Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File:                     IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier:          hzHh+AkS71ylhYVv4MC1GGUW3XF27v3jfRDVMbgVmso=
Subject key identifier:   B9:74:DC:BB:EB:9E:90:9D:30:A5:B3:09:85:B8:1C:97:9A:18:E2:F8
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer:       /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial:       01962F741B90D89872BD900D9563CB7FA5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number:          036F
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=)
                          2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=)
                          3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: T5Cqxj/i15CPjfyleAgYJBq1OuKukYiiroA51S7BB40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1b:90:d8:98:72:bd:90:0d:95:63:cb:7f:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=b974dcbbeb9e909d30a5b30985b81c979a18e2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:b6:24:3e:e4:9a:3f:16:aa:0e:1e:36:35:
                    80:2a:3b:7a:e7:34:bc:fd:5c:f6:97:fc:c1:08:1c:
                    f0:d5:81:32:59:54:f8:d3:71:07:46:39:d6:0c:a1:
                    0b:a9:95:d0:ad:14:1b:ea:f1:13:88:c6:7c:f2:54:
                    18:f2:c4:81:69:f4:78:63:3c:9f:70:51:82:4d:e4:
                    cd:19:e1:69:f0:23:c6:c7:6a:c4:3c:83:e0:74:5f:
                    9e:2f:bf:16:19:d7:f3:d9:8e:83:24:7f:04:b1:e6:
                    a3:d6:b7:a1:70:37:83:30:2d:0d:e3:23:5f:78:40:
                    74:3c:66:9f:9a:18:13:bc:5a:99:5f:21:22:f6:2d:
                    6f:7d:5e:c1:d3:80:50:79:dc:1f:08:c6:10:b6:c4:
                    fa:bc:1a:18:49:d5:a8:cc:85:7a:e4:0a:e3:72:6b:
                    fd:35:49:45:aa:6f:e8:cb:9b:58:73:8e:a6:31:73:
                    b0:31:3c:40:66:c1:f4:1f:86:e9:3a:2e:b2:12:5a:
                    20:02:2f:fc:db:de:7e:bf:c0:81:89:13:bd:a5:b9:
                    0f:e3:88:62:c6:51:25:7e:73:a4:fd:4b:37:dc:ee:
                    05:68:db:d4:89:dc:3b:6a:d5:fb:42:89:dd:a9:ff:
                    4b:4c:03:93:ec:71:91:52:6f:a7:c8:2e:19:5d:d4:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:DC:BB:EB:9E:90:9D:30:A5:B3:09:85:B8:1C:97:9A:18:E2:F8
            X509v3 Authority Key Identifier:
                keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:ec:f7:ec:62:a1:3b:70:88:2d:e1:8d:86:0f:2d:26:5a:
         00:d5:84:f0:49:4f:58:2c:72:cd:4c:93:05:b0:75:63:dc:0f:
         9b:96:e0:29:ca:9c:8d:8c:51:e7:04:43:ed:91:d1:06:5d:75:
         0d:85:2d:70:c1:fa:72:06:38:30:94:1f:0f:19:26:e9:84:18:
         c4:9e:db:c0:3f:f7:38:3a:da:42:ba:55:0a:3a:42:10:95:8f:
         21:a3:7f:80:f1:d7:f8:1d:e2:0d:7e:08:1b:5b:b9:16:cb:8e:
         96:b5:c1:93:25:37:fa:3d:55:14:bc:99:e9:4b:f0:9b:90:11:
         ab:c8:b0:54:69:3d:b7:85:aa:90:d8:db:12:75:ec:cc:8d:02:
         0f:33:23:22:78:05:c1:04:04:e8:44:30:5c:d2:e0:40:f3:18:
         75:70:99:a6:a7:af:89:6b:05:b7:ae:b2:f2:50:a1:b4:06:24:
         30:cd:e4:08:d4:99:ea:c1:8b:2d:71:99:3d:67:b5:07:73:c6:
         e3:d4:0a:d4:a7:62:e2:22:46:76:54:ff:0f:76:90:48:01:c8:
         f3:c2:78:76:ba:7c:4b:d7:ea:05:50:26:41:81:92:b7:1c:de:
         10:49:0d:c2:5d:05:e3:95:9c:c1:66:08:c4:c5:50:a1:e0:0b:
         76:a8:40:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBuQ2JhyvZANlWPLf6XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4
NzE0NTMwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EyhiOTc0ZGNiYmViOWU5MDlkMzBhNWIzMDk4NWI4MWM5NzlhMThlMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwC2JD7kmj8Wqg4eNjWAKjt65zS8
/Vz2l/zBCBzw1YEyWVT403EHRjnWDKELqZXQrRQb6vETiMZ88lQY8sSBafR4Yzyf
cFGCTeTNGeFp8CPGx2rEPIPgdF+eL78WGdfz2Y6DJH8Eseaj1rehcDeDMC0N4yNf
eEB0PGafmhgTvFqZXyEi9i1vfV7B04BQedwfCMYQtsT6vBoYSdWozIV65Arjcmv9
NUlFqm/oy5tYc46mMXOwMTxAZsH0H4bpOi6yElogAi/8295+v8CBiRO9pbkP44hi
xlElfnOk/Us33O4FaNvUidw7atX7Qondqf9LTAOT7HGRUm+nyC4ZXdSmMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl03LvrnpCdMKWzCYW4HJeaGOL4MB8GA1UdIwQY
MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt
NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj
LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMR3s9+xi
oTtwiC3hjYYPLSZaANWE8ElPWCxyzUyTBbB1Y9wPm5bgKcqcjYxR5wRD7ZHRBl11
DYUtcMH6cgY4MJQfDxkm6YQYxJ7bwD/3ODraQrpVCjpCEJWPIaN/gPHX+B3iDX4I
G1u5FsuOlrXBkyU3+j1VFLyZ6Uvwm5ARq8iwVGk9t4WqkNjbEnXszI0CDzMjIngF
wQQE6EQwXNLgQPMYdXCZpqeviWsFt66y8lChtAYkMM3kCNSZ6sGLLXGZPWe1B3PG
49QK1Kdi4iJGdlT/D3aQSAHI88J4drp8S9fqBVAmQYGStxzeEEkNwl0F45WcwWYI
xMVQoeALdqhA6Q==
-----END CERTIFICATE-----