Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File:                     9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier:          dCHX/srehs0agHSXO3Dt6CUeVPwNzSOG03Rpq9ojxtc=
Subject key identifier:   76:FC:91:9C:62:E8:84:17:F3:CF:D0:94:1B:B5:75:1F:01:B8:6D:24
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer:       /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial:       01962F06BDEB8DE10620C495E684C7EBEE57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
                          2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: R2vXkVB4iOFvaKbXC++jAJG1rpLjnioFlxdjrxzuS6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bd:eb:8d:e1:06:20:c4:95:e6:84:c7:eb:ee:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=76fc919c62e88417f3cfd0941bb5751f01b86d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:65:b6:b7:70:e9:3e:93:47:66:9f:24:1f:
                    8a:b2:36:7f:2c:a6:16:e1:0f:48:b0:e4:d3:84:e7:
                    47:5c:0d:47:98:2a:c2:6d:0d:23:9b:7f:9a:b4:b5:
                    fd:a7:ee:c0:de:0a:54:c0:9c:b8:ff:57:af:05:95:
                    76:5b:c9:68:e8:65:91:a2:df:04:e5:de:d0:4c:1f:
                    e7:81:ef:60:3c:e1:00:1b:22:e7:0b:4a:49:32:d8:
                    25:4c:97:55:13:89:2e:11:3e:05:cf:66:18:4c:5c:
                    a0:e7:1f:1f:50:4f:d9:31:fb:2e:37:29:ed:64:af:
                    d4:21:ae:30:cf:e3:57:74:fe:46:fb:07:5f:a6:00:
                    91:87:2c:07:a7:84:54:89:87:68:fe:e1:4c:da:75:
                    61:d8:2a:33:36:b6:3c:6a:98:a4:3d:4f:f3:7f:b5:
                    cc:be:ee:e6:54:54:cf:1f:c4:67:a2:64:8b:e5:38:
                    16:5a:ab:37:12:4b:d4:49:29:ae:3d:df:3d:24:60:
                    cd:96:ab:19:19:89:c2:d6:b7:15:ef:e7:5d:c0:5a:
                    7e:43:63:e1:be:4f:15:a2:91:1c:47:b6:72:63:64:
                    f9:de:93:94:60:93:94:2a:b0:4d:9a:29:9c:42:b7:
                    de:1a:70:2b:db:b5:88:0c:76:03:87:ac:8a:5e:1c:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:91:9C:62:E8:84:17:F3:CF:D0:94:1B:B5:75:1F:01:B8:6D:24
            X509v3 Authority Key Identifier:
                keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:e1:6a:d0:89:0f:f7:38:44:8d:4f:1c:fb:45:84:c7:0b:
         95:e2:98:19:ad:72:34:85:94:53:1b:00:ee:70:2d:01:02:89:
         2f:5a:0b:ce:bc:83:37:15:17:dd:9d:37:17:63:ab:76:52:8f:
         2b:ef:2e:3e:d7:a5:56:7c:5d:54:fb:2c:db:ee:83:a7:2c:5f:
         24:03:5f:be:aa:21:2b:e7:97:15:b0:67:d4:13:d1:b3:a5:2f:
         dd:53:cf:aa:ad:01:2a:73:d9:0c:4f:f2:1f:32:05:89:d0:8a:
         31:35:ba:01:44:b9:cf:1c:9e:1e:14:bc:aa:79:46:30:28:3b:
         3c:05:c7:6f:e4:81:b7:5d:b1:ac:e9:bc:06:a0:5e:b4:16:8b:
         93:0f:f3:63:de:e0:ab:19:02:6c:e2:7f:10:98:bf:c8:00:01:
         2c:4c:d9:9d:dc:8f:1b:8c:34:21:bc:59:7d:e5:98:5d:14:49:
         5b:70:fa:1c:2f:ed:0d:fd:b4:a0:9c:03:bc:9e:5c:57:4c:02:
         6d:11:cd:62:68:d0:b5:e4:87:aa:ad:24:9b:39:3b:d3:d3:5f:
         cb:12:db:65:23:2a:8a:54:9d:50:19:dd:a7:bd:a0:e9:57:42:
         c1:01:22:0d:f4:6d:59:f5:45:bd:bb:14:65:b9:42:79:02:eb:
         38:aa:46:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBr3rjeEGIMSV5oTH6+5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZjgwNzM4MzUxZGNmYzc1YWY5OTY5OTNhMjkyOWMzNzEz
NGEyMDgwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
Eyg3NmZjOTE5YzYyZTg4NDE3ZjNjZmQwOTQxYmI1NzUxZjAxYjg2ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDFltrdw6T6TR2afJB+KsjZ/LKYW
4Q9IsOTThOdHXA1HmCrCbQ0jm3+atLX9p+7A3gpUwJy4/1evBZV2W8lo6GWRot8E
5d7QTB/nge9gPOEAGyLnC0pJMtglTJdVE4kuET4Fz2YYTFyg5x8fUE/ZMfsuNynt
ZK/UIa4wz+NXdP5G+wdfpgCRhywHp4RUiYdo/uFM2nVh2CozNrY8apikPU/zf7XM
vu7mVFTPH8RnomSL5TgWWqs3EkvUSSmuPd89JGDNlqsZGYnC1rcV7+ddwFp+Q2Ph
vk8VopEcR7ZyY2T53pOUYJOUKrBNmimcQrfeGnAr27WIDHYDh6yKXhxNPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHb8kZxi6IQX88/QlBu1dR8BuG0kMB8GA1UdIwQY
MBaAFPX4Bzg1Hc/HWvmWmTopKcNxNKIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYt
ZWE4NDExZDU3MmFlLzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYtZWE4NDExZDU3MmFl
LzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbDhatCJ
D/c4RI1PHPtFhMcLleKYGa1yNIWUUxsA7nAtAQKJL1oLzryDNxUX3Z03F2OrdlKP
K+8uPtelVnxdVPss2+6DpyxfJANfvqohK+eXFbBn1BPRs6Uv3VPPqq0BKnPZDE/y
HzIFidCKMTW6AUS5zxyeHhS8qnlGMCg7PAXHb+SBt12xrOm8BqBetBaLkw/zY97g
qxkCbOJ/EJi/yAABLEzZndyPG4w0IbxZfeWYXRRJW3D6HC/tDf20oJwDvJ5cV0wC
bRHNYmjQteSHqq0kmzk709NfyxLbZSMqilSdUBndp72g6VdCwQEiDfRtWfVFvbsU
ZblCeQLrOKpGgA==
-----END CERTIFICATE-----