Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          X+vuDH2f6d3dhUPLcB7lrnVOFb9TxnobGo6c9ffByac=
Subject key identifier:   29:15:67:15:FC:2F:9B:E4:22:59:96:41:16:B3:9B:90:37:32:14:AB
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       01962F74F4D0927FD6B3FE32A76E53B535F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          03B2
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: jac0OH1POXXOOL1eYtxooweX8ExKBltF5XGTzh+JRL4=)
                          2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
                          3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
                          4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f4:d0:92:7f:d6:b3:fe:32:a7:6e:53:b5:35:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=29156715fc2f9be42259964116b39b90373214ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:ed:4e:4e:87:42:39:80:1e:c8:b2:ea:56:
                    19:7c:88:ca:b0:5b:d8:f5:9a:33:bc:d4:32:d9:a8:
                    b8:1d:cd:69:07:5d:1d:56:8c:78:14:ef:63:3b:0d:
                    f7:c5:4a:0b:ff:63:ce:ee:5a:e0:f8:9c:25:b1:b0:
                    32:b4:d2:0d:f0:8b:0c:8a:53:03:df:6e:dd:79:46:
                    5f:00:5c:21:fe:a0:3f:13:6f:e6:56:50:69:0f:5e:
                    1e:09:64:56:ce:ac:8e:f2:0e:08:12:2f:b0:5c:cb:
                    5f:af:69:16:1c:74:bc:50:8d:ad:d0:6b:31:44:cf:
                    8c:7f:3d:4a:a8:50:f3:90:aa:39:95:1a:40:a6:ab:
                    78:64:85:eb:db:13:e2:a3:3b:34:6f:50:a0:1a:fc:
                    6f:fb:27:06:14:89:bf:34:dc:ed:83:f7:f2:37:dc:
                    aa:63:60:b2:4b:8e:60:1c:ad:23:3c:8d:55:d5:26:
                    30:b5:94:03:65:e0:72:68:25:21:e3:0f:44:0f:1b:
                    d7:7e:b8:9d:25:01:b6:86:29:e7:b8:cf:70:9c:16:
                    7a:77:2e:00:a0:ef:40:35:26:d0:19:21:b5:86:83:
                    3c:1e:8c:cd:63:40:e8:e3:f4:cb:af:66:f4:68:2b:
                    8a:66:25:a4:78:78:be:41:e0:ec:41:e5:24:2a:5d:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:15:67:15:FC:2F:9B:E4:22:59:96:41:16:B3:9B:90:37:32:14:AB
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:13:e7:d1:68:2d:f5:42:df:a0:3f:ee:37:b9:1a:bf:ec:
         22:62:84:a2:60:f1:78:f0:3c:a1:1d:c4:bd:5a:1d:78:78:fc:
         40:f1:83:6e:fb:3e:98:83:da:14:cf:ea:52:a8:cb:39:3f:e4:
         7c:54:bc:00:a2:b7:06:56:b9:02:e7:e7:de:32:c9:1b:28:a2:
         aa:c1:fc:1f:76:3f:25:ac:da:a2:4c:c3:d2:85:11:e4:8c:9c:
         5d:b1:4c:b6:76:90:a0:7d:1f:5b:8a:93:47:7f:ee:fa:f7:bd:
         27:ba:4f:15:47:bc:2a:ad:19:86:84:53:cf:43:a1:09:35:36:
         bb:30:dc:65:57:67:2e:dd:83:6e:56:0c:72:4b:8b:a5:3d:7c:
         c3:69:46:28:c6:ff:fe:a4:39:4f:e4:bc:15:52:96:6c:cf:1b:
         42:58:e6:a5:79:34:67:db:60:1e:a3:4f:d8:d8:f9:78:1d:69:
         8c:0b:19:03:02:14:e9:52:62:e2:a0:7a:0d:be:cf:81:4a:c8:
         95:fd:a8:82:30:3a:fa:40:31:7b:8e:56:79:33:9b:a4:70:be:
         1c:cd:27:cf:e6:c3:84:6f:37:43:04:40:90:6c:be:83:4e:5e:
         e6:64:7d:93:fa:11:b4:26:36:2f:bd:90:b0:0e:44:96:11:a4:
         56:4b:76:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdPTQkn/Ws/4yp25TtTX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjUwNDEzMTQwMTU2WhcNMjUwNDE0MTQwMTU2WjAzMTEwLwYDVQQD
EygyOTE1NjcxNWZjMmY5YmU0MjI1OTk2NDExNmIzOWI5MDM3MzIxNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY/tTk6HQjmAHsiy6lYZfIjKsFvY
9ZozvNQy2ai4Hc1pB10dVox4FO9jOw33xUoL/2PO7lrg+JwlsbAytNIN8IsMilMD
327deUZfAFwh/qA/E2/mVlBpD14eCWRWzqyO8g4IEi+wXMtfr2kWHHS8UI2t0Gsx
RM+Mfz1KqFDzkKo5lRpApqt4ZIXr2xPiozs0b1CgGvxv+ycGFIm/NNztg/fyN9yq
Y2CyS45gHK0jPI1V1SYwtZQDZeByaCUh4w9EDxvXfridJQG2hinnuM9wnBZ6dy4A
oO9ANSbQGSG1hoM8HozNY0Do4/TLr2b0aCuKZiWkeHi+QeDsQeUkKl3YeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkVZxX8L5vkIlmWQRazm5A3MhSrMB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTwT59Fo
LfVC36A/7je5Gr/sImKEomDxePA8oR3EvVodeHj8QPGDbvs+mIPaFM/qUqjLOT/k
fFS8AKK3Bla5Aufn3jLJGyiiqsH8H3Y/JazaokzD0oUR5IycXbFMtnaQoH0fW4qT
R3/u+ve9J7pPFUe8Kq0ZhoRTz0OhCTU2uzDcZVdnLt2DblYMckuLpT18w2lGKMb/
/qQ5T+S8FVKWbM8bQljmpXk0Z9tgHqNP2Nj5eB1pjAsZAwIU6VJi4qB6Db7PgUrI
lf2ogjA6+kAxe45WeTObpHC+HM0nz+bDhG83QwRAkGy+g05e5mR9k/oRtCY2L72Q
sA5ElhGkVkt2HQ==
-----END CERTIFICATE-----