Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File:                     FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier:          pjo2h14+Gikfo6VukIASM4e2EvQNmkybK1ch0VFvxag=
Subject key identifier:   75:63:DC:DA:28:59:E3:D1:9E:20:DF:4F:DE:96:95:B0:75:51:BE:E2
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer:       /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial:       01962F7443876874035EF951C2EC66795FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number:          065B
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: kEco9ygxHlPqt6mnDmayTdDNSOugdcw4Q/AwhLT0U6U=)
                          2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:43:87:68:74:03:5e:f9:51:c2:ec:66:79:5f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=7563dcda2859e3d19e20df4fde9695b07551bee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:85:57:3c:85:ae:c8:e7:e4:8e:9c:99:d9:
                    3d:33:61:5a:ba:38:28:1b:fc:1f:69:09:c6:12:13:
                    50:47:e7:11:46:d4:db:1c:fc:f2:d7:ba:03:91:f4:
                    54:c4:6a:45:0b:5a:79:48:b6:5b:52:44:9b:d9:ea:
                    90:c1:a3:7e:45:bc:ac:6d:0b:ed:90:3d:7b:90:e5:
                    fb:b4:5a:73:7e:04:79:97:25:eb:c7:58:79:07:3a:
                    fe:65:cc:79:07:4b:38:da:e8:55:cd:86:48:d8:5e:
                    df:d2:39:df:51:9a:8a:6e:64:64:22:f4:0a:b5:5b:
                    f5:8f:2a:c5:15:d3:9a:3e:9a:25:72:be:3a:e7:85:
                    30:16:b7:7d:dc:3c:70:d6:d3:9b:90:7a:fb:28:5e:
                    cf:cc:b2:d2:a6:88:13:94:6d:a7:66:8d:fd:45:e1:
                    8c:11:21:8f:42:d4:af:99:e4:2a:31:f8:70:dd:15:
                    44:2e:16:4e:5b:49:8b:9d:f1:c5:c9:96:19:a6:29:
                    b8:72:f5:60:1f:ef:7b:e7:39:5a:0e:c2:16:72:43:
                    86:09:bf:9e:c2:6e:dc:e5:07:5a:bc:88:23:a6:aa:
                    41:61:cf:4f:19:9a:aa:12:6e:a4:60:6d:7c:75:b6:
                    af:e6:0d:4b:fb:1c:94:aa:29:8b:e9:5c:01:69:0c:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:63:DC:DA:28:59:E3:D1:9E:20:DF:4F:DE:96:95:B0:75:51:BE:E2
            X509v3 Authority Key Identifier:
                keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:84:c8:66:67:2f:8e:9a:8e:e6:ae:dc:c9:87:03:ee:d8:
         c9:af:99:76:09:ba:82:47:eb:d0:f8:94:34:b4:d8:48:ab:91:
         89:54:8d:ea:e0:a8:dc:49:e3:a0:b6:04:d7:b3:f8:cf:b2:b6:
         79:1b:ef:4b:38:9c:2e:23:b8:72:81:1b:ca:ea:a8:0e:9c:5a:
         32:cc:36:c4:7f:4c:12:79:9d:34:8f:5b:3e:3e:6f:75:0c:3f:
         d8:3e:eb:2f:4e:33:4b:d1:93:78:29:ad:33:26:06:86:92:96:
         97:8c:f0:95:6a:41:1d:77:d6:99:fc:c7:6c:3e:2d:8f:32:62:
         08:28:63:b3:4e:a9:7f:58:06:9c:a4:71:7e:e5:88:4d:9d:3a:
         22:f7:47:c0:7b:77:63:fe:8e:d9:a9:c1:95:90:93:30:73:43:
         94:fa:e9:e6:3d:0c:37:87:c5:99:88:cc:73:57:f7:1b:ef:d8:
         05:3f:d8:07:f9:8d:8c:2a:38:33:20:6b:cc:5e:c5:de:b6:a1:
         2c:bd:f7:61:f9:5b:88:a6:c3:c4:ed:00:22:a9:0f:a0:15:75:
         e6:1a:72:56:bd:93:65:e7:2a:62:49:5b:08:40:2d:b1:ee:13:
         a3:d9:17:f8:85:6a:8d:71:3a:32:da:56:ce:37:4c:2a:d0:7e:
         18:62:f4:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEOHaHQDXvlRwuxmeV+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTRlMTA3MjMzNTEyNzBjZDhjOWNjNjRiMDk2NDg4ZTY0
ZTIzMGUwHhcNMjUwNDEzMTQwMTEwWhcNMjUwNDE0MTQwMTEwWjAzMTEwLwYDVQQD
Eyg3NTYzZGNkYTI4NTllM2QxOWUyMGRmNGZkZTk2OTViMDc1NTFiZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLuFVzyFrsjn5I6cmdk9M2Faujgo
G/wfaQnGEhNQR+cRRtTbHPzy17oDkfRUxGpFC1p5SLZbUkSb2eqQwaN+RbysbQvt
kD17kOX7tFpzfgR5lyXrx1h5Bzr+Zcx5B0s42uhVzYZI2F7f0jnfUZqKbmRkIvQK
tVv1jyrFFdOaPpolcr4654UwFrd93Dxw1tObkHr7KF7PzLLSpogTlG2nZo39ReGM
ESGPQtSvmeQqMfhw3RVELhZOW0mLnfHFyZYZpim4cvVgH+975zlaDsIWckOGCb+e
wm7c5QdavIgjpqpBYc9PGZqqEm6kYG18dbav5g1L+xyUqimL6VwBaQwZcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVj3NooWePRniDfT96WlbB1Ub7iMB8GA1UdIwQY
MBaAFBak4QcjNRJwzYycxksJZIjmTiMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYt
OWI2NDQ0NGZmNjg4LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYtOWI2NDQ0NGZmNjg4
LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW36EyGZn
L46ajuau3MmHA+7Yya+Zdgm6gkfr0PiUNLTYSKuRiVSN6uCo3EnjoLYE17P4z7K2
eRvvSzicLiO4coEbyuqoDpxaMsw2xH9MEnmdNI9bPj5vdQw/2D7rL04zS9GTeCmt
MyYGhpKWl4zwlWpBHXfWmfzHbD4tjzJiCChjs06pf1gGnKRxfuWITZ06IvdHwHt3
Y/6O2anBlZCTMHNDlPrp5j0MN4fFmYjMc1f3G+/YBT/YB/mNjCo4MyBrzF7F3rah
LL33YflbiKbDxO0AIqkPoBV15hpyVr2TZecqYklbCEAtse4To9kX+IVqjXE6MtpW
zjdMKtB+GGL0Ng==
-----END CERTIFICATE-----