Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File:                     c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier:          Lxku/mlIxR3Zn3rWHnHscJ9WK874eCekq9CLGMHC3m8=
Subject key identifier:   FB:31:8F:91:72:8C:F3:62:50:F2:2C:FD:3E:CB:03:F7:49:E3:47:85
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer:       /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial:       01962F0655D5E5B721EAEEC8EC11A756D1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
                          2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: 5FWwH2Czz7HJtKINl2sLEOU4mxR5Xw1diDMgdATSSPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:d5:e5:b7:21:ea:ee:c8:ec:11:a7:56:d1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=fb318f91728cf36250f22cfd3ecb03f749e34785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:06:c8:e1:73:d7:ef:6a:03:49:ac:64:a4:9b:
                    42:53:dc:f3:12:a9:62:5c:59:f9:ca:33:b6:57:c5:
                    db:d9:e3:1b:67:4a:87:81:c9:07:94:18:1a:0f:16:
                    f6:5e:3a:42:76:19:eb:b5:50:3e:7c:ba:19:3a:d5:
                    90:3e:cc:ae:2b:c2:fb:ec:85:0b:02:ec:12:8c:e7:
                    19:95:c8:1c:b0:57:ae:21:7e:98:5c:dd:3f:ac:63:
                    fd:bb:4d:17:e8:42:6a:6d:27:87:fd:a9:81:61:dc:
                    bc:92:dc:be:63:6d:1a:c9:6e:65:e0:ad:41:89:09:
                    e5:71:aa:f1:26:66:d6:84:9c:6a:68:78:45:10:76:
                    3e:e4:c9:4b:b0:01:ad:04:30:0f:24:fc:b0:4d:03:
                    0a:21:94:ed:12:4f:56:6b:c3:ca:ab:9d:f2:a3:54:
                    7d:e7:b4:3b:44:a3:ac:c9:08:5a:de:0d:6b:4c:29:
                    ae:ec:39:33:f2:2e:c2:09:75:ac:fd:6c:b2:91:5e:
                    97:02:7c:13:fa:bb:91:ab:f2:d1:82:c3:39:29:6a:
                    41:7c:9c:48:c5:5e:25:4d:ea:fb:08:3c:01:2d:9b:
                    1f:20:a0:bc:cc:4b:bc:76:1c:b9:18:26:f3:6e:6b:
                    8d:49:c0:d2:ff:18:a8:24:f4:9d:5b:5c:8b:ca:cf:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:8F:91:72:8C:F3:62:50:F2:2C:FD:3E:CB:03:F7:49:E3:47:85
            X509v3 Authority Key Identifier:
                keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:06:1e:c1:10:e2:33:f2:12:8a:e3:68:db:3a:bf:aa:d8:33:
         33:9f:3b:5b:4b:d5:fa:67:4b:dc:61:1b:ed:d1:07:dc:f0:e6:
         34:09:b8:d5:4c:01:52:f0:ef:4b:dd:98:04:d3:b8:66:f0:ba:
         e2:78:07:93:1e:62:50:09:b3:d6:29:ae:4d:0f:1b:fd:33:2e:
         cf:fb:91:6c:fb:e2:ba:86:fb:fd:75:86:46:b7:2a:41:31:ac:
         cf:8c:6b:a0:0a:ac:68:f7:78:d5:ec:e1:03:c0:a1:d5:91:2f:
         6b:22:ee:1e:9c:83:e5:31:33:a4:5c:cc:87:f2:d5:86:4e:bf:
         99:c4:c5:4f:f9:c1:c0:16:bc:b2:85:5a:1e:54:65:41:95:40:
         f0:ba:b2:cd:b5:df:93:c5:2f:54:32:06:90:eb:3c:40:d4:54:
         c0:8c:2c:f8:6f:20:15:d1:d1:8e:9f:cd:35:58:da:c5:25:e7:
         d4:8d:40:2f:7d:cd:ce:ba:22:21:41:a7:ec:77:11:ce:59:23:
         08:1a:ef:29:3f:93:e7:5a:0a:8e:05:0f:51:ba:04:1a:61:12:
         33:f9:23:cd:e0:e2:4e:7c:74:eb:04:9a:60:aa:8a:9b:c9:70:
         ea:74:de:25:8d:5c:f1:cf:b5:24:aa:54:42:ab:84:de:f0:a9:
         52:d5:b4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlXV5bch6u7I7BGnVtHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjhhZWJjMWQ0NTg1YjliMzYxMmVjYzIyMDM0NTRkNjVh
ODcyZTMwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
EyhmYjMxOGY5MTcyOGNmMzYyNTBmMjJjZmQzZWNiMDNmNzQ5ZTM0Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gbI4XPX72oDSaxkpJtCU9zzEqli
XFn5yjO2V8Xb2eMbZ0qHgckHlBgaDxb2XjpCdhnrtVA+fLoZOtWQPsyuK8L77IUL
AuwSjOcZlcgcsFeuIX6YXN0/rGP9u00X6EJqbSeH/amBYdy8kty+Y20ayW5l4K1B
iQnlcarxJmbWhJxqaHhFEHY+5MlLsAGtBDAPJPywTQMKIZTtEk9Wa8PKq53yo1R9
57Q7RKOsyQha3g1rTCmu7Dkz8i7CCXWs/WyykV6XAnwT+ruRq/LRgsM5KWpBfJxI
xV4lTer7CDwBLZsfIKC8zEu8dhy5GCbzbmuNScDS/xioJPSdW1yLys9MnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsxj5FyjPNiUPIs/T7LA/dJ40eFMB8GA1UdIwQY
MBaAFHNorrwdRYW5s2EuzCIDRU1lqHLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2It
ZjU5NTFjN2NjYmQzLzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2ItZjU5NTFjN2NjYmQz
LzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQYewRDi
M/ISiuNo2zq/qtgzM587W0vV+mdL3GEb7dEH3PDmNAm41UwBUvDvS92YBNO4ZvC6
4ngHkx5iUAmz1imuTQ8b/TMuz/uRbPviuob7/XWGRrcqQTGsz4xroAqsaPd41ezh
A8Ch1ZEvayLuHpyD5TEzpFzMh/LVhk6/mcTFT/nBwBa8soVaHlRlQZVA8LqyzbXf
k8UvVDIGkOs8QNRUwIws+G8gFdHRjp/NNVjaxSXn1I1AL33NzroiIUGn7HcRzlkj
CBrvKT+T51oKjgUPUboEGmESM/kjzeDiTnx06wSaYKqKm8lw6nTeJY1c8c+1JKpU
QquE3vCpUtW02w==
-----END CERTIFICATE-----