Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File:                     hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier:          piToOixw2Thcmc6HQpbjPRXk68m5K+YxfAFjxFi74v4=
Subject key identifier:   FF:EC:F4:AB:83:F7:CF:EB:A6:4E:4D:76:14:FA:A4:7A:C9:3C:35:FE
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer:       /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial:       01962ECFD211E2B8014E08D404B114650560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number:          0B2C
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: 3n4D1SR6scBc56Ie3xGq3b0L8M0.roa (hash: aBbdE/LoKCgkOQOFc+caUhkJgro6NFyptlXPezVha0Q=)
                          2: MWwCkyjKodNxojuXE4ToQXLtm5w.roa (hash: Ak0owLXzMtwfRek9KqA/lWNxi61mLQqKV5qpbUxSWP4=)
                          3: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: KZDVgvudGX5jbAYAVoGT/MbQC25DZBPkQT0vpgdWnTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d2:11:e2:b8:01:4e:08:d4:04:b1:14:65:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=ffecf4ab83f7cfeba64e4d7614faa47ac93c35fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:e0:f3:b2:93:e8:67:f8:18:2d:e2:37:70:
                    0e:78:07:d2:23:e4:ae:e9:c4:fd:d6:db:28:42:01:
                    81:b4:47:5d:f9:73:14:11:d5:03:d1:d0:48:71:d9:
                    e7:be:c3:cb:96:db:df:80:ce:41:7b:88:9c:89:bc:
                    7a:df:4d:e8:eb:19:b5:70:56:52:86:03:ea:97:4b:
                    bf:4b:85:07:7b:98:f2:6e:c9:ca:5b:2e:4e:ce:f2:
                    d2:c6:ec:c0:41:a2:30:ca:72:61:a0:a4:1b:8c:07:
                    fa:13:00:f5:b8:f4:13:20:0d:5c:27:38:b5:b4:d3:
                    20:3d:10:e2:af:e7:9f:ea:28:48:43:7a:27:a7:0e:
                    9a:f2:05:81:9b:b2:95:e9:1e:c3:a4:7f:d3:35:e3:
                    85:a5:21:2c:ef:39:ff:93:15:f8:86:a2:7b:79:79:
                    c2:de:c9:fa:1a:dd:2a:ae:29:bd:a8:eb:af:01:e9:
                    ff:42:72:81:11:0f:19:63:bb:cf:47:c6:ac:77:22:
                    b7:ad:e3:ee:51:11:b0:05:6b:8a:54:98:6e:ed:a5:
                    56:2d:bf:44:64:17:1a:ee:c6:ee:d0:e3:54:0e:bc:
                    cb:99:10:0c:f8:45:73:79:b8:1d:8a:50:7e:bd:67:
                    6f:d1:b2:58:c6:72:41:cf:7b:8b:74:46:7c:43:4b:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EC:F4:AB:83:F7:CF:EB:A6:4E:4D:76:14:FA:A4:7A:C9:3C:35:FE
            X509v3 Authority Key Identifier:
                keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ea:a3:69:3e:1c:b5:eb:d1:04:08:f8:15:c4:88:e4:0f:28:
         c8:fe:6c:21:b0:2d:9d:bb:e6:5f:5a:28:e6:b2:9f:e0:ea:e7:
         31:ce:c9:ea:c3:8c:cb:e0:cb:e2:4a:27:33:23:de:8c:50:8f:
         1c:ce:8f:89:16:c0:3d:6b:0a:1f:71:28:05:67:1d:76:42:03:
         89:16:9b:e0:53:4a:45:fc:47:4a:27:94:49:02:57:a0:c8:8b:
         94:45:2f:13:61:1c:e5:ac:1f:7f:ce:58:83:a5:41:14:3a:f2:
         15:a7:d9:c9:cc:a3:63:07:ce:ab:33:16:f4:0c:a9:58:70:10:
         2e:a3:63:9e:6d:66:a3:59:0a:19:4c:b0:67:69:49:21:c3:af:
         a6:78:41:81:98:55:95:64:4d:dc:68:91:1b:a8:e4:a3:a9:9c:
         ba:8d:47:e9:23:58:83:f7:07:0b:f1:ab:62:a9:fa:35:f5:62:
         91:3f:2d:86:22:06:a5:68:f4:5a:14:fe:33:c5:32:09:57:c8:
         d8:ca:a7:4d:9d:b1:c6:04:56:73:6e:ce:1a:a2:13:06:d6:81:
         17:c8:3d:51:8c:99:30:1c:25:ee:99:1a:ab:0e:77:ce:19:d1:
         54:43:2f:d8:f2:fc:84:18:1b:96:4b:05:39:86:28:17:36:b1:
         c1:71:1b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9IR4rgBTgjUBLEUZQVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MjRmM2Y2NjFmMjRiZTVmZWY2NDFkYzcyMmU1Y2Y1YWM4
NzM4OWUwHhcNMjUwNDEzMTEwMTMzWhcNMjUwNDE0MTEwMTMzWjAzMTEwLwYDVQQD
EyhmZmVjZjRhYjgzZjdjZmViYTY0ZTRkNzYxNGZhYTQ3YWM5M2MzNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaHg87KT6Gf4GC3iN3AOeAfSI+Su
6cT91tsoQgGBtEdd+XMUEdUD0dBIcdnnvsPLltvfgM5Be4icibx6303o6xm1cFZS
hgPql0u/S4UHe5jybsnKWy5OzvLSxuzAQaIwynJhoKQbjAf6EwD1uPQTIA1cJzi1
tNMgPRDir+ef6ihIQ3onpw6a8gWBm7KV6R7DpH/TNeOFpSEs7zn/kxX4hqJ7eXnC
3sn6Gt0qrim9qOuvAen/QnKBEQ8ZY7vPR8asdyK3rePuURGwBWuKVJhu7aVWLb9E
ZBca7sbu0ONUDrzLmRAM+EVzebgdilB+vWdv0bJYxnJBz3uLdEZ8Q0ufAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/s9KuD98/rpk5NdhT6pHrJPDX+MB8GA1UdIwQY
MBaAFIYk8/Zh8kvl/vZB3HIuXPWshzieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGlUejltSHlTLVgtOWtIY2NpNWM5YXlIT0o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yZDk1OGMtODg3OC00MzIzLWJlZGMt
MjVlNTM1YzhhNWI5LzEvaGlUejltSHlTLVgtOWtIY2NpNWM5YXlIT0o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yZDk1OGMtODg3OC00MzIzLWJlZGMtMjVlNTM1YzhhNWI5
LzEvaGlUejltSHlTLVgtOWtIY2NpNWM5YXlIT0o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeqjaT4c
tevRBAj4FcSI5A8oyP5sIbAtnbvmX1oo5rKf4OrnMc7J6sOMy+DL4konMyPejFCP
HM6PiRbAPWsKH3EoBWcddkIDiRab4FNKRfxHSieUSQJXoMiLlEUvE2Ec5awff85Y
g6VBFDryFafZycyjYwfOqzMW9AypWHAQLqNjnm1mo1kKGUywZ2lJIcOvpnhBgZhV
lWRN3GiRG6jko6mcuo1H6SNYg/cHC/GrYqn6NfVikT8thiIGpWj0WhT+M8UyCVfI
2MqnTZ2xxgRWc27OGqITBtaBF8g9UYyZMBwl7pkaqw53zhnRVEMv2PL8hBgblksF
OYYoFzaxwXEbxQ==
-----END CERTIFICATE-----