Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File:                     AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier:          USP3oMnob+lVtrI8RuOF54CPY+tUCvRwRLdX0C59hoU=
Subject key identifier:   65:72:62:D1:B3:F7:EB:19:07:D0:70:2D:5A:51:0B:61:44:E5:05:49
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer:       /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial:       01962F74310C6DB0CA293B418D8664E8CE6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
                          2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: ZI5NwyVe5rQuIpNqUKq+yg51qSjEKEs/SJCtpkykST8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:31:0c:6d:b0:ca:29:3b:41:8d:86:64:e8:ce:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=657262d1b3f7eb1907d0702d5a510b6144e50549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:c0:14:dc:4d:5e:6b:77:2b:9f:11:c7:37:
                    90:0b:16:93:bb:68:fa:06:da:87:19:a6:af:bd:fe:
                    f6:c0:9e:16:89:fe:dd:7f:71:15:7e:99:2f:9b:d7:
                    b8:56:4e:e1:d5:db:f6:1b:84:74:f2:9c:60:d3:9f:
                    67:1c:5e:d0:26:f4:f4:ca:64:af:4b:89:11:b9:43:
                    43:e5:98:f0:b7:23:aa:78:66:82:3a:ad:68:5d:31:
                    6d:b2:ad:ff:21:72:be:54:46:1d:69:3e:59:04:c1:
                    27:fe:b0:25:08:46:e3:14:a7:9e:10:d3:3a:6d:5f:
                    3b:e3:c5:55:94:4e:e0:d9:66:aa:6a:84:75:6f:d6:
                    ed:bc:de:1b:a0:6c:ff:9e:ad:ad:0d:26:ed:90:af:
                    12:32:e3:d3:7c:85:fc:37:35:5f:65:dd:62:90:5f:
                    6b:57:32:94:70:c0:73:fa:66:35:d5:9b:c3:e2:b0:
                    36:a2:dd:ab:a4:17:18:74:01:f7:56:ec:21:2f:79:
                    2d:c8:e8:b5:ce:d7:32:b9:27:cc:07:d8:91:b7:da:
                    93:d2:67:a2:24:9f:24:08:95:f5:e0:fe:07:86:b0:
                    3c:bd:fd:7b:0a:2d:ee:45:50:66:81:38:66:5b:aa:
                    bc:4c:95:32:13:2d:c7:29:2e:15:54:07:6e:66:d7:
                    6d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:72:62:D1:B3:F7:EB:19:07:D0:70:2D:5A:51:0B:61:44:E5:05:49
            X509v3 Authority Key Identifier:
                keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:f5:40:4c:06:22:a3:ee:cf:29:7e:03:c6:14:77:25:51:
         e4:48:81:fc:70:7d:39:0a:94:6f:ad:a5:a7:99:a3:95:d4:dc:
         52:2b:f5:96:d6:a1:c5:32:66:fa:46:e5:36:2b:35:54:fd:9f:
         d2:94:bb:b7:f3:58:71:df:64:66:dc:44:00:e1:99:41:ec:9d:
         94:c9:16:69:fc:b7:c6:1f:8c:ae:a5:00:d1:be:4f:ef:55:5a:
         89:de:89:05:f1:ec:5e:3c:7a:5d:33:c8:63:1d:70:a6:aa:9e:
         3d:ba:0f:28:11:c5:7a:ab:77:99:d2:9c:3e:ae:62:0f:10:b1:
         41:db:8d:87:44:bc:31:e0:99:81:34:e9:3a:48:37:65:0b:96:
         91:4e:49:97:eb:19:4a:62:d4:9f:24:1d:f3:2d:18:31:0c:f4:
         a5:1f:62:4e:da:ad:a2:df:a4:1e:58:dd:d4:6a:9f:2b:73:9b:
         f3:84:fd:52:2a:67:a9:db:93:61:af:ba:5e:8e:13:ff:9a:fd:
         05:6d:11:1d:28:c1:3e:70:3b:f0:32:2c:72:75:ba:98:7f:23:
         f5:6e:97:9b:79:38:99:ec:f5:bf:a3:ca:00:10:87:1c:48:1a:
         20:45:f5:33:8f:00:95:13:7b:4b:08:f9:8b:98:5d:91:91:dd:
         fe:2e:b6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDEMbbDKKTtBjYZk6M5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDE5OTIxNDQwYzJmMmIyMmE3Nzc3ODAyOTNiYzI3ZmE0
N2YzNWEwHhcNMjUwNDEzMTQwMTA1WhcNMjUwNDE0MTQwMTA1WjAzMTEwLwYDVQQD
Eyg2NTcyNjJkMWIzZjdlYjE5MDdkMDcwMmQ1YTUxMGI2MTQ0ZTUwNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLrAFNxNXmt3K58RxzeQCxaTu2j6
BtqHGaavvf72wJ4Wif7df3EVfpkvm9e4Vk7h1dv2G4R08pxg059nHF7QJvT0ymSv
S4kRuUND5ZjwtyOqeGaCOq1oXTFtsq3/IXK+VEYdaT5ZBMEn/rAlCEbjFKeeENM6
bV8748VVlE7g2WaqaoR1b9btvN4boGz/nq2tDSbtkK8SMuPTfIX8NzVfZd1ikF9r
VzKUcMBz+mY11ZvD4rA2ot2rpBcYdAH3VuwhL3ktyOi1ztcyuSfMB9iRt9qT0mei
JJ8kCJX14P4HhrA8vf17Ci3uRVBmgThmW6q8TJUyEy3HKS4VVAduZtdtPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVyYtGz9+sZB9BwLVpRC2FE5QVJMB8GA1UdIwQY
MBaAFAHRmSFEDC8rIqd3eAKTvCf6R/NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEt
YWE2ZmQ0MzRlMGVmLzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEtYWE2ZmQ0MzRlMGVm
LzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5r1QEwG
IqPuzyl+A8YUdyVR5EiB/HB9OQqUb62lp5mjldTcUiv1ltahxTJm+kblNis1VP2f
0pS7t/NYcd9kZtxEAOGZQeydlMkWafy3xh+MrqUA0b5P71Vaid6JBfHsXjx6XTPI
Yx1wpqqePboPKBHFeqt3mdKcPq5iDxCxQduNh0S8MeCZgTTpOkg3ZQuWkU5Jl+sZ
SmLUnyQd8y0YMQz0pR9iTtqtot+kHljd1GqfK3Ob84T9UipnqduTYa+6Xo4T/5r9
BW0RHSjBPnA78DIscnW6mH8j9W6Xm3k4mez1v6PKABCHHEgaIEX1M48AlRN7Swj5
i5hdkZHd/i62yA==
-----END CERTIFICATE-----