Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File:                     SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier:          OUzVigxo2Pp61sG3xQm2VnoTyHEZ4Wd12vtmPepvuKc=
Subject key identifier:   C7:F8:38:3A:FC:71:A0:AC:8E:8A:5E:0A:D0:BB:56:E1:35:DF:6E:A1
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer:       /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial:       01962FAB5E17BA57D5EA9A7DFE7D0D17781F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number:          0200
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: ixdSqS1fJjkylkrOt4UBRVL7LRHoXJm99zZ6sowCYmw=)
                          2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5e:17:ba:57:d5:ea:9a:7d:fe:7d:0d:17:78:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=c7f8383afc71a0ac8e8a5e0ad0bb56e135df6ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:59:54:e2:dc:98:39:54:9a:fd:ee:6e:40:
                    c3:2c:94:29:9c:41:9a:56:50:90:6f:38:fb:c3:09:
                    61:50:6f:20:3c:5b:2c:13:e7:f5:db:c5:61:13:5d:
                    da:bc:a2:a7:69:76:48:df:ba:26:c1:cf:17:12:a3:
                    45:27:ed:7e:22:f7:3d:f5:4d:d1:0e:8b:87:49:fa:
                    54:ac:f7:48:fa:b7:ea:6c:2f:84:3d:1e:9c:f3:3f:
                    9b:f2:8f:15:50:02:46:01:0b:41:47:59:d2:bc:cd:
                    77:db:d8:66:a6:78:ed:1e:12:8b:a3:60:1b:3d:dd:
                    5c:e4:9f:37:75:3a:4d:14:5d:bf:05:b9:1e:c5:06:
                    8f:60:19:de:cc:4f:e4:a4:42:39:bd:8f:e5:5a:96:
                    e8:a2:12:93:e2:b8:4a:63:34:11:fd:f0:03:3c:98:
                    06:1f:ff:08:6a:8f:65:22:36:3b:ef:d1:8d:66:d8:
                    c9:56:ac:2c:4f:08:28:d8:6a:79:20:9d:37:cd:55:
                    45:29:72:0b:64:c4:26:76:bd:6a:3e:81:4e:58:8b:
                    7e:1d:35:9d:48:9b:91:0f:d4:74:11:af:28:29:9a:
                    3d:46:6f:db:fc:f2:53:a1:2a:4e:03:e6:39:c4:c1:
                    ed:98:7a:43:a0:b8:95:64:d5:4c:51:39:c4:63:8c:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:38:3A:FC:71:A0:AC:8E:8A:5E:0A:D0:BB:56:E1:35:DF:6E:A1
            X509v3 Authority Key Identifier:
                keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:43:06:d3:c1:13:f5:96:de:1b:76:d2:57:8c:34:b5:4a:52:
         9c:24:27:62:94:94:9b:19:0d:cb:3c:41:7c:ac:6b:72:3e:15:
         bd:4b:42:be:98:49:36:97:e3:a4:b8:0e:64:2b:0a:1a:98:a7:
         bf:74:df:6e:25:fb:b7:c0:c4:8c:8d:2d:21:a4:a9:b3:7f:44:
         e2:7f:87:c6:5a:18:20:da:f8:74:11:aa:cd:a0:f8:88:bd:e9:
         b8:c3:3f:18:d5:da:83:22:99:33:3b:3a:af:0c:f7:ba:da:5e:
         1d:86:bf:10:de:08:73:68:31:aa:32:a1:a6:63:50:71:e8:d8:
         76:52:cd:23:d3:32:fb:17:5a:8e:e8:8b:0d:89:e2:73:72:88:
         b8:4a:aa:55:b6:6f:42:44:35:b8:39:6f:6a:23:81:e7:37:10:
         5c:4e:90:6f:11:e6:83:02:e5:0c:d2:2f:3e:af:88:5c:d9:d2:
         67:aa:c4:9d:0e:e7:e6:bf:15:05:5c:00:e2:e7:cc:9f:ae:5d:
         18:63:bf:d7:1c:8f:e2:de:0e:52:ba:46:05:ad:09:6b:c7:9b:
         c1:0b:b7:3e:0e:51:c6:e9:60:d9:a9:37:fd:b4:3b:8b:88:03:
         93:81:3a:d8:1d:40:9c:d7:6e:08:27:82:22:09:bb:e1:9a:2b:
         61:e3:4e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq14XulfV6pp9/n0NF3gfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4
ZWY1ODgwHhcNMjUwNDEzMTUwMTIxWhcNMjUwNDE0MTUwMTIxWjAzMTEwLwYDVQQD
EyhjN2Y4MzgzYWZjNzFhMGFjOGU4YTVlMGFkMGJiNTZlMTM1ZGY2ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHRZVOLcmDlUmv3ubkDDLJQpnEGa
VlCQbzj7wwlhUG8gPFssE+f128VhE13avKKnaXZI37omwc8XEqNFJ+1+Ivc99U3R
DouHSfpUrPdI+rfqbC+EPR6c8z+b8o8VUAJGAQtBR1nSvM1329hmpnjtHhKLo2Ab
Pd1c5J83dTpNFF2/BbkexQaPYBnezE/kpEI5vY/lWpboohKT4rhKYzQR/fADPJgG
H/8Iao9lIjY779GNZtjJVqwsTwgo2Gp5IJ03zVVFKXILZMQmdr1qPoFOWIt+HTWd
SJuRD9R0Ea8oKZo9Rm/b/PJToSpOA+Y5xMHtmHpDoLiVZNVMUTnEY4xn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf4ODr8caCsjopeCtC7VuE1326hMB8GA1UdIwQY
MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt
OWVmMTI5ZWFkZTc4LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4
LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0MG08ET
9ZbeG3bSV4w0tUpSnCQnYpSUmxkNyzxBfKxrcj4VvUtCvphJNpfjpLgOZCsKGpin
v3TfbiX7t8DEjI0tIaSps39E4n+HxloYINr4dBGqzaD4iL3puMM/GNXagyKZMzs6
rwz3utpeHYa/EN4Ic2gxqjKhpmNQcejYdlLNI9My+xdajuiLDYnic3KIuEqqVbZv
QkQ1uDlvaiOB5zcQXE6QbxHmgwLlDNIvPq+IXNnSZ6rEnQ7n5r8VBVwA4ufMn65d
GGO/1xyP4t4OUrpGBa0Ja8ebwQu3Pg5Rxulg2ak3/bQ7i4gDk4E62B1AnNduCCeC
Igm74ZorYeNOwQ==
-----END CERTIFICATE-----