Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File:                     IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier:          17r2Jjg9jU/JcjXGGQXPUC746dOmVRuxwcGn7a2lCXA=
Subject key identifier:   AD:72:1B:CB:28:5C:E5:2E:DA:4B:3E:2C:2E:C1:52:FE:43:8A:C8:91
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer:       /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial:       01962F0736F32F4B8E82FBDC72ED6204F074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: FDhlD+KCfXtqpH3wSwWxWXPb+h9cNJ8eSfGLlfuGu4M=)
                          2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:f3:2f:4b:8e:82:fb:dc:72:ed:62:04:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=ad721bcb285ce52eda4b3e2c2ec152fe438ac891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:79:3e:95:d0:27:df:b1:03:85:bc:75:72:
                    ef:93:2d:e6:c9:4d:80:92:79:a1:c1:e1:c9:58:26:
                    32:35:de:d1:ab:ea:b0:f5:19:ec:94:f9:7a:d4:fd:
                    5b:28:a3:87:d3:ad:c7:bf:a4:ac:80:74:25:b2:05:
                    9e:a2:68:70:89:10:89:e8:1c:05:9b:b7:fc:ec:69:
                    64:d5:05:9c:10:d2:d0:03:3f:9e:0e:ad:8c:f0:df:
                    44:43:9c:27:3d:11:38:60:9c:f2:2c:09:5b:72:73:
                    ec:d2:fa:9f:2c:be:79:34:60:af:88:36:2e:de:ef:
                    12:e3:93:ee:70:e7:73:ad:fc:62:44:4f:fc:c5:24:
                    7b:63:fa:3a:f6:ae:2a:d2:a5:cf:6c:40:0c:ba:29:
                    42:4a:c7:e3:af:e6:bf:57:ae:f5:ee:d4:66:9c:d0:
                    61:15:70:16:d0:bb:55:a7:f2:a8:e4:9b:cc:10:0b:
                    a1:d0:bc:6e:a4:91:bc:e0:97:e2:e5:92:c6:37:35:
                    00:09:9c:09:9a:8a:ec:92:8f:2e:c2:c3:d2:5f:75:
                    bb:ab:c8:08:dd:06:a2:8d:95:6b:72:9a:b2:6d:ab:
                    21:64:9c:44:c5:9e:ad:71:ec:ff:16:25:69:33:a7:
                    5e:d2:4d:d7:db:d0:82:f9:1c:1d:3d:a2:3b:6b:30:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:72:1B:CB:28:5C:E5:2E:DA:4B:3E:2C:2E:C1:52:FE:43:8A:C8:91
            X509v3 Authority Key Identifier:
                keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:95:27:c1:f1:31:d8:5f:d9:59:e5:76:82:d2:b8:2b:59:
         90:69:6e:7f:56:c5:22:4d:66:16:a9:89:19:33:7a:20:79:ce:
         57:9b:e6:a7:6e:be:97:ef:9c:a0:04:f8:59:cd:91:76:1f:16:
         77:b1:a7:de:e2:00:f6:68:e7:1a:40:be:87:0d:e8:9e:96:ae:
         c8:33:87:4c:fc:4f:bf:87:c3:4a:5b:0b:b0:fd:4f:06:2b:be:
         2d:27:2f:87:1a:e7:6d:68:ad:87:56:a4:7a:d3:40:1d:af:b0:
         15:f2:0f:8c:e3:81:61:9b:17:23:df:43:41:fa:e5:1a:24:2f:
         55:3d:3e:46:ba:b4:09:32:68:df:23:95:d9:6d:de:5c:98:ea:
         77:84:c5:9d:aa:34:f9:bd:33:89:ff:64:f0:48:59:70:d9:c4:
         6c:b5:f5:6b:7f:7a:c0:aa:f7:27:7f:b2:c6:28:6a:e8:54:d4:
         79:9e:15:08:01:ed:ee:54:19:d9:06:17:e0:7e:2f:5c:0b:df:
         24:f9:5d:e1:68:50:33:c2:b1:d1:29:8e:97:b4:d8:34:e6:aa:
         a0:90:2d:d8:0a:95:cb:25:48:ea:9a:39:f4:80:9c:a0:a5:8e:
         bf:6c:aa:42:ba:72:1a:cb:85:df:38:b7:98:42:99:67:9c:24:
         6d:bf:91:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzbzL0uOgvvccu1iBPB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmI0YTBjNDZlYTkxZTcwNjBmYjI5NDI2YTEzMjMzODUy
Njg0OTUwHhcNMjUwNDEzMTIwMjA0WhcNMjUwNDE0MTIwMjA0WjAzMTEwLwYDVQQD
EyhhZDcyMWJjYjI4NWNlNTJlZGE0YjNlMmMyZWMxNTJmZTQzOGFjODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2p5PpXQJ9+xA4W8dXLvky3myU2A
knmhweHJWCYyNd7Rq+qw9RnslPl61P1bKKOH063Hv6SsgHQlsgWeomhwiRCJ6BwF
m7f87Glk1QWcENLQAz+eDq2M8N9EQ5wnPRE4YJzyLAlbcnPs0vqfLL55NGCviDYu
3u8S45PucOdzrfxiRE/8xSR7Y/o69q4q0qXPbEAMuilCSsfjr+a/V6717tRmnNBh
FXAW0LtVp/Ko5JvMEAuh0LxupJG84Jfi5ZLGNzUACZwJmorsko8uwsPSX3W7q8gI
3QaijZVrcpqybashZJxExZ6tcez/FiVpM6de0k3X29CC+RwdPaI7azB0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1yG8soXOUu2ks+LC7BUv5DisiRMB8GA1UdIwQY
MBaAFCD7SgxG6pHnBg+ylCahMjOFJoSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUt
ZmNhZjRjZGQxNjYzLzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wYjM1YzUtODk5MC00ZTc2LWFlZWUtZmNhZjRjZGQxNjYz
LzEvSVB0S0RFYnFrZWNHRDdLVUpxRXlNNFVtaEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8CVJ8Hx
Mdhf2VnldoLSuCtZkGluf1bFIk1mFqmJGTN6IHnOV5vmp26+l++coAT4Wc2Rdh8W
d7Gn3uIA9mjnGkC+hw3onpauyDOHTPxPv4fDSlsLsP1PBiu+LScvhxrnbWith1ak
etNAHa+wFfIPjOOBYZsXI99DQfrlGiQvVT0+Rrq0CTJo3yOV2W3eXJjqd4TFnao0
+b0zif9k8EhZcNnEbLX1a396wKr3J3+yxihq6FTUeZ4VCAHt7lQZ2QYX4H4vXAvf
JPld4WhQM8Kx0SmOl7TYNOaqoJAt2AqVyyVI6po59ICcoKWOv2yqQrpyGsuF3zi3
mEKZZ5wkbb+RNA==
-----END CERTIFICATE-----