Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File:                     rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier:          baLMwKchQgsdDssLQ0uQq6AxNQ1iF4f8JFfuuzfEA7I=
Subject key identifier:   4D:6B:EC:6F:07:F7:75:55:5E:DC:B1:08:A0:08:22:D3:1A:BC:19:D4
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer:       /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial:       01962F3D8750341B04B812EFE96ABF4D1276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number:          09FD
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: 2ANtTxYhC9doii2ZUg03hm4sdbA.roa (hash: z+xDfuoi1M8PZfat7ClShgNzShy9imRSBA53FNp3Yi4=)
                          2: fkWlT9PgiHrt21vPWUF4x1XaOLY.roa (hash: x7UGdmB+xVRIAlEZvuthxI7D4dWajJ53Iu1moiHZnkA=)
                          3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: kUkVFqNK+ddE3dKve2ATTshkNX2Qg+8oREpC9FvDk68=)
                          4: wF0b1KUXe0U_bON_pBEoysY2T6k.roa (hash: DPse6U512sX0ONNuBoLLi/K8A5hqXSZVhiW/ds6GDr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:87:50:34:1b:04:b8:12:ef:e9:6a:bf:4d:12:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=4d6bec6f07f775555edcb108a00822d31abc19d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:70:0f:b2:13:97:c1:65:60:64:0a:b3:bc:
                    28:55:2b:d1:3c:f1:b3:4a:c0:65:95:93:39:33:20:
                    d0:c6:c0:28:da:33:7b:52:44:75:2f:9c:5b:40:12:
                    d9:cf:2c:5c:76:d7:e5:fc:6e:37:d6:32:d1:78:fe:
                    a3:e3:22:60:37:5c:35:9e:63:1b:87:23:d7:f1:4c:
                    b4:00:c5:94:f3:c9:35:60:f9:96:96:c8:80:e0:a3:
                    38:2a:c2:94:90:2f:2f:19:3d:b2:af:88:c8:42:78:
                    9e:a1:16:f6:60:4c:ae:bf:64:13:3e:79:c7:f6:31:
                    41:06:e5:6f:be:de:0a:01:86:f7:06:a5:65:7f:6a:
                    48:dc:02:c6:80:0d:8d:de:7d:8a:43:c5:95:64:5c:
                    c2:31:b8:97:03:8f:e3:a0:8d:f2:1b:7e:5d:73:2d:
                    fa:af:99:c2:50:26:f2:29:42:88:9c:a3:cd:fc:89:
                    fd:ab:0e:bc:9e:a3:5f:33:15:e1:c0:7c:1f:c5:5b:
                    99:80:05:c5:b3:71:f3:dc:16:4e:f8:2e:c1:1c:37:
                    4c:57:b0:fa:6e:b2:19:5b:d5:6e:be:9b:a1:d3:0a:
                    9d:96:3c:82:3b:90:0c:23:40:48:e9:ce:7c:92:4c:
                    23:07:89:23:3d:4c:b8:dc:bf:53:ca:de:7a:20:07:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:EC:6F:07:F7:75:55:5E:DC:B1:08:A0:08:22:D3:1A:BC:19:D4
            X509v3 Authority Key Identifier:
                keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:03:5c:b8:1f:68:9f:42:1e:87:2c:b4:b3:bd:02:77:4c:32:
         83:07:f7:99:1d:f4:6f:54:22:1d:bb:3b:ad:61:11:91:62:72:
         0b:17:1d:f1:71:29:e9:46:30:a3:06:49:5f:16:74:8f:5f:52:
         06:c2:b0:80:b1:f0:17:e5:20:9b:d4:16:15:76:61:3d:46:cf:
         53:12:4f:9c:87:b0:3b:e6:99:43:0e:09:cf:1e:e2:61:e3:1c:
         7c:9b:a3:10:85:d5:7a:5b:7b:22:0d:e0:1b:7d:26:f4:13:b3:
         2f:7e:49:fe:c1:7d:b1:d8:27:c6:de:88:67:1d:1f:91:12:e4:
         2e:3a:e8:02:16:5a:84:1e:f5:ff:4a:d9:b8:e6:5f:43:8c:12:
         3f:1b:e1:b0:de:8c:f8:00:93:4f:c9:6b:e4:60:47:bc:c8:08:
         d0:37:d8:5b:e7:b7:b9:ac:a5:71:40:b2:cf:85:87:62:6d:20:
         3d:80:44:a1:6c:42:a7:ed:df:ca:6d:2c:5a:da:2d:49:95:73:
         11:29:d6:ae:8e:d5:a8:39:44:ee:de:4b:d9:13:93:6d:9e:2d:
         15:0e:85:0e:f7:cb:08:d5:d7:11:05:13:5d:bf:17:17:cb:16:
         f4:b2:99:81:8e:4a:6d:e5:13:29:e7:32:1f:b4:c5:d9:f3:33:
         be:47:5b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYdQNBsEuBLv6Wq/TRJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl
Zjg4NTcwHhcNMjUwNDEzMTMwMTIzWhcNMjUwNDE0MTMwMTIzWjAzMTEwLwYDVQQD
Eyg0ZDZiZWM2ZjA3Zjc3NTU1NWVkY2IxMDhhMDA4MjJkMzFhYmMxOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5ZwD7ITl8FlYGQKs7woVSvRPPGz
SsBllZM5MyDQxsAo2jN7UkR1L5xbQBLZzyxcdtfl/G431jLReP6j4yJgN1w1nmMb
hyPX8Uy0AMWU88k1YPmWlsiA4KM4KsKUkC8vGT2yr4jIQnieoRb2YEyuv2QTPnnH
9jFBBuVvvt4KAYb3BqVlf2pI3ALGgA2N3n2KQ8WVZFzCMbiXA4/joI3yG35dcy36
r5nCUCbyKUKInKPN/In9qw68nqNfMxXhwHwfxVuZgAXFs3Hz3BZO+C7BHDdMV7D6
brIZW9Vuvpuh0wqdljyCO5AMI0BI6c58kkwjB4kjPUy43L9Tyt56IAdA1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1r7G8H93VVXtyxCKAIItMavBnUMB8GA1UdIwQY
MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt
MzI5MzZjM2E0YTlkLzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk
LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgNcuB9o
n0Iehyy0s70Cd0wygwf3mR30b1QiHbs7rWERkWJyCxcd8XEp6UYwowZJXxZ0j19S
BsKwgLHwF+Ugm9QWFXZhPUbPUxJPnIewO+aZQw4Jzx7iYeMcfJujEIXVelt7Ig3g
G30m9BOzL35J/sF9sdgnxt6IZx0fkRLkLjroAhZahB71/0rZuOZfQ4wSPxvhsN6M
+ACTT8lr5GBHvMgI0DfYW+e3uaylcUCyz4WHYm0gPYBEoWxCp+3fym0sWtotSZVz
ESnWro7VqDlE7t5L2ROTbZ4tFQ6FDvfLCNXXEQUTXb8XF8sW9LKZgY5KbeUTKecy
H7TF2fMzvkdbZA==
-----END CERTIFICATE-----