Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File:                     agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier:          rrVMaqIet+0/3376ui/N4er670Btt5TTUNCncjGBnpE=
Subject key identifier:   48:EE:0F:F7:6D:58:AE:08:F1:ED:D3:E0:92:7F:C3:86:27:81:F3:9F
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer:       /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial:       01962FAB2CD243C0E13285D6D1072249D26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number:          07DF
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
                          2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
                          3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: FUVrH44MEONoD+i3rqjQqPs7F/XoyDfY5ZHiEXokHgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:d2:43:c0:e1:32:85:d6:d1:07:22:49:d2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=48ee0ff76d58ae08f1edd3e0927fc3862781f39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:d9:d2:d6:ae:22:c1:8e:6b:e7:26:c1:fb:
                    ec:b9:86:82:81:18:e2:d4:30:bf:4f:c9:81:9d:cc:
                    b3:45:0a:1e:cb:92:49:44:9a:17:15:f2:bc:73:ee:
                    29:7d:52:f9:4f:da:06:7e:2b:89:da:25:e5:2a:97:
                    67:e9:47:46:58:4b:af:44:4b:c6:29:57:31:68:60:
                    8b:24:28:9d:94:a1:f2:33:d9:7c:14:e6:f7:b7:0e:
                    88:b9:1a:07:43:84:9f:8a:c8:26:72:ca:fa:c6:2c:
                    e1:9c:7d:3b:8e:53:62:be:11:a1:37:fe:cf:d2:77:
                    55:16:64:1b:51:c7:83:de:ba:8f:f1:46:8c:65:ab:
                    3f:36:81:0a:c2:d0:e8:71:e3:7c:a5:03:09:4d:2b:
                    0e:47:89:38:11:09:37:6e:5f:49:ec:fb:73:3e:65:
                    6f:71:89:2a:a6:07:20:d1:7b:e1:c8:c2:c3:4a:a2:
                    61:ec:24:89:a7:a6:58:63:24:87:55:55:0a:32:ba:
                    05:7d:b5:1d:3b:40:af:ab:4e:04:7d:0b:69:cb:d0:
                    0f:4b:a0:a6:8f:50:b6:89:3f:6d:2a:2e:dd:04:de:
                    f1:fe:fe:31:13:90:0b:15:2c:c8:cd:f2:77:54:76:
                    b4:cf:65:28:07:26:70:66:24:4e:0d:28:89:0e:de:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:0F:F7:6D:58:AE:08:F1:ED:D3:E0:92:7F:C3:86:27:81:F3:9F
            X509v3 Authority Key Identifier:
                keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:58:7d:43:19:43:0b:48:3d:27:31:e6:01:d6:06:c1:42:5a:
         87:77:14:4a:88:77:2c:12:e8:35:03:7d:e8:99:e6:76:ac:04:
         32:b0:bb:ab:a9:b3:12:a5:20:4f:c7:52:ed:59:f2:01:a2:71:
         46:9a:fe:12:9a:6b:64:3e:b1:df:a2:3c:49:32:57:32:8e:96:
         b9:aa:d1:59:40:c6:4d:04:36:bc:66:9a:d5:81:6d:e0:3d:26:
         34:4d:0b:79:c6:95:4f:8e:02:28:9a:cc:53:12:e6:c7:9e:d2:
         de:fa:ec:bd:17:ed:d6:26:04:58:84:23:10:2f:34:6f:bb:e3:
         83:7d:a1:61:b3:83:98:47:74:d3:5e:41:0c:4b:8c:60:54:85:
         c2:ba:55:87:3f:a4:04:4e:e3:91:7d:e4:90:97:e4:33:6c:84:
         f7:16:54:e1:3c:83:21:0d:83:36:27:ec:6c:d8:71:5c:dc:a0:
         4a:3d:67:05:cb:10:33:5e:68:c4:7d:61:47:6a:f2:14:b7:b2:
         2e:15:4f:08:6f:bb:cc:8a:ba:de:34:09:95:5d:52:eb:80:56:
         4f:6f:b7:91:da:ae:c9:65:19:ce:05:6a:c3:79:9e:a1:1c:25:
         b0:d2:5a:a7:06:fb:f9:42:44:78:6e:b2:7f:44:68:7d:0b:00:
         4a:8f:53:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqyzSQ8DhMoXW0QciSdJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx
YzRkNjgwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
Eyg0OGVlMGZmNzZkNThhZTA4ZjFlZGQzZTA5MjdmYzM4NjI3ODFmMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRHZ0tauIsGOa+cmwfvsuYaCgRji
1DC/T8mBncyzRQoey5JJRJoXFfK8c+4pfVL5T9oGfiuJ2iXlKpdn6UdGWEuvREvG
KVcxaGCLJCidlKHyM9l8FOb3tw6IuRoHQ4Sfisgmcsr6xizhnH07jlNivhGhN/7P
0ndVFmQbUceD3rqP8UaMZas/NoEKwtDoceN8pQMJTSsOR4k4EQk3bl9J7PtzPmVv
cYkqpgcg0XvhyMLDSqJh7CSJp6ZYYySHVVUKMroFfbUdO0Cvq04EfQtpy9APS6Cm
j1C2iT9tKi7dBN7x/v4xE5ALFSzIzfJ3VHa0z2UoByZwZiRODSiJDt4eSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjuD/dtWK4I8e3T4JJ/w4YngfOfMB8GA1UdIwQY
MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt
Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy
LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1h9QxlD
C0g9JzHmAdYGwUJah3cUSoh3LBLoNQN96JnmdqwEMrC7q6mzEqUgT8dS7VnyAaJx
Rpr+EpprZD6x36I8STJXMo6WuarRWUDGTQQ2vGaa1YFt4D0mNE0LecaVT44CKJrM
UxLmx57S3vrsvRft1iYEWIQjEC80b7vjg32hYbODmEd0015BDEuMYFSFwrpVhz+k
BE7jkX3kkJfkM2yE9xZU4TyDIQ2DNifsbNhxXNygSj1nBcsQM15oxH1hR2ryFLey
LhVPCG+7zIq63jQJlV1S64BWT2+3kdquyWUZzgVqw3meoRwlsNJapwb7+UJEeG6y
f0RofQsASo9T1A==
-----END CERTIFICATE-----