Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File:                     lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier:          WRqgjCTN9ZMILVTzBNpG9ZwPqg28J3zzQTbuFZn9iPc=
Subject key identifier:   D0:64:4D:7A:C6:34:1D:5F:3A:A6:39:CE:0E:80:9A:22:C3:50:2E:AF
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer:       /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial:       01962E62039703E7A3593744C3863D7CB71C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number:          012C
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: nGrAxhl2diOj01d4kZA9Zr8WZljSc81U+yeoTZfPQTQ=)
                          2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:03:97:03:e7:a3:59:37:44:c3:86:3d:7c:b7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=d0644d7ac6341d5f3aa639ce0e809a22c3502eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:10:23:79:6d:81:ce:77:3c:1e:92:01:08:
                    20:4b:5c:42:d6:d0:60:ec:76:4b:35:62:3e:1d:d0:
                    fa:28:07:e7:7f:8f:9a:11:4a:b1:bf:f1:d5:0f:db:
                    fe:a7:c2:76:f2:01:f9:50:b2:77:a5:52:35:26:21:
                    ba:59:db:5a:3c:b9:aa:e5:3c:dd:d0:ea:d3:0e:bb:
                    33:cc:e1:9c:a4:af:a1:ad:20:af:b7:66:66:67:5f:
                    bf:60:54:a2:a1:44:34:4b:5b:e8:6b:c2:dc:5f:d7:
                    88:8d:80:1a:e8:a0:e2:9e:27:52:c7:e2:e5:a7:01:
                    d8:12:b2:00:ec:69:2e:2d:47:d0:de:5b:c3:db:ab:
                    1b:91:d8:46:46:c0:01:f5:de:a0:6b:cd:5e:27:04:
                    1a:31:9f:b6:74:bc:32:61:54:79:45:41:0b:2a:08:
                    3a:e5:ec:4d:a7:91:ac:67:4c:5b:51:20:9f:62:ff:
                    1d:97:df:02:d8:35:39:a5:81:f2:7e:09:05:c3:94:
                    b2:5e:33:bf:77:88:1d:d2:f7:ea:af:c9:6a:c1:ae:
                    f8:67:28:f6:7e:d6:8c:7e:ef:07:f9:8e:53:c0:14:
                    73:89:ca:d0:45:04:15:6a:4a:15:2b:e7:1b:89:11:
                    36:33:a9:80:0a:4b:6b:2f:9c:72:02:ab:74:8b:57:
                    96:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:64:4D:7A:C6:34:1D:5F:3A:A6:39:CE:0E:80:9A:22:C3:50:2E:AF
            X509v3 Authority Key Identifier:
                keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:01:6d:86:93:57:56:5d:fd:bb:94:9a:7a:34:99:6f:e3:5c:
         40:c0:75:76:0c:f5:e8:33:b2:cb:b2:5d:86:0c:a4:20:35:5b:
         0c:af:35:d8:9d:45:e2:37:80:01:22:ee:ef:b8:39:66:96:dc:
         29:d4:36:83:62:a3:87:a4:6c:ce:ea:0f:91:77:c6:2d:80:2b:
         c5:3a:c2:09:11:b1:ad:e6:73:88:1a:4b:db:b9:07:49:7a:cc:
         25:1d:11:55:96:64:ac:fd:ce:9f:c8:56:bc:c1:cc:24:90:09:
         26:16:7f:63:28:73:82:8a:e9:f0:a2:63:cf:af:6d:9c:c7:ba:
         70:e8:d8:81:ae:38:ae:aa:ab:a5:2d:d8:23:cd:f5:e6:c9:58:
         61:b5:e1:e8:d4:dc:ec:e7:e3:76:cb:a6:23:f5:e0:a7:48:4a:
         82:5c:b8:d3:d6:82:26:98:f2:e2:d3:01:0c:d2:7e:af:ce:39:
         9a:bb:0a:ba:ca:ac:f2:de:73:1b:a8:69:91:28:54:37:95:d8:
         13:60:97:55:5f:3d:c9:90:de:87:7a:04:27:4e:0f:ba:c6:cc:
         41:a1:22:4f:93:e2:e7:4b:29:20:88:eb:61:20:53:04:8e:f0:
         dc:6b:9f:3b:cf:0e:44:ff:77:18:68:f3:f3:41:9c:e0:60:f4:
         ab:15:df:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgOXA+ejWTdEw4Y9fLccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1
ZDJhNTEwHhcNMjUwNDEzMDkwMTM3WhcNMjUwNDE0MDkwMTM3WjAzMTEwLwYDVQQD
EyhkMDY0NGQ3YWM2MzQxZDVmM2FhNjM5Y2UwZTgwOWEyMmMzNTAyZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fIQI3ltgc53PB6SAQggS1xC1tBg
7HZLNWI+HdD6KAfnf4+aEUqxv/HVD9v+p8J28gH5ULJ3pVI1JiG6WdtaPLmq5Tzd
0OrTDrszzOGcpK+hrSCvt2ZmZ1+/YFSioUQ0S1voa8LcX9eIjYAa6KDinidSx+Ll
pwHYErIA7GkuLUfQ3lvD26sbkdhGRsAB9d6ga81eJwQaMZ+2dLwyYVR5RUELKgg6
5exNp5GsZ0xbUSCfYv8dl98C2DU5pYHyfgkFw5SyXjO/d4gd0vfqr8lqwa74Zyj2
ftaMfu8H+Y5TwBRzicrQRQQVakoVK+cbiRE2M6mACktrL5xyAqt0i1eWCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBkTXrGNB1fOqY5zg6AmiLDUC6vMB8GA1UdIwQY
MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt
ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3
LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQFthpNX
Vl39u5SaejSZb+NcQMB1dgz16DOyy7JdhgykIDVbDK812J1F4jeAASLu77g5Zpbc
KdQ2g2Kjh6RszuoPkXfGLYArxTrCCRGxreZziBpL27kHSXrMJR0RVZZkrP3On8hW
vMHMJJAJJhZ/Yyhzgorp8KJjz69tnMe6cOjYga44rqqrpS3YI8315slYYbXh6NTc
7OfjdsumI/Xgp0hKgly409aCJpjy4tMBDNJ+r845mrsKusqs8t5zG6hpkShUN5XY
E2CXVV89yZDeh3oEJ04PusbMQaEiT5Pi50spIIjrYSBTBI7w3GufO88ORP93GGjz
80Gc4GD0qxXf/g==
-----END CERTIFICATE-----