Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File:                     K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier:          rQj2+hFqPaXKjt6GYq+dRi/9FrUOugV7XzgM1ELv0dQ=
Subject key identifier:   10:8E:78:B5:03:B3:83:F6:9C:3D:A0:62:CF:9C:09:5E:23:45:95:66
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer:       /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial:       01962DF43EFFBE00CC7B1E43925BE727560E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number:          0CB6
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=)
                          2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: UR2JvSS2FgqiUQtR/9QkkF32+0CNWSXVjc9TiU+2/y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:ff:be:00:cc:7b:1e:43:92:5b:e7:27:56:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=108e78b503b383f69c3da062cf9c095e23459566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:58:dd:45:72:4d:3f:11:5e:31:4a:4e:67:
                    00:92:41:55:cd:9d:ec:5e:98:16:8c:16:90:50:83:
                    b2:65:84:92:f1:8b:26:5d:84:44:69:25:a6:91:72:
                    80:c0:7f:8e:04:6c:35:eb:40:2e:7b:0b:55:dc:f1:
                    70:a2:79:45:1c:3d:d3:fd:98:e3:c8:a9:b7:ca:5f:
                    b0:da:d3:8d:0a:01:22:3f:9f:2c:cb:9a:ad:d1:e2:
                    39:f1:13:26:e2:6c:a5:b8:51:45:73:00:9b:ca:84:
                    d4:2a:85:d3:ac:3e:f7:c4:a9:a6:c9:59:9b:f1:3d:
                    6f:82:ee:3d:58:4f:72:56:cb:68:53:d3:10:b1:51:
                    84:5e:c3:a3:65:18:25:46:0d:49:a4:ca:1e:60:54:
                    8c:9b:33:1b:1a:13:11:b4:2f:67:9d:21:8d:5c:00:
                    7f:06:a0:ca:54:c6:c5:87:de:29:d6:06:25:92:58:
                    dc:b6:b9:a0:ce:a5:e9:57:83:23:30:d4:2e:9b:6b:
                    f5:13:9f:6f:b6:3a:18:4d:ae:39:83:cb:4b:33:33:
                    f3:55:ce:26:55:08:07:9a:60:8f:a5:53:82:cb:aa:
                    49:60:4d:74:00:9a:2c:5c:4d:cd:dc:4c:c5:a6:02:
                    50:d8:da:a7:b8:6a:99:94:40:fe:8b:b7:c3:05:40:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:78:B5:03:B3:83:F6:9C:3D:A0:62:CF:9C:09:5E:23:45:95:66
            X509v3 Authority Key Identifier:
                keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:50:ad:2d:60:49:86:e4:d5:2d:06:58:f2:ba:0e:fe:c7:
         60:49:9c:9a:db:f9:12:2a:36:b0:96:35:0d:86:07:cc:2e:e2:
         d1:4a:10:72:4c:11:56:4d:bf:9d:42:3f:b8:62:a4:3a:42:64:
         c0:ea:16:24:0c:9c:b4:f7:19:87:96:64:aa:29:a1:86:b6:ce:
         82:10:d4:de:66:d9:4f:6c:83:1a:49:cb:6f:37:a4:3f:a9:b1:
         78:c7:10:e2:dc:6e:ec:17:ac:d0:1a:14:96:6b:7d:13:62:02:
         b7:ae:57:84:59:69:ae:b2:73:05:99:57:65:d6:e3:39:4e:3a:
         97:4d:53:dc:38:cb:75:c2:fe:69:b5:84:03:e1:3e:36:88:1f:
         32:d8:02:e7:00:22:f4:fc:48:07:27:ed:dd:fe:2c:4d:7e:98:
         d3:d1:1a:2a:96:87:2e:eb:7c:44:24:17:b4:de:f7:24:4f:6e:
         87:62:b5:cc:dc:fe:f8:84:6a:0d:df:a8:d3:c8:4e:f8:90:1a:
         63:58:56:9d:96:e3:73:07:cb:23:11:18:cc:7a:6e:c3:bd:4a:
         ba:3a:1c:3c:ab:83:f0:3f:05:6f:d3:6d:01:95:ed:1f:a2:09:
         56:a1:2a:11:de:c9:e1:44:db:10:49:79:8b:4b:3f:88:32:7f:
         a5:8b:7d:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D7/vgDMex5DklvnJ1YOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjc4ZjE0ZjhiMjI4OGQ0OTU1N2NhNmZiMWJkZjQ3OTM5
MjdkY2UwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EygxMDhlNzhiNTAzYjM4M2Y2OWMzZGEwNjJjZjljMDk1ZTIzNDU5NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu1Y3UVyTT8RXjFKTmcAkkFVzZ3s
XpgWjBaQUIOyZYSS8YsmXYREaSWmkXKAwH+OBGw160AuewtV3PFwonlFHD3T/Zjj
yKm3yl+w2tONCgEiP58sy5qt0eI58RMm4myluFFFcwCbyoTUKoXTrD73xKmmyVmb
8T1vgu49WE9yVstoU9MQsVGEXsOjZRglRg1JpMoeYFSMmzMbGhMRtC9nnSGNXAB/
BqDKVMbFh94p1gYlkljctrmgzqXpV4MjMNQum2v1E59vtjoYTa45g8tLMzPzVc4m
VQgHmmCPpVOCy6pJYE10AJosXE3N3EzFpgJQ2NqnuGqZlED+i7fDBUAAqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCOeLUDs4P2nD2gYs+cCV4jRZVmMB8GA1UdIwQY
MBaAFCtnjxT4siiNSVV8pvsb30eTkn3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEt
ZjFjYzg3M2MyZTI3LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEtZjFjYzg3M2MyZTI3
LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOBQrS1g
SYbk1S0GWPK6Dv7HYEmcmtv5Eio2sJY1DYYHzC7i0UoQckwRVk2/nUI/uGKkOkJk
wOoWJAyctPcZh5ZkqimhhrbOghDU3mbZT2yDGknLbzekP6mxeMcQ4txu7Bes0BoU
lmt9E2ICt65XhFlprrJzBZlXZdbjOU46l01T3DjLdcL+abWEA+E+NogfMtgC5wAi
9PxIByft3f4sTX6Y09EaKpaHLut8RCQXtN73JE9uh2K1zNz++IRqDd+o08hO+JAa
Y1hWnZbjcwfLIxEYzHpuw71KujocPKuD8D8Fb9NtAZXtH6IJVqEqEd7J4UTbEEl5
i0s/iDJ/pYt9kw==
-----END CERTIFICATE-----