Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File:                     1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier:          wHdn7GVTwO4EZuNtUyYSdhu965OhvZv2sEL+hz7bf0s=
Subject key identifier:   72:D2:F1:31:E3:F8:D8:50:4D:56:92:5D:F7:38:7E:91:33:92:32:B8
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer:       /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial:       01962DF4523732C61526AB23B7BC844D9ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: V4TIbxoCW17wxiDXFTxCiS1W2exgaLacE6xX41VJ0ZM=)
                          2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
                          3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:52:37:32:c6:15:26:ab:23:b7:bc:84:4d:9e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=72d2f131e3f8d8504d56925df7387e91339232b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:0c:23:5f:67:f3:f7:02:87:27:06:d3:d7:
                    cc:e6:51:78:d4:4d:1e:a9:65:65:df:09:9b:67:9b:
                    57:17:0a:56:16:3b:d5:8f:77:36:cb:f9:a8:52:6e:
                    87:58:d4:fa:44:09:6c:5d:c4:b5:16:26:7e:a9:b2:
                    95:80:1f:77:55:4e:65:26:2f:d1:f8:58:65:0f:ce:
                    29:8c:1a:2b:a1:b3:1b:ea:12:9c:15:75:5c:2c:ea:
                    95:e0:c8:75:e1:df:f4:7d:75:8c:98:4c:c4:3f:e7:
                    55:43:b2:fd:02:47:72:37:79:57:1c:f0:48:7f:88:
                    b4:75:4e:20:aa:28:70:12:ef:f0:e2:5f:ff:5d:91:
                    b7:46:27:0b:8b:a2:df:04:56:cd:29:8f:96:94:11:
                    0c:97:8f:4f:36:b9:33:15:8c:a9:76:56:16:05:11:
                    c5:c0:f8:61:73:c2:90:11:26:c1:0f:00:c7:4c:6f:
                    a1:92:76:52:14:f4:9b:b5:8b:0b:1a:98:6d:83:c6:
                    51:59:0c:22:eb:d0:81:b1:e6:10:07:4d:8d:70:1f:
                    6d:7a:16:6a:50:c1:a7:6f:f3:2d:4e:95:3d:0f:1d:
                    37:2a:45:15:d7:b8:98:00:8d:b5:a4:ea:8b:f1:0c:
                    00:aa:88:ae:59:20:cc:59:b8:c4:69:bb:47:79:22:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:F1:31:E3:F8:D8:50:4D:56:92:5D:F7:38:7E:91:33:92:32:B8
            X509v3 Authority Key Identifier:
                keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:e8:5c:fa:c9:aa:93:15:26:90:83:d4:1b:5a:82:97:8f:
         73:4f:91:64:34:59:dd:d2:9a:2f:a2:e2:3a:27:4e:70:d7:d3:
         ec:8e:5e:8c:3e:9f:7b:96:ae:3e:af:ac:f8:cb:74:2f:06:92:
         01:28:69:08:b3:d0:9d:c3:60:9e:08:a3:04:82:6b:68:72:2b:
         e4:f4:8d:f8:0d:17:c6:22:69:20:6f:5d:4c:2b:f6:04:19:e5:
         ea:41:22:bc:3a:de:2b:ae:85:2d:e2:1a:41:30:eb:ff:91:fb:
         35:31:08:34:c9:04:98:c3:16:23:80:c4:4b:dc:eb:68:6a:62:
         f7:88:5d:ee:91:14:1b:d7:5b:ae:0b:60:8e:eb:b8:82:76:1e:
         0c:87:54:e5:c7:06:72:36:9f:d2:53:57:1f:82:8a:44:7b:20:
         05:3f:49:91:e4:5e:e1:0e:05:07:b1:61:55:d1:93:db:99:79:
         d8:2d:1d:e1:6c:c3:a5:a3:71:12:7c:b8:34:c9:a8:77:0d:78:
         fe:e5:62:bf:0d:ec:50:48:44:b8:58:eb:10:c5:03:c7:e7:18:
         02:27:b2:86:b6:6a:64:26:6e:a3:8e:c6:02:27:72:d1:a8:2f:
         e0:ff:c8:a5:a0:6f:cd:d3:35:02:19:2c:6b:de:16:5a:4b:b0:
         9f:78:7c:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9FI3MsYVJqsjt7yETZ7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjUwNDEzMDcwMTQ4WhcNMjUwNDE0MDcwMTQ4WjAzMTEwLwYDVQQD
Eyg3MmQyZjEzMWUzZjhkODUwNGQ1NjkyNWRmNzM4N2U5MTMzOTIzMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jIMI19n8/cChycG09fM5lF41E0e
qWVl3wmbZ5tXFwpWFjvVj3c2y/moUm6HWNT6RAlsXcS1FiZ+qbKVgB93VU5lJi/R
+FhlD84pjBorobMb6hKcFXVcLOqV4Mh14d/0fXWMmEzEP+dVQ7L9AkdyN3lXHPBI
f4i0dU4gqihwEu/w4l//XZG3RicLi6LfBFbNKY+WlBEMl49PNrkzFYypdlYWBRHF
wPhhc8KQESbBDwDHTG+hknZSFPSbtYsLGphtg8ZRWQwi69CBseYQB02NcB9tehZq
UMGnb/MtTpU9Dx03KkUV17iYAI21pOqL8QwAqoiuWSDMWbjEabtHeSL7kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLS8THj+NhQTVaSXfc4fpEzkjK4MB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblfoXPrJ
qpMVJpCD1BtagpePc0+RZDRZ3dKaL6LiOidOcNfT7I5ejD6fe5auPq+s+Mt0LwaS
AShpCLPQncNgngijBIJraHIr5PSN+A0XxiJpIG9dTCv2BBnl6kEivDreK66FLeIa
QTDr/5H7NTEINMkEmMMWI4DES9zraGpi94hd7pEUG9dbrgtgjuu4gnYeDIdU5ccG
cjaf0lNXH4KKRHsgBT9JkeRe4Q4FB7FhVdGT25l52C0d4WzDpaNxEny4NMmodw14
/uVivw3sUEhEuFjrEMUDx+cYAieyhrZqZCZuo47GAidy0agv4P/IpaBvzdM1Ahks
a94WWkuwn3h8BQ==
-----END CERTIFICATE-----