Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File:                     0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier:          V5LN4R22N5rp0AgCpZMiNgsgerVYw3Ioagxk+TTLG60=
Subject key identifier:   17:04:D2:D8:38:7B:BB:7A:7B:F7:54:54:F8:B9:66:15:26:B9:83:E0
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer:       /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial:       01962F74A118217ABD2FC56EF5AEEF788264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number:          012B
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: 6CJMvdt+UfhEmxWn7eu5imtIQVWEVqJr54R59sVUwoE=)
                          2: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (hash: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a1:18:21:7a:bd:2f:c5:6e:f5:ae:ef:78:82:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=1704d2d8387bbb7a7bf75454f8b9661526b983e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:e2:ae:49:b4:81:20:c1:8b:57:cf:1a:14:
                    81:12:e9:eb:d1:b6:e1:75:95:48:20:a5:d2:cd:e2:
                    79:1a:36:20:cd:26:61:3e:39:f8:31:22:4a:41:df:
                    93:f9:88:3b:d7:03:93:bf:93:0c:a5:c9:ea:84:db:
                    c7:da:8e:e6:66:78:09:9d:7c:d5:12:d9:56:4c:45:
                    8c:ab:43:70:91:ee:4e:62:52:f9:eb:40:1b:80:0f:
                    de:f2:f4:c9:ec:51:28:51:de:61:7f:81:39:6f:72:
                    f6:38:66:98:c8:98:f9:53:3e:47:e6:5a:cd:1a:b5:
                    5a:f8:43:12:f7:a4:dc:74:c8:a2:45:6a:48:97:f6:
                    cf:b3:67:4c:f3:4a:a5:9b:27:e8:55:07:c0:89:c9:
                    ab:d4:e6:f0:5b:f8:cc:49:36:c8:1f:1d:bc:4e:e4:
                    e4:ad:55:69:30:bf:f0:5c:fa:fb:a3:93:b6:68:fe:
                    d6:41:cd:65:10:53:80:ab:fe:fc:ea:e8:06:79:8d:
                    5b:cf:04:14:13:6b:66:25:57:c6:1f:47:f9:55:10:
                    a4:e5:a2:44:c3:7e:5e:39:25:9f:ae:f4:f2:5a:74:
                    19:37:39:e5:f8:ee:dc:4f:d2:8e:ad:53:80:f3:97:
                    ba:8c:69:15:cf:83:0e:32:ed:3b:17:09:3b:e7:24:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:04:D2:D8:38:7B:BB:7A:7B:F7:54:54:F8:B9:66:15:26:B9:83:E0
            X509v3 Authority Key Identifier:
                keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:b6:69:6c:df:4c:d4:35:20:59:46:68:3d:8a:c0:f9:2f:
         8f:05:47:9f:a7:32:bb:e9:98:2b:83:7e:b4:83:0e:8d:0f:ac:
         bf:26:32:b5:74:4b:67:2f:ce:1f:be:73:20:35:32:84:e5:7f:
         77:76:11:ad:b8:f0:6f:87:ef:4d:f9:3c:f6:14:87:d0:d0:46:
         bb:fc:af:5f:95:e1:af:1b:c8:7b:83:c2:9c:f0:87:2d:1a:3a:
         dd:94:81:f2:b8:8b:74:59:9f:df:24:01:a7:c2:82:53:8f:0c:
         f7:74:d0:26:b7:2a:c2:fc:6e:3a:c1:51:e4:a8:d4:8f:5e:40:
         f5:b2:85:df:1b:59:76:b1:2e:ba:a5:a5:a2:f9:bf:84:52:eb:
         a8:f6:dc:f0:6a:d3:06:e0:6b:38:be:15:ab:ec:37:89:55:c5:
         05:0a:1d:d0:dc:4e:e7:90:f9:d0:88:49:65:65:ee:34:63:d3:
         31:d4:02:5f:19:07:28:1f:36:6a:08:b4:6b:dc:e0:93:b5:a5:
         8e:1c:59:a7:21:77:b0:e9:77:d5:0e:de:d3:1a:1c:5d:4a:29:
         29:51:dc:e9:ae:83:f5:c9:ea:59:58:11:9a:5d:fc:8c:9a:85:
         37:2e:2d:41:70:48:0e:fc:24:3d:8f:14:43:21:36:a7:46:24:
         a1:40:29:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKEYIXq9L8Vu9a7veIJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2
ZDgyY2MwHhcNMjUwNDEzMTQwMTM0WhcNMjUwNDE0MTQwMTM0WjAzMTEwLwYDVQQD
EygxNzA0ZDJkODM4N2JiYjdhN2JmNzU0NTRmOGI5NjYxNTI2Yjk4M2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnebirkm0gSDBi1fPGhSBEunr0bbh
dZVIIKXSzeJ5GjYgzSZhPjn4MSJKQd+T+Yg71wOTv5MMpcnqhNvH2o7mZngJnXzV
EtlWTEWMq0Nwke5OYlL560AbgA/e8vTJ7FEoUd5hf4E5b3L2OGaYyJj5Uz5H5lrN
GrVa+EMS96TcdMiiRWpIl/bPs2dM80qlmyfoVQfAicmr1ObwW/jMSTbIHx28TuTk
rVVpML/wXPr7o5O2aP7WQc1lEFOAq/786ugGeY1bzwQUE2tmJVfGH0f5VRCk5aJE
w35eOSWfrvTyWnQZNznl+O7cT9KOrVOA85e6jGkVz4MOMu07Fwk75yQPwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcE0tg4e7t6e/dUVPi5ZhUmuYPgMB8GA1UdIwQY
MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt
OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk
LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRq2aWzf
TNQ1IFlGaD2KwPkvjwVHn6cyu+mYK4N+tIMOjQ+svyYytXRLZy/OH75zIDUyhOV/
d3YRrbjwb4fvTfk89hSH0NBGu/yvX5XhrxvIe4PCnPCHLRo63ZSB8riLdFmf3yQB
p8KCU48M93TQJrcqwvxuOsFR5KjUj15A9bKF3xtZdrEuuqWlovm/hFLrqPbc8GrT
BuBrOL4Vq+w3iVXFBQod0NxO55D50IhJZWXuNGPTMdQCXxkHKB82agi0a9zgk7Wl
jhxZpyF3sOl31Q7e0xocXUopKVHc6a6D9cnqWVgRml38jJqFNy4tQXBIDvwkPY8U
QyE2p0YkoUApDA==
-----END CERTIFICATE-----