Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          HDbeAyhS1b0fuRiVWwR6d+J18QHFNWyI/h11og3CoYk=
Subject key identifier:   02:61:69:B3:1E:E9:25:BF:90:A1:BA:06:AA:72:57:4B:A2:84:61:27
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       01962FAB58CFBD03A72844DEB0AAA1BC655B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
                          2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: lxu9YYnkJ43V6ORJkkGZm83hNXI+vXjPgZ+2wRFhzOU=)
                          3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
                          4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:cf:bd:03:a7:28:44:de:b0:aa:a1:bc:65:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=026169b31ee925bf90a1ba06aa72574ba2846127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:4c:27:60:5d:00:15:95:36:97:cf:10:4c:
                    e9:85:ea:00:41:f2:6a:e8:97:6b:06:56:bf:dd:2c:
                    0c:b9:b7:35:6f:ee:07:ac:ba:65:39:23:1a:93:65:
                    cc:d2:75:06:29:ab:39:a0:fe:ef:af:b0:b5:59:6f:
                    ed:3b:b0:52:88:e2:be:85:a1:de:ea:1d:69:5a:d3:
                    4a:2c:6a:61:38:05:ae:ee:8a:ce:8d:0d:44:4e:84:
                    3e:0c:8f:bf:c3:d7:5e:4a:b8:08:00:f8:35:4a:75:
                    e4:33:f5:ac:67:61:92:a0:26:23:0e:aa:f6:f3:af:
                    39:22:1e:3a:aa:14:b7:28:fb:67:f1:bf:f2:96:cb:
                    5e:d4:8c:db:4e:0b:ad:96:12:d8:88:b8:99:ba:74:
                    42:67:ca:a2:0a:a0:72:aa:5d:51:6a:f1:a9:37:96:
                    56:13:58:8e:34:c9:b5:c2:23:53:b9:d1:36:94:3b:
                    4b:71:8f:56:58:5e:63:19:92:18:9e:8a:dc:c1:11:
                    64:43:49:76:67:3b:df:df:4c:53:8b:96:68:76:70:
                    a1:10:50:47:d4:e8:48:05:8b:8d:8c:44:3a:78:b7:
                    86:8b:0c:45:69:dc:7d:da:65:91:36:7c:6f:50:12:
                    17:41:3e:6a:b1:62:4f:26:d9:1c:b5:0f:d3:2b:a1:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:69:B3:1E:E9:25:BF:90:A1:BA:06:AA:72:57:4B:A2:84:61:27
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:16:33:ab:3d:75:1d:3c:5a:36:7c:71:96:3c:88:24:00:bb:
         6c:cd:c2:21:a1:f3:9e:72:9b:52:55:e1:98:ec:62:ef:af:c0:
         b3:cc:61:49:35:f0:60:77:51:8b:1d:d4:a3:ba:d1:bf:89:69:
         6e:2a:ba:ec:93:0d:0f:b9:98:43:43:2b:d5:99:01:23:eb:60:
         74:0b:27:a9:2b:9a:12:39:14:b2:43:de:f2:3e:88:47:1d:cc:
         38:54:1e:22:1d:dd:4b:e0:8e:0d:51:fc:28:1f:a3:f6:e6:8e:
         7c:17:59:fd:76:d8:11:80:50:d1:75:dd:03:93:17:39:44:b2:
         86:da:12:60:b4:e6:0d:fa:dc:bd:74:06:74:0c:0d:4b:27:1c:
         f5:68:04:83:a2:fb:2b:7e:a2:59:63:f8:32:3a:6a:ce:87:13:
         a1:dc:9b:1b:f2:e4:7d:5b:0c:6d:28:a8:9e:d0:07:1c:38:f2:
         52:53:2b:97:fa:55:d9:46:a4:bb:f9:62:5d:60:a5:fd:d4:43:
         09:91:fc:79:7f:6d:65:fd:75:81:1c:ea:c3:6b:b1:8c:1c:b4:
         ae:fe:a2:8d:97:28:0a:52:14:93:4d:9a:ec:cc:c5:bd:c6:b6:
         55:da:ec:14:fc:2e:73:b8:e5:5b:73:f5:1b:78:10:a5:4b:3d:
         f6:70:c4:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1jPvQOnKETesKqhvGVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5
NjMxZDEwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
EygwMjYxNjliMzFlZTkyNWJmOTBhMWJhMDZhYTcyNTc0YmEyODQ2MTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZJMJ2BdABWVNpfPEEzpheoAQfJq
6JdrBla/3SwMubc1b+4HrLplOSMak2XM0nUGKas5oP7vr7C1WW/tO7BSiOK+haHe
6h1pWtNKLGphOAWu7orOjQ1EToQ+DI+/w9deSrgIAPg1SnXkM/WsZ2GSoCYjDqr2
8685Ih46qhS3KPtn8b/ylste1IzbTgutlhLYiLiZunRCZ8qiCqByql1RavGpN5ZW
E1iONMm1wiNTudE2lDtLcY9WWF5jGZIYnorcwRFkQ0l2Zzvf30xTi5ZodnChEFBH
1OhIBYuNjEQ6eLeGiwxFadx92mWRNnxvUBIXQT5qsWJPJtkctQ/TK6E9VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJhabMe6SW/kKG6BqpyV0uihGEnMB8GA1UdIwQY
MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt
MDMwNzdlMzdjNjFhLzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh
LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRYzqz11
HTxaNnxxljyIJAC7bM3CIaHznnKbUlXhmOxi76/As8xhSTXwYHdRix3Uo7rRv4lp
biq67JMND7mYQ0Mr1ZkBI+tgdAsnqSuaEjkUskPe8j6IRx3MOFQeIh3dS+CODVH8
KB+j9uaOfBdZ/XbYEYBQ0XXdA5MXOUSyhtoSYLTmDfrcvXQGdAwNSycc9WgEg6L7
K36iWWP4MjpqzocTodybG/LkfVsMbSiontAHHDjyUlMrl/pV2Uaku/liXWCl/dRD
CZH8eX9tZf11gRzqw2uxjBy0rv6ijZcoClIUk02a7MzFvca2VdrsFPwuc7jlW3P1
G3gQpUs99nDEMg==
-----END CERTIFICATE-----