Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File:                     mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier:          LytZKK1yMSmqYihXacvUkygAcgagV158w+/iE+Kwzsg=
Subject key identifier:   BA:26:A0:B4:6D:87:60:C6:A9:53:03:E5:33:4C:E9:04:E4:11:DA:4C
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer:       /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial:       01962E9881E422ABE5B73A822847306817AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
                          2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: fQ4DpFs3euVI8HU4NEfxCp3Sj9lRks+WzGp2cgUxNGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:81:e4:22:ab:e5:b7:3a:82:28:47:30:68:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=ba26a0b46d8760c6a95303e5334ce904e411da4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:8c:b6:a1:02:fd:55:45:12:fb:f1:34:a3:
                    22:6d:9d:0d:db:09:1c:f4:27:81:dd:a9:61:3d:af:
                    a0:56:da:13:d3:3f:cd:99:8b:88:bb:70:0b:c0:d0:
                    a3:47:6f:ad:b3:3c:8a:e3:39:00:b5:6d:48:82:89:
                    f8:ba:b2:ff:df:a4:46:d9:8f:ec:04:81:1e:70:3f:
                    1f:06:09:35:d7:0f:d7:49:ca:c7:18:67:e9:b2:96:
                    ae:54:51:d5:da:99:64:98:ae:80:99:44:ff:d5:f5:
                    09:4e:ca:8a:a1:7e:13:87:c1:f3:3b:b7:20:a2:de:
                    c3:90:1b:48:17:da:f4:ae:70:0e:2d:db:17:f8:7a:
                    0c:7b:da:92:4d:c6:31:1c:92:cd:71:ad:08:42:71:
                    ac:b1:65:98:58:dd:93:75:66:ec:06:b4:48:e3:c3:
                    9f:d2:65:5f:19:8c:58:69:51:f1:aa:52:66:d0:a0:
                    ab:e5:43:c7:06:ec:b5:6b:51:ff:a6:1f:f3:49:f1:
                    19:e2:ca:4a:7f:36:48:99:1b:6c:63:ab:26:de:56:
                    21:52:cc:5a:9e:df:84:ad:21:2a:4b:03:bc:67:94:
                    63:54:fb:5c:5b:fe:a3:66:66:fe:6b:cf:7a:da:08:
                    0a:f5:72:da:7f:aa:bd:bf:c7:29:99:ae:e3:5e:bf:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:26:A0:B4:6D:87:60:C6:A9:53:03:E5:33:4C:E9:04:E4:11:DA:4C
            X509v3 Authority Key Identifier:
                keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a6:aa:aa:9f:8e:d7:47:9e:10:d8:ee:10:24:5d:6e:59:44:
         1c:f9:3c:c8:bb:54:bf:a7:d2:09:c3:ff:a9:97:54:d3:93:a8:
         1f:15:d7:f5:68:cd:bb:f0:58:b8:89:1e:1a:35:9c:5a:1d:6b:
         37:6b:55:d9:05:a0:3c:8a:f5:8c:e2:90:50:b5:a1:f4:c2:e2:
         0a:e7:a9:bc:6e:17:88:8c:db:b2:b0:25:93:aa:f6:59:e4:40:
         e9:69:2b:29:66:b3:de:f1:c3:44:4e:68:fb:ef:f0:25:02:e7:
         1c:7e:01:83:6b:68:c0:a0:f9:1d:8e:9d:49:fa:cd:72:4a:e1:
         0a:b5:53:e8:29:cc:ca:ba:7e:9f:95:fe:33:27:b7:80:dc:9c:
         b8:24:83:a2:02:b5:3a:64:ef:df:9d:13:7e:95:bf:39:7c:5a:
         b7:5c:67:f7:82:c2:96:df:e3:33:f9:5c:9a:32:b0:02:4c:8f:
         1b:81:61:4f:87:ca:23:66:fa:7b:d2:78:46:ae:17:4b:b9:df:
         d1:ab:2f:a4:2f:9a:fe:23:4e:5d:38:c8:dd:5c:e8:65:cc:f1:
         0c:68:4a:07:d8:31:aa:fe:bc:49:4a:d6:47:5c:b5:05:27:aa:
         8a:1b:21:6d:11:7f:3d:85:8f:e0:f3:25:97:88:05:eb:38:9c:
         9a:bc:b1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIHkIqvltzqCKEcwaBevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDk3YzJiYjA2MmI1YzI5OTIzOTFhNGVkMWVlNGY0ZmEz
Nzc5Y2IwHhcNMjUwNDEzMTAwMTA4WhcNMjUwNDE0MTAwMTA4WjAzMTEwLwYDVQQD
EyhiYTI2YTBiNDZkODc2MGM2YTk1MzAzZTUzMzRjZTkwNGU0MTFkYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SeMtqEC/VVFEvvxNKMibZ0N2wkc
9CeB3alhPa+gVtoT0z/NmYuIu3ALwNCjR2+tszyK4zkAtW1Igon4urL/36RG2Y/s
BIEecD8fBgk11w/XScrHGGfpspauVFHV2plkmK6AmUT/1fUJTsqKoX4Th8HzO7cg
ot7DkBtIF9r0rnAOLdsX+HoMe9qSTcYxHJLNca0IQnGssWWYWN2TdWbsBrRI48Of
0mVfGYxYaVHxqlJm0KCr5UPHBuy1a1H/ph/zSfEZ4spKfzZImRtsY6sm3lYhUsxa
nt+ErSEqSwO8Z5RjVPtcW/6jZmb+a8962ggK9XLaf6q9v8cpma7jXr9e6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLomoLRth2DGqVMD5TNM6QTkEdpMMB8GA1UdIwQY
MBaAFJgJfCuwYrXCmSORpO0e5PT6N3nLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUt
OThiYzI1NGMyM2U1LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUtOThiYzI1NGMyM2U1
LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6aqqp+O
10eeENjuECRdbllEHPk8yLtUv6fSCcP/qZdU05OoHxXX9WjNu/BYuIkeGjWcWh1r
N2tV2QWgPIr1jOKQULWh9MLiCuepvG4XiIzbsrAlk6r2WeRA6WkrKWaz3vHDRE5o
++/wJQLnHH4Bg2towKD5HY6dSfrNckrhCrVT6CnMyrp+n5X+Mye3gNycuCSDogK1
OmTv350TfpW/OXxat1xn94LClt/jM/lcmjKwAkyPG4FhT4fKI2b6e9J4Rq4XS7nf
0asvpC+a/iNOXTjI3VzoZczxDGhKB9gxqv68SUrWR1y1BSeqihshbRF/PYWP4PMl
l4gF6zicmryxaw==
-----END CERTIFICATE-----