Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File:                     kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier:          mg7hrJumtoWxvTLwIzsRhaFo6dTkGfQzj44hYKfFfog=
Subject key identifier:   EE:93:19:DE:F6:0D:7B:54:AA:91:AA:1D:64:A7:1F:4A:0E:47:73:86
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer:       /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial:       01962F74C705EBA59CE9E7B3AE7BBBE2F673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number:          0CF9
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
                          2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: ajMG5AYCMAHKjaPygUUOuNPUlqGlcDTtho6ZpV2ze7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:05:eb:a5:9c:e9:e7:b3:ae:7b:bb:e2:f6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=ee9319def60d7b54aa91aa1d64a71f4a0e477386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:1a:fc:96:45:b2:84:cc:0c:c6:1a:45:80:
                    68:5f:e6:0f:95:dc:69:65:a0:71:0d:20:b8:02:ee:
                    6a:39:84:7f:09:ed:f6:00:0a:a6:e0:b6:d8:94:90:
                    9c:57:86:cb:d8:0a:1f:23:c5:1d:db:7a:47:34:de:
                    97:5c:20:23:cb:b4:47:5c:4c:12:51:69:c5:1c:d8:
                    ff:ab:6b:85:90:b7:07:aa:0f:4d:24:a7:b8:1e:86:
                    0c:50:71:d1:ca:5d:ba:3d:24:58:00:72:b5:60:c4:
                    49:b5:09:e5:83:93:e2:b2:45:ec:ff:a5:7f:79:30:
                    6e:c8:b7:5f:49:9d:02:8a:3d:e5:4e:00:a6:4a:24:
                    43:13:5b:21:f3:e9:a1:aa:8b:9a:93:c0:2e:68:01:
                    d2:98:97:bd:3a:93:00:c9:d2:a9:a5:e5:96:61:40:
                    bd:e3:8a:20:a2:5c:5f:13:c4:d6:70:dd:af:dd:b4:
                    bd:2b:f3:a4:4b:9e:28:20:4d:86:b0:4d:66:95:3e:
                    51:60:40:e3:b4:1d:a5:2c:ed:dd:93:0a:c2:73:aa:
                    62:a0:10:e9:57:31:0f:fd:ff:5e:e9:f6:c1:8f:20:
                    13:64:96:4d:eb:0f:26:45:c0:ff:bc:ff:fb:a9:5b:
                    7a:8a:84:f4:c9:6b:5a:f8:80:2e:01:16:b1:8d:b6:
                    67:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:93:19:DE:F6:0D:7B:54:AA:91:AA:1D:64:A7:1F:4A:0E:47:73:86
            X509v3 Authority Key Identifier:
                keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d0:6d:90:b2:72:2c:fb:61:de:b6:f4:4f:3e:c7:13:76:69:
         6a:69:d0:50:fa:7c:37:af:8a:7b:44:99:99:4d:a0:20:db:63:
         e5:b1:69:c1:71:a7:98:3e:32:ce:37:0d:87:83:e6:70:35:8b:
         0f:db:96:d2:c2:90:05:65:1b:7b:90:e3:6e:c0:f7:07:2e:69:
         95:a6:c2:a6:33:a7:f9:0f:c8:2d:e3:65:1a:0e:5d:6b:49:d5:
         e9:7d:40:9c:cb:9a:a7:89:4c:10:c0:80:5f:11:c6:23:92:b0:
         26:27:4c:2e:d7:2f:08:a1:07:33:39:ef:0a:55:57:ec:c0:ef:
         5d:10:c7:d9:9c:c5:59:7b:f1:08:da:eb:1e:99:45:31:d6:f5:
         c6:14:8a:00:9f:51:75:aa:83:c0:a9:37:da:5b:4c:92:31:22:
         09:b4:75:53:b7:74:f4:f2:17:21:d9:fe:e5:b7:17:2d:49:92:
         38:42:72:59:cb:3e:cf:90:1a:b6:d7:d0:cf:71:6d:1e:70:8b:
         73:5e:cd:52:2e:30:f9:c2:fc:a8:63:d4:c0:10:8f:21:53:b8:
         ba:87:45:2a:d2:f4:50:6c:34:4e:66:5a:cc:84:bd:01:c0:47:
         c7:2e:fb:cd:3e:81:14:84:28:bf:f9:fc:79:df:3b:9e:b4:7a:
         54:36:d8:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMcF66Wc6eezrnu74vZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMmYxNjlmYzc0NGNiZTg5NWE5Zjg1ZWRhYjc5NmQ0YWM3
MDAwMjkwHhcNMjUwNDEzMTQwMTQ0WhcNMjUwNDE0MTQwMTQ0WjAzMTEwLwYDVQQD
EyhlZTkzMTlkZWY2MGQ3YjU0YWE5MWFhMWQ2NGE3MWY0YTBlNDc3Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEka/JZFsoTMDMYaRYBoX+YPldxp
ZaBxDSC4Au5qOYR/Ce32AAqm4LbYlJCcV4bL2AofI8Ud23pHNN6XXCAjy7RHXEwS
UWnFHNj/q2uFkLcHqg9NJKe4HoYMUHHRyl26PSRYAHK1YMRJtQnlg5PiskXs/6V/
eTBuyLdfSZ0Cij3lTgCmSiRDE1sh8+mhqouak8AuaAHSmJe9OpMAydKppeWWYUC9
44ogolxfE8TWcN2v3bS9K/OkS54oIE2GsE1mlT5RYEDjtB2lLO3dkwrCc6pioBDp
VzEP/f9e6fbBjyATZJZN6w8mRcD/vP/7qVt6ioT0yWta+IAuARaxjbZn9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6TGd72DXtUqpGqHWSnH0oOR3OGMB8GA1UdIwQY
MBaAFJEvFp/HRMvolan4Xtq3ltSscAApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzct
YjIyODNjOWE1MzZmLzEva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZDU0Y2ItN2NlYi00NThmLWJkNzctYjIyODNjOWE1MzZm
LzEva1M4V244ZEV5LWlWcWZoZTJyZVcxS3h3QUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtBtkLJy
LPth3rb0Tz7HE3ZpamnQUPp8N6+Ke0SZmU2gINtj5bFpwXGnmD4yzjcNh4PmcDWL
D9uW0sKQBWUbe5DjbsD3By5plabCpjOn+Q/ILeNlGg5da0nV6X1AnMuap4lMEMCA
XxHGI5KwJidMLtcvCKEHMznvClVX7MDvXRDH2ZzFWXvxCNrrHplFMdb1xhSKAJ9R
daqDwKk32ltMkjEiCbR1U7d09PIXIdn+5bcXLUmSOEJyWcs+z5AattfQz3FtHnCL
c17NUi4w+cL8qGPUwBCPIVO4uodFKtL0UGw0TmZazIS9AcBHxy77zT6BFIQov/n8
ed87nrR6VDbYAQ==
-----END CERTIFICATE-----