWI3ZjM4MDRjMThmMDk2ZTlhYzBkMzIyODMzNWUwZDZmZjI2NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqePGzGo71QWkw3DdsGmUitaWUd3m
E21PNVvGIYyNWkEwHHlhtgm2Oidf6rpIBCDMOv6K2DLjsPyW8ARDZylg375E8ujz
QzUrFN1QxAzPf7jHSgBDa1IRICnKci4sOCYO6WEyjpEjGA/lJW4iolgSNRq7a+hW
IukGm72B4pivIWVJ9k5MouwTLZwObMrRkJ1T3Y5LlZfth1bj3yzdf41TnblVCn+g
tJrJH+IewbN6qmfWfqrDlG8tCpxdXkdDQ60qCzpyTLbjBdW/FemwkGVi2IkDhElM
QO/P7xs+Xtbg8PcfPThX1zUbGg3qsfihgjKA6cytfNrlSp7cRqMfya2MDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6384BMGPCW6awNMigzXg1v8mVXMB8GA1UdIwQY
MBaAFIsh/63pML0f0uF4jP9AfZ00E04XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85Y2UwZWItM2FiYS00YjM2LWI3YzQt
NDI1YzUxZDc4ODhiLzEvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85Y2UwZWItM2FiYS00YjM2LWI3YzQtNDI1YzUxZDc4ODhi
LzEvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfs5fkSk4
LoHxRbgq5HVPwMMZPZrW/r0edKlRXv+RhDtYLcsdJgRuNqkPd0p1qRXVIKrMm2O/
AH59Jl5FsZOqjQ54NyxfMTUnB4GhxoZ+Ei0VzpGig4OOgU6RaSvpPpVuUTtasbgd
KdCLe+cfQvAYFExosCMzdBYRBwtyTnpynHLI9KqWMAKNmqsUPJ1lic9qpqjjo+kA
jl0jtcqLVZhoOsip9O77jYO+DGVKrNxWfYeK6ND0YAVdCyOKTSR9GXOZdnxXh5Of
wApMDkzf4+pvh5O1pSRQGptU+ASql8uHgqtQHtNolPl6m5PsvFXRfuAUwUboTwTS
rQJJrAyS0DpQeg==
-----END CERTIFICATE-----