Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File:                     FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier:          JG3BsM9lNrKuKc/GJVsZJltEve8pziT+VVDHz+AyC8g=
Subject key identifier:   29:A6:46:F0:CC:47:80:E5:F4:EA:CA:CB:03:EB:9F:B7:9F:24:FB:75
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer:       /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial:       01962DF3E4D67D9DBC9B5F2B7B30605D3891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=)
                          2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=)
                          3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: wdFBJNzeyQBLaSb7Fo/qrZQuvKaCsLVSwq5Q6DlDftI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:d6:7d:9d:bc:9b:5f:2b:7b:30:60:5d:38:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=29a646f0cc4780e5f4eacacb03eb9fb79f24fb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:26:f7:09:12:af:d0:2a:82:eb:12:cf:61:
                    17:46:75:f6:4c:1b:af:b2:43:f5:89:4c:64:8a:f6:
                    81:61:7e:c4:b7:1a:40:f5:60:c8:f8:09:20:87:5f:
                    bd:4f:3e:88:ed:24:e9:71:6d:92:a0:92:e5:76:21:
                    83:94:1b:33:3b:11:dd:7b:2b:21:44:23:68:92:52:
                    d6:05:0a:c7:42:ba:6c:7d:95:6c:76:02:d9:67:00:
                    ad:ed:99:53:c8:ee:57:f6:f7:cb:fa:ec:31:a5:76:
                    cf:6e:7e:94:8e:db:2c:ed:f2:1b:8c:e4:0c:a6:47:
                    63:3b:4e:bb:21:e0:6e:6b:b6:c2:30:5d:b9:73:78:
                    27:32:04:7c:7a:46:f7:cc:0c:99:88:0c:2f:93:a2:
                    1c:f1:4c:d4:9a:09:b6:90:f4:c6:10:9e:e8:2a:92:
                    74:5b:55:a4:ec:39:54:da:86:ed:ed:30:24:16:86:
                    f2:e5:18:05:f0:e0:23:69:70:e7:06:ba:28:71:4b:
                    5d:46:db:e7:30:3a:26:b2:e8:53:9f:78:b1:57:05:
                    42:fa:ac:12:a6:f6:59:01:20:90:c4:36:64:cc:59:
                    45:a1:23:0c:d6:b4:44:dc:bb:24:55:de:49:f6:fe:
                    98:c6:cf:87:1f:2a:0c:55:c4:70:ee:74:cb:3d:e1:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A6:46:F0:CC:47:80:E5:F4:EA:CA:CB:03:EB:9F:B7:9F:24:FB:75
            X509v3 Authority Key Identifier:
                keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:1a:cc:68:05:51:45:fd:c9:07:9e:96:7c:2f:db:db:03:
         1f:63:bb:4b:aa:e1:b1:b9:2a:b1:43:37:86:24:ba:8d:e9:6e:
         63:7d:90:7b:31:81:71:3f:06:da:d1:ca:e5:25:41:f7:39:15:
         46:c9:c8:b5:83:bb:ff:11:55:f4:0c:aa:73:ae:3c:82:05:4a:
         9f:ba:cc:db:cd:b2:c8:b2:83:d3:0f:74:28:31:8d:52:75:3d:
         25:46:1d:bd:92:39:7b:17:c1:71:eb:e0:40:a5:aa:36:ac:dd:
         29:53:29:65:0f:6e:63:01:74:75:56:c9:33:46:b8:86:10:ff:
         72:eb:91:1b:52:dd:37:44:7c:95:a5:f4:a6:55:b2:97:f8:18:
         b9:95:1a:cc:08:c8:94:2f:68:ec:ca:90:9f:16:a8:90:92:18:
         1f:d3:e3:98:f6:f8:c9:bb:3a:d4:e6:a2:e4:92:6b:a6:1f:ef:
         16:d7:1a:bf:ea:ed:82:8f:86:da:ca:42:3d:4f:cd:9f:21:f2:
         7a:e3:51:e5:c4:01:ec:a7:36:7b:11:ea:89:c0:f1:b7:fe:2d:
         8b:43:d3:42:e2:86:05:07:63:da:cf:3d:e8:8f:0d:2c:8c:99:
         26:de:43:9d:6c:ce:af:d5:4f:89:47:d2:6e:25:07:5f:4f:92:
         ec:40:08:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+TWfZ28m18rezBgXTiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi
Nzk1YTAwHhcNMjUwNDEzMDcwMTIwWhcNMjUwNDE0MDcwMTIwWjAzMTEwLwYDVQQD
EygyOWE2NDZmMGNjNDc4MGU1ZjRlYWNhY2IwM2ViOWZiNzlmMjRmYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqgm9wkSr9AqgusSz2EXRnX2TBuv
skP1iUxkivaBYX7EtxpA9WDI+Akgh1+9Tz6I7STpcW2SoJLldiGDlBszOxHdeysh
RCNoklLWBQrHQrpsfZVsdgLZZwCt7ZlTyO5X9vfL+uwxpXbPbn6Ujtss7fIbjOQM
pkdjO067IeBua7bCMF25c3gnMgR8ekb3zAyZiAwvk6Ic8UzUmgm2kPTGEJ7oKpJ0
W1Wk7DlU2obt7TAkFoby5RgF8OAjaXDnBroocUtdRtvnMDomsuhTn3ixVwVC+qwS
pvZZASCQxDZkzFlFoSMM1rRE3LskVd5J9v6Yxs+HHyoMVcRw7nTLPeEoEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmmRvDMR4Dl9OrKywPrn7efJPt1MB8GA1UdIwQY
MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt
YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2
LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaoazGgF
UUX9yQeelnwv29sDH2O7S6rhsbkqsUM3hiS6jeluY32QezGBcT8G2tHK5SVB9zkV
RsnItYO7/xFV9Ayqc648ggVKn7rM282yyLKD0w90KDGNUnU9JUYdvZI5exfBcevg
QKWqNqzdKVMpZQ9uYwF0dVbJM0a4hhD/cuuRG1LdN0R8laX0plWyl/gYuZUazAjI
lC9o7MqQnxaokJIYH9PjmPb4ybs61Oai5JJrph/vFtcav+rtgo+G2spCPU/NnyHy
euNR5cQB7Kc2exHqicDxt/4ti0PTQuKGBQdj2s896I8NLIyZJt5DnWzOr9VPiUfS
biUHX0+S7EAI/w==
-----END CERTIFICATE-----