Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File:                     lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier:          cyhEjfJnjSV2ef752Sz5JjpHSnidp8qgPvForUj4eEc=
Subject key identifier:   89:D0:85:13:51:B0:47:4B:EE:B7:38:C0:F9:B4:51:6B:48:49:B3:B5
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer:       /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial:       01962E98DE665232F8BEA4E0F52D0E86B4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
                          2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: HLOOG0M47/Cr/Fjw1l5E1vxcjJoj97gNXkk+3LjFO8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:de:66:52:32:f8:be:a4:e0:f5:2d:0e:86:b4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=89d0851351b0474beeb738c0f9b4516b4849b3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:d1:22:6d:9e:68:5f:52:7c:cc:2c:07:c2:
                    c2:2a:19:3e:bd:dd:40:06:b9:7c:7a:1f:ec:d3:b6:
                    77:6e:04:4e:de:b9:93:31:d4:c5:67:d4:d2:2a:5a:
                    94:40:9a:92:8d:76:23:88:8e:ad:b5:fe:04:83:71:
                    d0:d6:b9:e1:a1:c9:4b:47:34:c7:1d:02:11:56:cc:
                    64:b9:30:fc:1d:3c:4c:e8:89:2c:e1:3d:aa:23:43:
                    3b:79:0d:3c:98:71:24:a4:46:0a:cd:f2:a1:a9:58:
                    e1:1e:7a:db:78:6e:16:60:6d:09:ef:7e:a4:dc:f1:
                    a6:e0:1f:d8:ea:d7:8f:09:98:fe:b2:8c:63:54:17:
                    81:f9:8a:5b:8f:ab:ac:bc:1f:f9:06:bf:b2:1e:98:
                    89:f5:d9:bc:06:b9:41:1e:10:2d:95:58:4b:83:e4:
                    a6:d5:4d:7b:a4:1f:41:22:d1:1a:d8:57:91:5c:91:
                    7f:73:72:d6:ca:2a:df:85:e7:b1:84:bc:4f:af:58:
                    a1:ca:70:db:1d:5c:64:47:8f:c7:72:d2:4c:7c:34:
                    c7:f7:6a:04:c7:e8:82:f8:05:71:4d:8e:c3:1e:8d:
                    fa:9a:bb:fa:89:54:d3:f4:b6:70:76:6c:e8:7f:6c:
                    00:8e:1b:39:b3:c9:93:ca:5d:e7:6d:a4:d2:1d:8b:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D0:85:13:51:B0:47:4B:EE:B7:38:C0:F9:B4:51:6B:48:49:B3:B5
            X509v3 Authority Key Identifier:
                keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:c0:70:3d:25:84:54:31:a4:3f:c6:1e:78:a4:62:2a:16:
         0f:e6:27:e1:75:e2:36:b1:43:48:83:9d:4e:cd:69:c2:a7:3b:
         ab:52:ba:b9:7c:05:a2:da:ca:f7:e5:25:ac:69:f7:d2:58:f2:
         30:04:3e:c3:51:a2:a7:75:c7:8e:1d:c7:3a:d6:51:04:c3:c2:
         e0:50:6d:54:f3:db:cf:fc:11:dd:98:2c:20:84:e6:fb:ea:d4:
         eb:95:e0:53:be:8e:11:59:d8:35:9b:ad:14:d2:f2:e8:21:dd:
         4c:d9:2d:9f:a3:47:20:69:82:e4:70:3f:1e:f6:79:fa:0c:ff:
         1b:06:5a:99:aa:ea:07:67:12:24:f6:f6:ea:23:99:a8:c2:c7:
         fb:9b:26:d5:05:47:4e:3b:db:d4:76:49:03:08:b9:6d:3f:b8:
         25:e6:dd:fa:7e:f0:98:b0:65:59:d5:5b:3c:69:bb:61:00:6b:
         5f:7a:f8:7e:32:96:54:db:b0:63:ef:03:cf:fd:d3:55:27:e6:
         0b:9d:19:2a:5a:ec:7f:1b:5a:ad:fb:1c:c5:fc:b4:e2:c6:4a:
         77:47:3c:7a:6d:ab:5b:28:5b:3f:da:ac:10:db:6c:e6:9f:4a:
         8e:2e:63:15:81:46:2e:53:5d:d8:94:e0:e7:a9:71:11:61:30:
         9f:32:eb:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumN5mUjL4vqTg9S0OhrTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjE1NmM4ODQ3ZjI0ZDA5ZGE2MGQ1ZjViMTA1NDJiMmVj
ZjkwMTYwHhcNMjUwNDEzMTAwMTMyWhcNMjUwNDE0MTAwMTMyWjAzMTEwLwYDVQQD
Eyg4OWQwODUxMzUxYjA0NzRiZWViNzM4YzBmOWI0NTE2YjQ4NDliM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrXRIm2eaF9SfMwsB8LCKhk+vd1A
Brl8eh/s07Z3bgRO3rmTMdTFZ9TSKlqUQJqSjXYjiI6ttf4Eg3HQ1rnhoclLRzTH
HQIRVsxkuTD8HTxM6Iks4T2qI0M7eQ08mHEkpEYKzfKhqVjhHnrbeG4WYG0J736k
3PGm4B/Y6tePCZj+soxjVBeB+Ypbj6usvB/5Br+yHpiJ9dm8BrlBHhAtlVhLg+Sm
1U17pB9BItEa2FeRXJF/c3LWyirfheexhLxPr1ihynDbHVxkR4/HctJMfDTH92oE
x+iC+AVxTY7DHo36mrv6iVTT9LZwdmzof2wAjhs5s8mTyl3nbaTSHYta4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInQhRNRsEdL7rc4wPm0UWtISbO1MB8GA1UdIwQY
MBaAFJUhVsiEfyTQnaYNX1sQVCsuz5AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjIt
YjNjMDFkMWE2Yzg1LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjItYjNjMDFkMWE2Yzg1
LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi7AcD0l
hFQxpD/GHnikYioWD+Yn4XXiNrFDSIOdTs1pwqc7q1K6uXwFotrK9+UlrGn30ljy
MAQ+w1Gip3XHjh3HOtZRBMPC4FBtVPPbz/wR3ZgsIITm++rU65XgU76OEVnYNZut
FNLy6CHdTNktn6NHIGmC5HA/HvZ5+gz/GwZamarqB2cSJPb26iOZqMLH+5sm1QVH
Tjvb1HZJAwi5bT+4Jebd+n7wmLBlWdVbPGm7YQBrX3r4fjKWVNuwY+8Dz/3TVSfm
C50ZKlrsfxtarfscxfy04sZKd0c8em2rWyhbP9qsENts5p9Kji5jFYFGLlNd2JTg
56lxEWEwnzLr+Q==
-----END CERTIFICATE-----