Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File:                     a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier:          P9+6YdqymElvlYp2MGirlIk2103ewzVKSBI7Qi+emHg=
Subject key identifier:   49:D2:3D:4D:87:1D:F4:D8:CC:F0:C9:01:37:05:3E:3D:82:7B:01:C3
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer:       /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial:       01962E99CDE8B2B55AE167B03D0BBF14852D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:33 +0000
Files and hashes:         1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
                          2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: YBZwhmP2qQs42Zp/y9eJhm3C5Ec8T9L43LpNwBYACiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:cd:e8:b2:b5:5a:e1:67:b0:3d:0b:bf:14:85:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
        Validity
            Not Before: Apr 13 10:02:33 2025 GMT
            Not After : Apr 14 10:02:33 2025 GMT
        Subject: CN=49d23d4d871df4d8ccf0c90137053e3d827b01c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:13:ee:97:dd:3e:8b:bc:ac:af:37:c4:6c:94:
                    12:11:f9:bc:76:b4:43:f8:8e:9f:4d:8f:d1:cb:9e:
                    ff:a0:a9:04:18:bc:c9:97:14:b1:cc:37:10:a5:e8:
                    67:eb:69:71:3c:fa:03:60:f8:a0:fb:1d:23:ee:d6:
                    68:2d:b4:f8:4e:24:08:9e:8e:ec:af:5b:6a:0a:e6:
                    75:a8:e1:95:f6:6f:69:ed:0f:3a:ce:02:b1:2f:d3:
                    76:d9:22:93:d4:37:25:a7:a4:a4:05:d0:58:28:e1:
                    76:2f:60:0d:5c:a9:fc:b6:16:ef:f8:7b:54:12:56:
                    94:22:80:c6:ce:f5:20:c5:95:54:9c:79:6b:88:3e:
                    d0:87:e2:73:55:fd:f6:db:7e:07:94:cb:5b:46:9f:
                    d5:9c:80:0c:4b:94:30:0f:bf:44:e7:f2:cc:95:75:
                    2c:b4:9a:d3:bb:1f:17:d9:7e:3e:39:66:77:4a:ae:
                    55:21:b8:28:63:7c:a2:a1:94:50:b8:78:b9:1a:51:
                    69:e4:f9:76:f8:93:16:1b:9b:5a:ab:aa:6c:83:87:
                    e0:ee:9a:f3:43:43:f9:48:79:e3:5f:70:53:69:de:
                    68:0a:33:8c:70:d7:2d:64:57:be:03:c6:c9:b1:f1:
                    1a:65:75:d6:e8:1e:60:5a:e9:ec:6a:ff:2c:d7:d0:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D2:3D:4D:87:1D:F4:D8:CC:F0:C9:01:37:05:3E:3D:82:7B:01:C3
            X509v3 Authority Key Identifier:
                keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:b0:09:93:f0:b5:04:7a:65:b5:30:fc:dd:ea:09:1b:a5:
         e1:e2:1b:a8:44:56:bc:3b:f5:f4:5a:34:d7:d7:2c:52:02:76:
         c6:74:59:b7:1c:64:d6:68:87:3d:b4:e0:4a:c2:a0:fc:9d:5d:
         88:d7:ad:a7:4e:65:1a:34:2b:a1:58:34:33:59:4d:10:73:25:
         a8:72:ce:e9:55:1c:e6:ee:47:e4:0b:1b:e2:d8:9d:1e:2e:ae:
         d7:cd:20:72:b2:0a:37:db:3a:f9:a1:5a:ee:81:20:17:ee:3f:
         a3:7c:fc:05:27:ed:dc:ce:c4:a3:00:67:1b:bf:f1:00:ac:82:
         0d:c2:77:69:78:1e:6d:7a:86:cd:4a:99:13:0b:aa:2d:67:64:
         6b:21:b7:0d:30:2f:95:08:99:50:0b:08:82:7e:b7:ef:3f:0d:
         01:fa:11:7c:a5:92:bd:3c:2e:fd:3a:66:65:b3:9e:9e:0b:b8:
         06:3e:72:56:84:9e:b7:bd:f3:e6:0a:cc:fc:fc:a8:26:d8:c0:
         ac:c5:a0:45:5a:62:72:a6:39:35:f6:c7:0d:0d:0f:7d:a1:6e:
         bf:78:ce:4a:d8:a3:52:d1:e8:6d:3b:e5:f5:a5:b4:bd:3e:ba:
         60:34:e9:15:39:ae:fa:b2:50:54:88:02:d6:9a:00:51:f7:28:
         10:7d:8b:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumc3osrVa4WewPQu/FIUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx
NjUzYWEwHhcNMjUwNDEzMTAwMjMzWhcNMjUwNDE0MTAwMjMzWjAzMTEwLwYDVQQD
Eyg0OWQyM2Q0ZDg3MWRmNGQ4Y2NmMGM5MDEzNzA1M2UzZDgyN2IwMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hPul90+i7ysrzfEbJQSEfm8drRD
+I6fTY/Ry57/oKkEGLzJlxSxzDcQpehn62lxPPoDYPig+x0j7tZoLbT4TiQIno7s
r1tqCuZ1qOGV9m9p7Q86zgKxL9N22SKT1Dclp6SkBdBYKOF2L2ANXKn8thbv+HtU
ElaUIoDGzvUgxZVUnHlriD7Qh+JzVf32234HlMtbRp/VnIAMS5QwD79E5/LMlXUs
tJrTux8X2X4+OWZ3Sq5VIbgoY3yioZRQuHi5GlFp5Pl2+JMWG5taq6psg4fg7prz
Q0P5SHnjX3BTad5oCjOMcNctZFe+A8bJsfEaZXXW6B5gWunsav8s19D5jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnSPU2HHfTYzPDJATcFPj2CewHDMB8GA1UdIwQY
MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt
N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3
LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABumwCZPw
tQR6ZbUw/N3qCRul4eIbqERWvDv19Fo019csUgJ2xnRZtxxk1miHPbTgSsKg/J1d
iNetp05lGjQroVg0M1lNEHMlqHLO6VUc5u5H5Asb4tidHi6u180gcrIKN9s6+aFa
7oEgF+4/o3z8BSft3M7EowBnG7/xAKyCDcJ3aXgebXqGzUqZEwuqLWdkayG3DTAv
lQiZUAsIgn637z8NAfoRfKWSvTwu/TpmZbOengu4Bj5yVoSet73z5grM/PyoJtjA
rMWgRVpicqY5NfbHDQ0PfaFuv3jOStijUtHobTvl9aW0vT66YDTpFTmu+rJQVIgC
1poAUfcoEH2LJw==
-----END CERTIFICATE-----