Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          aaFchOd2ZDWco+KPZXLedXRmLDKhvpcpsMvXfvJ7NKs=
Subject key identifier:   B3:D4:63:03:DF:D4:2C:25:C3:EC:61:19:1A:D9:CC:95:9D:03:8D:9F
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       01962E2AE6C1FF1D5F88C4EA4BA65B00D48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          102B
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: 0uhWjV2aWIvV2ikmOvd8s/2LKA5krUUWYf5qODLn5C0=)
                          2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e6:c1:ff:1d:5f:88:c4:ea:4b:a6:5b:00:d4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=b3d46303dfd42c25c3ec61191ad9cc959d038d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:fe:5f:6a:2f:9e:c2:95:d0:0a:26:ba:f6:
                    3c:06:18:4a:58:1d:a4:4a:2f:36:41:0f:7a:d5:b4:
                    9d:37:ed:20:c4:56:b9:ea:aa:06:58:9f:85:4a:cd:
                    7b:4a:bd:0e:0f:97:ba:e9:ed:02:b8:09:bb:cb:c9:
                    68:56:44:f3:59:3f:c1:31:b3:1c:4e:cc:75:0f:1a:
                    2e:30:b0:d9:d3:8b:97:3d:5c:7c:44:80:c9:c2:4e:
                    60:12:29:75:b4:15:2a:ba:e3:6e:76:1a:1f:1c:e0:
                    7a:39:8f:25:10:1e:36:27:0f:8b:6b:ea:6d:3d:bc:
                    10:b2:1b:45:98:32:05:6d:a9:09:9a:9f:8e:35:be:
                    00:7d:de:37:8c:fc:9c:d5:3d:51:24:e4:20:84:56:
                    85:31:1c:62:0b:24:d9:25:13:89:f9:2e:d5:ae:f6:
                    46:51:6b:b8:78:43:87:53:7d:af:bc:c1:80:3e:cd:
                    57:48:92:c6:b1:1a:b4:a4:44:f7:29:ef:58:f4:f2:
                    af:24:a0:f0:29:04:0c:21:19:24:f1:54:80:71:9c:
                    0c:9e:12:43:36:32:7a:aa:ee:c7:aa:61:66:87:98:
                    5e:bc:f6:a3:ce:8a:d2:2a:21:44:ce:16:4e:58:f2:
                    eb:9c:52:fc:a4:d4:3e:4a:b1:0d:69:bd:e0:2c:3d:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:63:03:DF:D4:2C:25:C3:EC:61:19:1A:D9:CC:95:9D:03:8D:9F
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:97:f9:f7:03:71:22:9e:1c:71:24:18:6d:63:38:fa:ee:05:
         e7:ee:94:8e:29:ea:9b:2a:19:20:af:9b:a4:89:80:a7:36:84:
         05:0e:a3:9c:f2:f2:34:80:40:54:5e:d7:1b:c0:91:07:71:26:
         9c:8b:6c:9c:be:64:73:df:4a:77:65:34:b7:f3:50:91:e6:67:
         16:56:af:b1:50:bf:3e:42:4d:a3:86:2e:93:93:1d:73:4f:cb:
         4a:00:2b:8a:fd:15:76:c7:48:f0:15:c8:45:5c:38:15:6c:69:
         c9:f2:f1:e7:6d:19:fd:ca:9b:77:bc:9d:0f:24:da:68:b9:60:
         fc:83:81:70:8d:72:e1:c1:2c:f4:5a:a0:52:67:2e:b3:fc:cf:
         64:57:2c:42:ab:24:a2:5e:8e:7a:ae:ca:0c:a9:85:59:88:96:
         63:29:30:78:54:53:30:66:eb:c8:65:54:ae:f8:c0:38:8a:e4:
         b3:04:84:b3:a2:ec:b1:a9:06:c0:d6:85:8f:58:53:49:7d:90:
         29:5f:90:a0:69:4f:42:3c:bf:ac:69:33:9d:d3:72:6e:27:23:
         3a:7a:ff:2e:11:d2:65:e2:8e:5f:0c:c9:88:af:d8:b2:25:ed:
         31:ef:c3:02:fd:94:79:5b:8a:10:ca:14:78:72:fd:fe:d3:75:
         60:da:c5:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKubB/x1fiMTqS6ZbANSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4
MzQxNTkwHhcNMjUwNDEzMDgwMTI1WhcNMjUwNDE0MDgwMTI1WjAzMTEwLwYDVQQD
EyhiM2Q0NjMwM2RmZDQyYzI1YzNlYzYxMTkxYWQ5Y2M5NTlkMDM4ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yD+X2ovnsKV0AomuvY8BhhKWB2k
Si82QQ961bSdN+0gxFa56qoGWJ+FSs17Sr0OD5e66e0CuAm7y8loVkTzWT/BMbMc
Tsx1DxouMLDZ04uXPVx8RIDJwk5gEil1tBUquuNudhofHOB6OY8lEB42Jw+La+pt
PbwQshtFmDIFbakJmp+ONb4Afd43jPyc1T1RJOQghFaFMRxiCyTZJROJ+S7VrvZG
UWu4eEOHU32vvMGAPs1XSJLGsRq0pET3Ke9Y9PKvJKDwKQQMIRkk8VSAcZwMnhJD
NjJ6qu7HqmFmh5hevPajzorSKiFEzhZOWPLrnFL8pNQ+SrENab3gLD0o2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPUYwPf1Cwlw+xhGRrZzJWdA42fMB8GA1UdIwQY
MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt
MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2
LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepf59wNx
Ip4ccSQYbWM4+u4F5+6UjinqmyoZIK+bpImApzaEBQ6jnPLyNIBAVF7XG8CRB3Em
nItsnL5kc99Kd2U0t/NQkeZnFlavsVC/PkJNo4Yuk5Mdc0/LSgAriv0VdsdI8BXI
RVw4FWxpyfLx520Z/cqbd7ydDyTaaLlg/IOBcI1y4cEs9FqgUmcus/zPZFcsQqsk
ol6Oeq7KDKmFWYiWYykweFRTMGbryGVUrvjAOIrkswSEs6LssakGwNaFj1hTSX2Q
KV+QoGlPQjy/rGkzndNybicjOnr/LhHSZeKOXwzJiK/YsiXtMe/DAv2UeVuKEMoU
eHL9/tN1YNrF9w==
-----END CERTIFICATE-----