Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File:                     Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier:          Da+qAeUp5HBcr5RCpGAxeJH2SpiMldWQ6Kr533JQ8z0=
Subject key identifier:   9A:D2:4F:53:6E:A3:9E:33:7D:76:C9:6A:69:37:95:81:B1:E3:7E:E3
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer:       /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial:       01962E99205D162312CC83FEF795AB97418A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number:          1149
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: NpQFo+cy/yymoqtRvCoJo9s8uwZqMvRk1PcyYAwK4w8=)
                          2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
                          3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:20:5d:16:23:12:cc:83:fe:f7:95:ab:97:41:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=9ad24f536ea39e337d76c96a69379581b1e37ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:b8:4a:69:75:11:db:76:f5:fc:54:92:a1:
                    02:d1:c3:db:19:7d:9c:e7:8c:a6:f7:fb:69:05:0a:
                    a8:9c:45:e5:dd:e3:07:4f:fc:76:da:d7:40:27:ce:
                    32:ec:92:4c:61:37:40:43:13:b2:88:e5:b3:2e:69:
                    4c:12:1d:96:61:94:0e:56:a6:1f:c7:f7:7a:4e:43:
                    b9:e3:15:f5:fa:f9:e9:c3:d2:2a:4c:1e:6f:6b:e2:
                    03:9a:d6:d1:f5:7d:77:58:84:c6:cd:f0:2a:e9:c6:
                    3b:7d:7a:ca:8d:e4:dc:af:fc:97:51:9b:55:63:b9:
                    73:28:92:1c:24:55:eb:41:64:09:1f:b3:94:d9:e8:
                    95:ef:f6:c2:d2:31:e6:c6:ec:d5:ad:77:34:ac:f8:
                    67:b1:fb:28:6f:27:0a:af:7e:8e:1f:56:bb:89:b0:
                    6d:05:bb:0b:c8:11:bc:9b:11:d1:c1:f6:da:fa:b6:
                    4c:f8:cf:9f:af:50:3e:d5:72:74:ae:0b:60:b3:52:
                    3e:04:3d:b8:1a:d1:9a:27:55:00:40:f7:b4:2e:02:
                    fb:c4:c9:e0:58:36:39:48:cd:be:6c:55:9f:66:0b:
                    ee:af:31:72:ec:95:6a:cf:d5:57:f0:c9:8c:90:9c:
                    af:ae:7c:80:da:0a:c6:49:73:e2:ac:9e:ba:3b:9b:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D2:4F:53:6E:A3:9E:33:7D:76:C9:6A:69:37:95:81:B1:E3:7E:E3
            X509v3 Authority Key Identifier:
                keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:1c:37:35:07:54:7e:6a:49:eb:0c:5c:df:82:d2:4f:75:
         86:7b:ec:20:08:5e:e0:68:cd:d1:72:c0:00:a9:53:95:50:b4:
         d6:6b:41:f9:b4:c3:bf:42:23:b9:a6:b3:94:29:ea:5a:0f:98:
         20:9e:44:5b:8f:69:73:7e:dc:ab:0c:3c:ca:ee:7c:69:cf:98:
         70:65:44:bd:ff:42:1a:ea:8b:75:43:a8:bc:92:ea:02:4c:85:
         d6:f0:4e:6f:5b:f0:c0:96:20:05:c1:f1:51:9c:0b:8a:88:b3:
         e4:64:d7:c0:8a:0c:09:23:e6:ab:82:78:bc:f8:bc:3f:d3:1d:
         95:27:49:ca:d5:14:ec:74:20:81:cd:f2:6d:cb:03:cd:a4:6a:
         fe:98:c0:ed:9c:e5:33:db:33:75:f2:67:e3:fe:76:85:eb:a4:
         48:f0:75:e9:a6:85:74:aa:b2:a7:48:5a:0c:ba:e5:69:b6:fe:
         c6:b7:b2:b0:c5:50:fd:1c:db:aa:af:cc:e2:dd:16:7e:cb:97:
         84:1a:aa:ee:80:dc:9d:89:8f:b4:aa:47:a3:b3:36:5e:1f:6f:
         a3:6e:ac:6a:b1:c5:ac:6b:c5:04:8c:ab:8a:dc:ef:4a:94:8b:
         ef:e0:95:eb:95:4b:e4:2c:66:65:15:91:97:8a:03:32:61:ff:
         1e:11:58:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumSBdFiMSzIP+95Wrl0GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFiNWY4OGIxY2Q3NzI4ZjE3N2NjODZlMzNiY2ViOWUy
MjE0YjIwHhcNMjUwNDEzMTAwMTQ5WhcNMjUwNDE0MTAwMTQ5WjAzMTEwLwYDVQQD
Eyg5YWQyNGY1MzZlYTM5ZTMzN2Q3NmM5NmE2OTM3OTU4MWIxZTM3ZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GC4Sml1Edt29fxUkqEC0cPbGX2c
54ym9/tpBQqonEXl3eMHT/x22tdAJ84y7JJMYTdAQxOyiOWzLmlMEh2WYZQOVqYf
x/d6TkO54xX1+vnpw9IqTB5va+IDmtbR9X13WITGzfAq6cY7fXrKjeTcr/yXUZtV
Y7lzKJIcJFXrQWQJH7OU2eiV7/bC0jHmxuzVrXc0rPhnsfsobycKr36OH1a7ibBt
BbsLyBG8mxHRwfba+rZM+M+fr1A+1XJ0rgtgs1I+BD24GtGaJ1UAQPe0LgL7xMng
WDY5SM2+bFWfZgvurzFy7JVqz9VX8MmMkJyvrnyA2grGSXPirJ66O5uarwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrST1Nuo54zfXbJamk3lYGx437jMB8GA1UdIwQY
MBaAFD4atfiLHNdyjxd8yG4zvOueIhSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWIt
ZmQ5OGZkNzBmMzRmLzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWItZmQ5OGZkNzBmMzRm
LzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM4cNzUH
VH5qSesMXN+C0k91hnvsIAhe4GjN0XLAAKlTlVC01mtB+bTDv0IjuaazlCnqWg+Y
IJ5EW49pc37cqww8yu58ac+YcGVEvf9CGuqLdUOovJLqAkyF1vBOb1vwwJYgBcHx
UZwLioiz5GTXwIoMCSPmq4J4vPi8P9MdlSdJytUU7HQggc3ybcsDzaRq/pjA7Zzl
M9szdfJn4/52heukSPB16aaFdKqyp0haDLrlabb+xreysMVQ/Rzbqq/M4t0WfsuX
hBqq7oDcnYmPtKpHo7M2Xh9vo26sarHFrGvFBIyritzvSpSL7+CV65VL5CxmZRWR
l4oDMmH/HhFYYA==
-----END CERTIFICATE-----