Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File:                     xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier:          iMokdDeyOcQSs2CBbytDMpZrPNOz+65xdJjtq2IxFE0=
Subject key identifier:   43:83:8B:23:62:47:77:D0:6E:4C:07:77:16:6E:23:43:0F:0C:FB:F5
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer:       /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial:       01962FAB4BAC17693D10B49442DE3239B8A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number:          141C
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
                          2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
                          3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: PXkJtwjh50QOEDyuX5gEp+c3hMWEJBYqDkNdRJTOOHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4b:ac:17:69:3d:10:b4:94:42:de:32:39:b8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=43838b23624777d06e4c0777166e23430f0cfbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:42:66:70:2a:2d:38:72:93:17:7c:4b:3f:
                    40:15:25:62:cb:75:2a:ae:44:49:a4:e7:1b:1c:84:
                    01:ee:12:a0:fe:60:60:a4:85:ec:4b:bc:d0:05:64:
                    3e:5d:31:bc:e6:9c:0d:93:c9:f3:24:c9:ea:8f:14:
                    e7:df:d0:a0:a6:82:9d:38:c3:6f:de:c6:93:34:fc:
                    00:ea:0e:88:e2:a5:71:05:bb:dc:e7:3f:c4:ef:79:
                    1d:1f:03:97:b0:1d:83:eb:37:07:14:80:bf:10:45:
                    05:97:c9:80:99:88:d1:fc:1e:04:2d:a0:9e:d2:7f:
                    ae:2c:c8:b8:2f:ab:32:b4:03:a7:2e:28:44:13:f8:
                    6d:0c:3e:05:d4:7e:6b:4a:26:97:e6:a7:60:82:61:
                    cd:16:b5:12:dc:6c:d3:ec:db:0f:f0:72:40:9d:b9:
                    4b:3c:15:c3:9a:20:4d:5a:ca:b1:8a:ae:54:a6:e9:
                    d9:50:3c:50:1f:ac:13:ce:32:2a:cb:ec:55:3d:07:
                    1b:bd:44:a2:ad:7d:18:33:05:44:b0:e5:ef:4b:80:
                    86:72:c0:08:c3:22:60:d6:fe:65:ca:2b:f7:99:40:
                    77:9a:cb:f0:74:6c:b1:42:85:cf:76:14:d0:07:2a:
                    fc:98:f9:d7:f8:18:cd:63:c2:10:7d:eb:05:2b:cb:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:83:8B:23:62:47:77:D0:6E:4C:07:77:16:6E:23:43:0F:0C:FB:F5
            X509v3 Authority Key Identifier:
                keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:24:8e:e8:f5:3d:06:f7:96:8d:56:fd:a6:fd:96:86:ed:3c:
         7e:fe:b3:10:03:ec:1a:6e:2f:77:59:ee:ea:c5:5b:12:69:13:
         74:cd:ad:b2:a9:35:0b:96:49:1e:e6:e0:51:df:9a:1a:13:83:
         f9:ab:a7:17:98:c5:53:90:fa:25:06:df:97:e8:71:ad:27:7b:
         70:81:a4:d8:7b:7c:d3:6b:3b:cf:61:35:73:af:91:eb:69:c8:
         c5:9b:4d:53:37:7b:56:06:82:64:3f:92:24:c7:f5:7f:2c:41:
         cb:90:b5:91:89:d7:68:73:53:62:96:80:37:52:08:3a:9d:e0:
         e8:ec:3b:d3:f5:25:a8:df:e0:33:f6:a5:54:96:17:60:7a:5b:
         83:74:ad:d6:0b:cc:90:65:bc:0e:d8:ab:d2:b4:53:d5:42:87:
         d2:8a:8f:91:47:a0:4a:7c:2f:61:62:1b:98:19:1e:e7:9a:f6:
         f2:cf:37:c4:ed:f7:ec:06:20:36:c2:3d:74:65:9a:36:08:c1:
         b9:11:cd:c9:20:d1:30:e7:cf:d6:3a:a3:9c:3a:8d:4a:b2:1c:
         c9:69:7f:ad:d2:e6:a4:37:9a:95:c6:6b:97:59:c6:c2:00:4a:
         24:b4:f2:21:97:2a:74:df:7e:0c:5b:fb:76:89:76:63:bf:16:
         2e:fc:a9:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0usF2k9ELSUQt4yObijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUwNDEzMTUwMTE3WhcNMjUwNDE0MTUwMTE3WjAzMTEwLwYDVQQD
Eyg0MzgzOGIyMzYyNDc3N2QwNmU0YzA3NzcxNjZlMjM0MzBmMGNmYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRVCZnAqLThykxd8Sz9AFSViy3Uq
rkRJpOcbHIQB7hKg/mBgpIXsS7zQBWQ+XTG85pwNk8nzJMnqjxTn39CgpoKdOMNv
3saTNPwA6g6I4qVxBbvc5z/E73kdHwOXsB2D6zcHFIC/EEUFl8mAmYjR/B4ELaCe
0n+uLMi4L6sytAOnLihEE/htDD4F1H5rSiaX5qdggmHNFrUS3GzT7NsP8HJAnblL
PBXDmiBNWsqxiq5UpunZUDxQH6wTzjIqy+xVPQcbvUSirX0YMwVEsOXvS4CGcsAI
wyJg1v5lyiv3mUB3msvwdGyxQoXPdhTQByr8mPnX+BjNY8IQfesFK8vC2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEODiyNiR3fQbkwHdxZuI0MPDPv1MB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCSO6PU9
BveWjVb9pv2Whu08fv6zEAPsGm4vd1nu6sVbEmkTdM2tsqk1C5ZJHubgUd+aGhOD
+aunF5jFU5D6JQbfl+hxrSd7cIGk2Ht802s7z2E1c6+R62nIxZtNUzd7VgaCZD+S
JMf1fyxBy5C1kYnXaHNTYpaAN1IIOp3g6Ow70/UlqN/gM/alVJYXYHpbg3St1gvM
kGW8Dtir0rRT1UKH0oqPkUegSnwvYWIbmBke55r28s83xO337AYgNsI9dGWaNgjB
uRHNySDRMOfP1jqjnDqNSrIcyWl/rdLmpDealcZrl1nGwgBKJLTyIZcqdN9+DFv7
dol2Y78WLvypzg==
-----END CERTIFICATE-----