Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File:                     rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier:          Xni7rtlz9xMAmLfyvyf8JJXO/pF8yAKTK+w0lbOtr1o=
Subject key identifier:   C5:F4:42:D6:9F:61:21:14:8C:1D:83:39:97:C9:39:DF:39:6C:11:5F
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer:       /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial:       01962F0733A8DF24AE8AC4D553CA6E5AD4D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
                          2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: fs+DPqMbYlP1HUtICukqdmBcIcodnXdjx+lgCkpzu2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:33:a8:df:24:ae:8a:c4:d5:53:ca:6e:5a:d4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=c5f442d69f6121148c1d833997c939df396c115f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:cb:19:f7:ed:18:e3:95:67:b1:39:15:6a:
                    a9:e7:ce:bf:0d:59:4e:7e:9f:7c:31:1c:2f:73:10:
                    e0:04:a9:94:fb:0d:85:06:52:4c:95:cb:a1:15:ed:
                    77:71:d2:4f:28:bd:61:cd:c9:e7:ec:02:10:d4:b6:
                    f7:59:b3:ef:56:83:e9:84:f2:e9:e2:7c:c1:87:0d:
                    f1:7f:cc:5a:ac:54:f8:84:ab:3d:6c:4e:a6:91:2e:
                    30:84:f9:b5:df:7e:54:f1:5f:65:53:3d:82:12:66:
                    62:ce:0a:7e:af:fa:57:4b:f5:00:eb:a9:05:68:7a:
                    cd:93:d1:da:b8:e6:76:39:e5:64:99:bb:0a:45:1d:
                    3b:f1:e7:04:1e:55:a6:74:a9:df:d9:1d:33:26:3b:
                    15:24:aa:67:97:25:85:46:18:f2:22:1f:d2:1d:03:
                    0c:ec:9d:2c:01:c7:d0:99:00:df:1f:99:13:30:ab:
                    14:61:0e:d8:2c:3d:49:9a:da:7e:1a:db:c6:b5:c8:
                    fb:af:4c:20:32:e6:35:34:cb:56:66:33:7a:ff:78:
                    21:66:20:47:15:fd:ae:14:17:b1:51:a0:f2:d5:bc:
                    e1:05:bf:93:88:e9:d8:fb:73:d5:4b:10:fc:30:48:
                    46:5b:d6:1e:fe:cc:a0:2d:88:a2:aa:21:36:f1:63:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F4:42:D6:9F:61:21:14:8C:1D:83:39:97:C9:39:DF:39:6C:11:5F
            X509v3 Authority Key Identifier:
                keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:43:2a:1b:07:1e:b1:ce:fb:c2:3c:30:aa:26:20:4e:ef:0f:
         d7:69:ea:99:a8:f5:ec:79:0f:13:b8:d9:4a:fc:40:c5:17:98:
         e2:16:57:6f:8b:c9:08:b3:fc:13:54:16:11:79:02:98:60:34:
         3c:d1:ca:10:59:d7:e1:49:4c:60:a5:d3:93:e9:3b:70:45:76:
         52:31:e2:d8:13:57:fc:af:ac:cf:b5:16:b7:0b:9d:fd:47:62:
         37:9d:33:8c:9a:1f:71:2f:fb:71:2c:3a:43:3b:c3:b5:dc:30:
         af:6d:39:43:4b:2e:93:b2:0c:b4:af:e4:ec:39:49:fa:29:65:
         d0:87:c3:49:fb:e4:3f:de:d1:bd:19:25:cb:3a:04:13:bd:b8:
         20:fe:4e:13:f0:a7:2b:a4:19:4e:79:9d:05:87:ee:75:b9:8e:
         7c:6c:62:d1:a9:e6:3c:48:29:1b:0a:2d:c4:83:78:53:c4:04:
         62:61:9c:4e:fb:c9:2f:de:0c:11:55:f8:46:f8:36:7d:0e:a0:
         cb:3d:59:5e:d4:c8:58:95:6f:5a:c9:1f:fa:4b:71:c1:fd:1a:
         dc:a6:b3:66:96:de:e4:c1:0b:0a:aa:50:30:45:c4:d3:71:94:
         f3:76:0e:90:a6:b6:8a:99:a1:a1:2f:32:8f:7d:e2:6e:1a:ac:
         bc:89:4a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzOo3ySuisTVU8puWtTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4
OThlY2IwHhcNMjUwNDEzMTIwMjAzWhcNMjUwNDE0MTIwMjAzWjAzMTEwLwYDVQQD
EyhjNWY0NDJkNjlmNjEyMTE0OGMxZDgzMzk5N2M5MzlkZjM5NmMxMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMTLGfftGOOVZ7E5FWqp586/DVlO
fp98MRwvcxDgBKmU+w2FBlJMlcuhFe13cdJPKL1hzcnn7AIQ1Lb3WbPvVoPphPLp
4nzBhw3xf8xarFT4hKs9bE6mkS4whPm1335U8V9lUz2CEmZizgp+r/pXS/UA66kF
aHrNk9HauOZ2OeVkmbsKRR078ecEHlWmdKnf2R0zJjsVJKpnlyWFRhjyIh/SHQMM
7J0sAcfQmQDfH5kTMKsUYQ7YLD1Jmtp+GtvGtcj7r0wgMuY1NMtWZjN6/3ghZiBH
Ff2uFBexUaDy1bzhBb+TiOnY+3PVSxD8MEhGW9Ye/sygLYiiqiE28WPLOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMX0QtafYSEUjB2DOZfJOd85bBFfMB8GA1UdIwQY
MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt
MzFkMjQ1ZjNiM2I4LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4
LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0MqGwce
sc77wjwwqiYgTu8P12nqmaj17HkPE7jZSvxAxReY4hZXb4vJCLP8E1QWEXkCmGA0
PNHKEFnX4UlMYKXTk+k7cEV2UjHi2BNX/K+sz7UWtwud/UdiN50zjJofcS/7cSw6
QzvDtdwwr205Q0suk7IMtK/k7DlJ+ill0IfDSfvkP97RvRklyzoEE724IP5OE/Cn
K6QZTnmdBYfudbmOfGxi0anmPEgpGwotxIN4U8QEYmGcTvvJL94MEVX4Rvg2fQ6g
yz1ZXtTIWJVvWskf+ktxwf0a3KazZpbe5MELCqpQMEXE03GU83YOkKa2ipmhoS8y
j33ibhqsvIlK4A==
-----END CERTIFICATE-----