Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File:                     FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier:          nDRQrtSVGsOGNHFSpq9Lz0+7PWNEChzMhB7I7GJXHJM=
Subject key identifier:   66:10:BD:F9:EF:F7:18:68:9A:E7:2D:1B:78:74:92:75:DB:E0:CC:3D
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer:       /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial:       01962E991C8236B6E752A78FCD4783A93330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 7avwX6wLfCubdHbZyz0nLS_e-eU.roa (hash: pGwwGuIWJ6QSCg6gVVG8woBK5kghKUCbnUTlff7iqb8=)
                          2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
                          3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: s3eZNBxHeMhDCXZTsnllJyVkzjtAsx0mLldEZ9Nb9L8=)
                          4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1c:82:36:b6:e7:52:a7:8f:cd:47:83:a9:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=6610bdf9eff718689ae72d1b78749275dbe0cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:b5:d8:88:bf:41:84:53:d9:5c:83:be:f4:
                    41:86:bb:8b:9c:35:be:85:89:05:fd:14:64:7a:37:
                    8b:64:bf:0a:66:25:8a:c2:56:2a:0d:31:a1:aa:d5:
                    54:f4:52:fe:c6:a9:07:8c:af:cc:bc:9e:9b:cc:3f:
                    9c:90:2d:af:24:07:37:bf:93:72:60:07:67:6c:4f:
                    06:74:88:07:41:0f:34:8a:4c:44:02:8c:6a:c9:09:
                    8c:0b:dd:23:e2:49:2f:c9:9c:5a:85:4c:7b:1b:4b:
                    ba:ba:1c:a7:aa:37:5a:1d:94:0e:b8:0d:1f:b1:2d:
                    90:5a:0f:25:d3:c5:62:35:8a:78:1f:d2:75:94:6b:
                    47:48:ad:d5:59:52:f6:ee:d8:ac:0d:54:82:5c:90:
                    78:d4:24:14:33:01:1e:3b:ff:69:5d:4c:32:7a:b7:
                    1f:4e:d1:31:fa:24:5c:1f:be:e4:b5:82:05:b4:62:
                    b0:98:10:4f:31:94:c5:00:63:d8:82:35:a6:23:98:
                    5d:40:9e:cf:00:2d:70:ef:ab:44:b6:d6:c1:e4:a5:
                    bb:cb:d1:fc:98:f0:d5:1f:41:0b:c2:06:6e:98:f4:
                    32:da:8e:6d:e8:0e:ab:16:4e:83:43:a4:d3:d9:ae:
                    2c:e5:cf:55:c2:36:af:7a:d3:94:2f:a3:eb:f3:2f:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:10:BD:F9:EF:F7:18:68:9A:E7:2D:1B:78:74:92:75:DB:E0:CC:3D
            X509v3 Authority Key Identifier:
                keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:23:3b:aa:e3:1c:f2:23:91:16:da:bc:c8:ad:f7:4d:1a:
         db:78:f4:6c:df:c0:a3:61:c5:f0:81:86:e3:39:83:92:9f:60:
         e9:35:bf:f9:25:37:21:3e:cb:66:a9:fd:ed:e4:e6:4b:c5:dd:
         e3:3a:99:19:dc:8f:a2:82:49:ad:22:ac:eb:f0:7b:f8:ef:40:
         67:87:8b:c7:75:5a:a7:09:1d:ba:d9:22:39:4f:75:93:c4:10:
         8d:c9:eb:f4:d8:aa:df:6f:d8:95:3e:18:d2:bb:6e:a7:9e:fa:
         bf:5a:f4:0a:6a:65:70:47:ab:ef:6a:d3:98:f3:bf:0a:20:ba:
         d9:78:59:69:dd:a2:4c:11:6a:28:fa:c9:45:04:7a:22:c6:de:
         5b:78:a8:b9:e6:38:a2:2e:9e:89:65:57:20:a0:11:f3:9a:44:
         36:68:b5:cb:4e:1c:a5:03:49:78:5f:08:cc:38:e2:a6:53:eb:
         39:fa:b1:9b:55:a4:54:c1:ef:4e:d3:dc:13:e7:30:69:62:42:
         80:4b:f8:bf:37:54:9d:2f:12:65:93:b1:3f:a7:54:20:60:48:
         2f:ab:b2:db:f4:ee:70:f7:8a:87:5d:e0:1f:62:80:08:86:90:
         1e:e2:db:7c:d5:37:df:0f:fa:95:4c:09:6d:2a:67:30:58:ca:
         92:11:0b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRyCNrbnUqePzUeDqTMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy
ZDE3M2YwHhcNMjUwNDEzMTAwMTQ4WhcNMjUwNDE0MTAwMTQ4WjAzMTEwLwYDVQQD
Eyg2NjEwYmRmOWVmZjcxODY4OWFlNzJkMWI3ODc0OTI3NWRiZTBjYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NW12Ii/QYRT2VyDvvRBhruLnDW+
hYkF/RRkejeLZL8KZiWKwlYqDTGhqtVU9FL+xqkHjK/MvJ6bzD+ckC2vJAc3v5Ny
YAdnbE8GdIgHQQ80ikxEAoxqyQmMC90j4kkvyZxahUx7G0u6uhynqjdaHZQOuA0f
sS2QWg8l08ViNYp4H9J1lGtHSK3VWVL27tisDVSCXJB41CQUMwEeO/9pXUwyercf
TtEx+iRcH77ktYIFtGKwmBBPMZTFAGPYgjWmI5hdQJ7PAC1w76tEttbB5KW7y9H8
mPDVH0ELwgZumPQy2o5t6A6rFk6DQ6TT2a4s5c9VwjavetOUL6Pr8y99UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYQvfnv9xhomuctG3h0knXb4Mw9MB8GA1UdIwQY
MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt
ZTVmOThkZGFmYzk4LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4
LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPYjO6rj
HPIjkRbavMit900a23j0bN/Ao2HF8IGG4zmDkp9g6TW/+SU3IT7LZqn97eTmS8Xd
4zqZGdyPooJJrSKs6/B7+O9AZ4eLx3VapwkdutkiOU91k8QQjcnr9Niq32/YlT4Y
0rtup576v1r0CmplcEer72rTmPO/CiC62XhZad2iTBFqKPrJRQR6IsbeW3ioueY4
oi6eiWVXIKAR85pENmi1y04cpQNJeF8IzDjiplPrOfqxm1WkVMHvTtPcE+cwaWJC
gEv4vzdUnS8SZZOxP6dUIGBIL6uy2/TucPeKh13gH2KACIaQHuLbfNU33w/6lUwJ
bSpnMFjKkhELVw==
-----END CERTIFICATE-----