Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File:                     8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier:          D1dBdYrigEuFt178ITWCI6fqYLtZerXbcO0LR30BYWE=
Subject key identifier:   88:F2:3E:15:DC:BA:D1:F8:90:9C:B9:76:40:D0:6E:7A:C0:A6:C9:36
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer:       /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial:       01962F3D340D34EAC1049DFDC55C161D6C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: oRmdk/aHG05ll2/358NX3xDtTrFMUJqjK4NKSC9ky14=)
                          2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:34:0d:34:ea:c1:04:9d:fd:c5:5c:16:1d:6c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=88f23e15dcbad1f8909cb97640d06e7ac0a6c936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:05:75:06:a5:83:82:58:1f:78:bf:5a:23:
                    1f:36:f1:e6:f7:63:c7:63:e1:ce:d3:bf:9c:5d:f2:
                    9b:92:96:cb:d7:08:eb:15:9c:23:bb:a8:0f:8c:42:
                    04:fc:25:df:84:69:47:55:b3:de:ed:97:11:2d:5c:
                    de:82:f8:a9:c0:cf:48:bb:15:c6:36:f8:76:db:32:
                    9d:a6:3a:2f:39:0a:92:fc:76:2a:9d:3d:ec:f0:3a:
                    f8:f8:61:0e:ad:22:25:15:fd:26:1f:1f:cb:ff:24:
                    3a:22:e8:26:bf:94:a8:20:ec:1e:a7:9b:12:a0:1c:
                    de:37:4a:45:a7:d8:36:6e:8e:12:06:3a:28:0a:1c:
                    e1:dd:9f:b9:e9:b3:3c:fa:65:c4:0c:2b:dd:52:34:
                    8f:cc:20:18:18:fc:22:9c:73:77:2b:0e:9b:3f:73:
                    00:42:7d:b0:1e:d8:84:06:d7:3d:e4:ab:84:1b:1d:
                    d2:1a:20:9c:6b:e9:1f:4f:85:f7:c3:98:e3:30:e0:
                    67:f0:20:a8:fd:20:3f:7f:d7:34:a6:e6:5c:ea:89:
                    35:b9:7c:02:cb:76:d5:3f:da:8f:44:b1:94:d3:66:
                    4b:5e:31:87:ff:da:f9:7e:0b:c0:b7:24:0f:73:57:
                    61:41:40:77:e5:05:13:dc:9b:1f:33:8d:ad:46:c8:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F2:3E:15:DC:BA:D1:F8:90:9C:B9:76:40:D0:6E:7A:C0:A6:C9:36
            X509v3 Authority Key Identifier:
                keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1d:83:cc:24:9a:2a:6c:95:58:df:a5:f0:5a:b1:05:33:db:
         13:28:52:e8:d6:09:53:b1:56:92:40:3a:e0:aa:b6:35:15:47:
         e3:4d:30:dc:95:5e:63:8a:d2:0b:11:69:d3:54:da:68:95:7d:
         19:a1:09:d6:48:67:9d:67:d5:85:7a:70:45:01:19:28:c9:ec:
         70:47:3f:14:eb:48:5e:36:83:89:18:a5:34:ad:06:75:68:97:
         dc:3c:c2:99:f7:82:d6:42:73:0e:fa:6c:55:a1:8e:3f:0b:1b:
         bb:ae:37:f4:6d:85:b3:c1:43:86:13:a9:e0:c2:94:e6:6a:58:
         8e:ea:ab:49:32:41:3c:96:8c:5b:43:b9:12:94:4c:55:50:5d:
         a3:95:e5:16:bb:46:6e:bd:91:f0:9f:53:a3:5e:7f:ee:bd:0c:
         e0:19:4b:9a:bf:83:df:e6:3f:6a:d6:b3:09:3b:de:c4:f6:09:
         14:e8:53:14:da:f6:42:29:fb:7e:d5:cf:3c:a3:df:d7:71:a5:
         43:d7:6f:24:59:c2:39:50:14:27:09:37:11:ef:bc:57:c4:80:
         1c:03:55:64:65:98:a4:9f:9e:93:06:3c:89:ef:27:29:e2:40:
         03:a8:db:94:12:fd:f6:04:41:c1:01:0a:7d:23:3f:d4:a5:e4:
         a6:46:b1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTQNNOrBBJ39xVwWHWwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh
YWI2OWEwHhcNMjUwNDEzMTMwMTAyWhcNMjUwNDE0MTMwMTAyWjAzMTEwLwYDVQQD
Eyg4OGYyM2UxNWRjYmFkMWY4OTA5Y2I5NzY0MGQwNmU3YWMwYTZjOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspcFdQalg4JYH3i/WiMfNvHm92PH
Y+HO07+cXfKbkpbL1wjrFZwju6gPjEIE/CXfhGlHVbPe7ZcRLVzegvipwM9IuxXG
Nvh22zKdpjovOQqS/HYqnT3s8Dr4+GEOrSIlFf0mHx/L/yQ6Iugmv5SoIOwep5sS
oBzeN0pFp9g2bo4SBjooChzh3Z+56bM8+mXEDCvdUjSPzCAYGPwinHN3Kw6bP3MA
Qn2wHtiEBtc95KuEGx3SGiCca+kfT4X3w5jjMOBn8CCo/SA/f9c0puZc6ok1uXwC
y3bVP9qPRLGU02ZLXjGH/9r5fgvAtyQPc1dhQUB35QUT3JsfM42tRsj6wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjyPhXcutH4kJy5dkDQbnrApsk2MB8GA1UdIwQY
MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt
OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm
LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZB2DzCSa
KmyVWN+l8FqxBTPbEyhS6NYJU7FWkkA64Kq2NRVH400w3JVeY4rSCxFp01TaaJV9
GaEJ1khnnWfVhXpwRQEZKMnscEc/FOtIXjaDiRilNK0GdWiX3DzCmfeC1kJzDvps
VaGOPwsbu6439G2Fs8FDhhOp4MKU5mpYjuqrSTJBPJaMW0O5EpRMVVBdo5XlFrtG
br2R8J9To15/7r0M4BlLmr+D3+Y/atazCTvexPYJFOhTFNr2Qin7ftXPPKPf13Gl
Q9dvJFnCOVAUJwk3Ee+8V8SAHANVZGWYpJ+ekwY8ie8nKeJAA6jblBL99gRBwQEK
fSM/1KXkpkaxEw==
-----END CERTIFICATE-----