Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File:                     tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier:          /xQXQv9pA6JGt1RWMNA2OXvV9U4hPUcq1ce7x4zLzF0=
Subject key identifier:   46:4F:64:44:C5:6C:74:DD:59:E4:24:45:8A:BE:3F:31:18:EA:DA:91
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer:       /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial:       01962F7447CD45BE3D5C2F5A0D6D96AFC5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number:          021B
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: kdQZ4QS0sUqXnywKZ8M79hUmfTA.roa (hash: xGG3G4XfdVhcDuFzw8EOPzLUi5vn/b3D8pkyEY9PSkc=)
                          2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: uthpcYZgjQUxfyEZEu54Amb0Kql5ZNwTIK3qRG4oK9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:47:cd:45:be:3d:5c:2f:5a:0d:6d:96:af:c5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=464f6444c56c74dd59e424458abe3f3118eada91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:1e:b4:01:90:0c:de:54:f6:a6:cf:0d:de:
                    99:03:b6:59:e3:d9:d5:27:16:54:b3:20:7c:a6:92:
                    de:fc:d4:01:7b:fd:64:34:69:46:2e:39:d5:7a:79:
                    40:90:60:3f:43:e1:d7:40:73:b2:d8:7c:29:e9:90:
                    6d:a5:c3:9c:54:68:42:eb:9b:3e:f8:09:36:4f:ac:
                    31:19:32:c7:1e:ba:1e:87:cc:30:19:a2:1d:a2:41:
                    9e:76:9d:c3:04:8c:c0:49:bf:68:a6:7e:c0:e8:d0:
                    48:76:27:3c:0c:b8:ea:e2:4e:46:2b:c4:3c:e4:81:
                    62:ff:5e:84:15:45:9f:82:e1:c2:32:13:3e:19:4d:
                    6a:f4:71:1d:c9:4d:52:2c:e9:3b:78:ad:09:21:b8:
                    00:51:b4:d3:64:0e:a1:98:b6:ac:9d:be:c5:f8:c8:
                    f3:9f:04:3c:73:ac:2c:f2:49:97:b0:a7:ae:ad:24:
                    b9:93:fb:63:eb:75:cf:6f:60:e7:13:c5:7d:62:5f:
                    8f:7c:df:9d:2a:7f:27:b1:35:61:93:25:0d:f8:f0:
                    bf:ea:a1:c2:af:66:44:eb:2a:96:c7:43:53:aa:ca:
                    4c:73:89:1a:6a:fd:c6:f4:3c:a3:04:3f:01:3e:1e:
                    86:38:2a:7e:4e:f5:87:84:c8:f5:1c:de:e0:79:3e:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4F:64:44:C5:6C:74:DD:59:E4:24:45:8A:BE:3F:31:18:EA:DA:91
            X509v3 Authority Key Identifier:
                keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ca:e9:12:26:da:be:6b:2a:0d:42:0d:5b:3f:f9:d8:36:86:
         31:53:77:5e:bc:ea:ec:59:2e:a3:1d:fa:dd:3e:6f:fb:27:b6:
         0f:4d:14:4e:52:94:35:d7:67:30:56:db:0a:c8:05:c2:da:68:
         f5:46:a5:31:da:06:68:e6:8d:b8:df:76:63:01:ff:47:3c:e4:
         0b:dc:c3:5b:de:d8:9b:21:b7:62:8d:75:50:b2:65:14:0c:58:
         c1:07:09:45:1c:01:e4:f5:39:9e:ba:56:9d:15:85:a8:1c:b1:
         94:82:3b:a9:84:fd:cb:a2:35:5a:eb:33:3b:ee:98:a6:8f:2f:
         4c:50:a9:ed:1d:36:b7:9a:5b:84:2a:42:78:b8:d5:69:e4:c9:
         e7:16:e2:cc:d1:aa:ec:99:a0:02:54:32:d6:4c:ec:a1:e1:b1:
         74:b2:08:b3:6d:8a:0e:a9:85:c8:26:9f:a1:2a:57:25:97:c7:
         d8:df:ee:c5:51:c6:b8:be:83:c0:4c:66:50:0c:d4:b0:9a:60:
         69:00:89:7b:5c:ee:12:1c:e0:f0:85:a4:ec:0d:00:4c:1e:2f:
         fb:b0:b3:ac:ea:cc:39:61:56:cc:2d:3a:b4:a4:9f:a1:d0:0e:
         6f:42:54:e2:75:b8:d5:1e:66:8b:d1:87:c2:b7:2e:74:bc:ce:
         35:88:35:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEfNRb49XC9aDW2Wr8XVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzZjMGYwZWM4YmJlZGYwZjYwODQ0ZGZlNGZlOTM5MzY5
YTRiNDAwHhcNMjUwNDEzMTQwMTExWhcNMjUwNDE0MTQwMTExWjAzMTEwLwYDVQQD
Eyg0NjRmNjQ0NGM1NmM3NGRkNTllNDI0NDU4YWJlM2YzMTE4ZWFkYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIUetAGQDN5U9qbPDd6ZA7ZZ49nV
JxZUsyB8ppLe/NQBe/1kNGlGLjnVenlAkGA/Q+HXQHOy2Hwp6ZBtpcOcVGhC65s+
+Ak2T6wxGTLHHroeh8wwGaIdokGedp3DBIzASb9opn7A6NBIdic8DLjq4k5GK8Q8
5IFi/16EFUWfguHCMhM+GU1q9HEdyU1SLOk7eK0JIbgAUbTTZA6hmLasnb7F+Mjz
nwQ8c6ws8kmXsKeurSS5k/tj63XPb2DnE8V9Yl+PfN+dKn8nsTVhkyUN+PC/6qHC
r2ZE6yqWx0NTqspMc4kaav3G9DyjBD8BPh6GOCp+TvWHhMj1HN7geT7A2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZPZETFbHTdWeQkRYq+PzEY6tqRMB8GA1UdIwQY
MBaAFLQ2wPDsi77fD2CETf5P6Tk2mktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERiQThPeUx2dDhQWUlSTl9rX3BPVGFhUzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kYjY2YWItNzBhYy00MWFkLTk5NTgt
ZGQ4YjVhZmNlZTNiLzEvdERiQThPeUx2dDhQWUlSTl9rX3BPVGFhUzBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kYjY2YWItNzBhYy00MWFkLTk5NTgtZGQ4YjVhZmNlZTNi
LzEvdERiQThPeUx2dDhQWUlSTl9rX3BPVGFhUzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcrpEiba
vmsqDUINWz/52DaGMVN3Xrzq7Fkuox363T5v+ye2D00UTlKUNddnMFbbCsgFwtpo
9UalMdoGaOaNuN92YwH/RzzkC9zDW97YmyG3Yo11ULJlFAxYwQcJRRwB5PU5nrpW
nRWFqByxlII7qYT9y6I1WuszO+6Ypo8vTFCp7R02t5pbhCpCeLjVaeTJ5xbizNGq
7JmgAlQy1kzsoeGxdLIIs22KDqmFyCafoSpXJZfH2N/uxVHGuL6DwExmUAzUsJpg
aQCJe1zuEhzg8IWk7A0ATB4v+7CzrOrMOWFWzC06tKSfodAOb0JU4nW41R5mi9GH
wrcudLzONYg1rA==
-----END CERTIFICATE-----