Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
File:                     2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft (raw, json)
Hash identifier:          fMfdMloe3OC4wtOPp8gHiBxHVqATjL+19XWXIwV0Tq0=
Subject key identifier:   C4:44:F8:EE:F6:D3:8E:E4:14:5F:44:7D:A2:F0:E8:A4:2E:45:7A:7F
Authority key identifier: DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07
Certificate issuer:       /CN=da3d2580c54980cab3db1356182ed8cc819ffc07
Certificate serial:       01962E2AC3F801D67CFD3A6376BAD4A1AF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl (hash: efkBcw5PkotIozCIwjEEABmt8VeaJbONFo4ab43XbH4=)
                          2: aVrm11uPiyldKPviAWZVNw7mX_s.roa (hash: +aUpO78+V+9JLiQkkmCO8C80eoccRFxUM2jJ9r7mFkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c3:f8:01:d6:7c:fd:3a:63:76:ba:d4:a1:af:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3d2580c54980cab3db1356182ed8cc819ffc07
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=c444f8eef6d38ee4145f447da2f0e8a42e457a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:f2:02:d3:99:03:02:4d:e3:48:31:46:08:
                    15:f2:a3:91:eb:27:d9:1d:e7:2d:02:87:ad:83:fc:
                    9b:a5:15:4c:1f:e0:2a:b0:73:0a:ff:cd:4c:b7:66:
                    d9:72:ef:5d:c0:ce:7b:a4:06:a1:e2:fc:0d:b1:22:
                    5d:ef:f8:47:f3:be:71:30:b3:eb:f3:70:5b:5c:87:
                    fc:df:dd:5a:1c:da:1f:a5:be:75:ef:8c:6e:78:48:
                    38:24:d1:0c:55:a1:14:5f:59:05:75:fa:c3:95:92:
                    12:dc:8c:67:28:52:2b:1d:4c:df:44:08:fe:9b:2f:
                    64:40:2b:87:48:48:d4:ec:b7:9c:40:4c:ac:a5:eb:
                    ae:4d:24:b6:3b:3f:79:a8:54:44:87:2e:d1:3d:70:
                    54:be:5a:ca:2e:2d:2a:3f:10:aa:89:71:2a:b1:64:
                    c5:63:39:da:77:14:4e:63:d4:06:bb:f5:46:f1:85:
                    8a:0a:96:28:4f:08:02:52:c0:5a:11:e4:7b:4a:67:
                    0c:04:56:42:24:5e:68:a4:f2:5a:2a:40:85:4a:1b:
                    34:aa:4f:f2:64:a6:51:0c:d2:93:b5:dc:47:24:ac:
                    d6:f0:78:92:73:ff:6e:69:3c:86:0c:ce:60:5c:5e:
                    bb:5b:09:30:82:50:aa:0c:b5:c6:9f:b4:2d:dc:70:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:F8:EE:F6:D3:8E:E4:14:5F:44:7D:A2:F0:E8:A4:2E:45:7A:7F
            X509v3 Authority Key Identifier:
                keyid:DA:3D:25:80:C5:49:80:CA:B3:DB:13:56:18:2E:D8:CC:81:9F:FC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/57e627-a45a-4673-86d2-6f2f5b4de65d/1/2j0lgMVJgMqz2xNWGC7YzIGf_Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:d9:19:e9:fb:81:47:26:39:8a:6c:e6:e4:1d:85:8a:f8:
         17:8e:dc:1f:2f:58:5f:40:da:b2:3e:2e:2d:de:8b:e3:6a:72:
         bd:57:b4:78:fb:20:04:da:e3:71:f7:42:57:06:47:3a:9a:91:
         1c:6b:5c:04:4e:21:8f:7e:64:60:7a:f8:48:31:6f:9e:1a:2a:
         28:91:9b:a8:0f:47:ec:29:7a:a8:e6:eb:5d:1e:84:2b:5c:44:
         f0:a0:83:44:0b:8d:82:f5:12:89:e2:87:50:b6:83:17:e9:25:
         fa:24:68:4f:7a:09:7a:eb:1a:4a:39:7e:d8:f1:5c:82:6f:67:
         a0:3d:00:0e:9f:60:f7:b7:5f:13:f6:dd:c6:19:e5:9b:fb:e1:
         04:e0:49:14:22:d6:25:4b:fb:6a:5a:af:19:69:42:19:7b:dc:
         ed:95:4c:71:25:92:52:85:e5:46:60:03:f5:2c:66:18:a9:2a:
         e1:01:71:5d:3a:66:eb:5e:dd:09:b5:4e:d6:14:e7:3c:76:67:
         aa:74:11:b8:66:bd:07:72:65:26:ca:b9:af:13:c2:0b:6b:4b:
         5d:10:0f:9c:e2:7e:f4:79:46:b9:28:06:72:a3:d2:79:03:d3:
         b7:99:7a:1a:87:1a:98:58:62:12:f3:93:60:07:76:a3:bd:a8:
         67:b4:cf:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsP4AdZ8/TpjdrrUoa+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QyNTgwYzU0OTgwY2FiM2RiMTM1NjE4MmVkOGNjODE5
ZmZjMDcwHhcNMjUwNDEzMDgwMTE2WhcNMjUwNDE0MDgwMTE2WjAzMTEwLwYDVQQD
EyhjNDQ0ZjhlZWY2ZDM4ZWU0MTQ1ZjQ0N2RhMmYwZThhNDJlNDU3YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio7yAtOZAwJN40gxRggV8qOR6yfZ
HectAoetg/ybpRVMH+AqsHMK/81Mt2bZcu9dwM57pAah4vwNsSJd7/hH875xMLPr
83BbXIf8391aHNofpb5174xueEg4JNEMVaEUX1kFdfrDlZIS3IxnKFIrHUzfRAj+
my9kQCuHSEjU7LecQEyspeuuTSS2Oz95qFREhy7RPXBUvlrKLi0qPxCqiXEqsWTF
YznadxROY9QGu/VG8YWKCpYoTwgCUsBaEeR7SmcMBFZCJF5opPJaKkCFShs0qk/y
ZKZRDNKTtdxHJKzW8HiSc/9uaTyGDM5gXF67WwkwglCqDLXGn7Qt3HDpwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRE+O72047kFF9EfaLw6KQuRXp/MB8GA1UdIwQY
MBaAFNo9JYDFSYDKs9sTVhgu2MyBn/wHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowbGdNVkpnTXF6MnhOV0dDN1l6SUdmX0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81N2U2MjctYTQ1YS00NjczLTg2ZDIt
NmYyZjViNGRlNjVkLzEvMmowbGdNVkpnTXF6MnhOV0dDN1l6SUdmX0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81N2U2MjctYTQ1YS00NjczLTg2ZDItNmYyZjViNGRlNjVk
LzEvMmowbGdNVkpnTXF6MnhOV0dDN1l6SUdmX0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2PZGen7
gUcmOYps5uQdhYr4F47cHy9YX0Dasj4uLd6L42pyvVe0ePsgBNrjcfdCVwZHOpqR
HGtcBE4hj35kYHr4SDFvnhoqKJGbqA9H7Cl6qObrXR6EK1xE8KCDRAuNgvUSieKH
ULaDF+kl+iRoT3oJeusaSjl+2PFcgm9noD0ADp9g97dfE/bdxhnlm/vhBOBJFCLW
JUv7alqvGWlCGXvc7ZVMcSWSUoXlRmAD9SxmGKkq4QFxXTpm617dCbVO1hTnPHZn
qnQRuGa9B3JlJsq5rxPCC2tLXRAPnOJ+9HlGuSgGcqPSeQPTt5l6GocamFhiEvOT
YAd2o72oZ7TPyQ==
-----END CERTIFICATE-----