Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File:                     gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier:          QOABNLo15geMJEMzeaOkLQnrSoNwfmcBxqLCTsKsbOE=
Subject key identifier:   DF:C0:D7:81:1C:DE:5B:82:7C:EB:4E:20:E3:B7:F9:3D:72:66:46:D0
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer:       /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial:       01962F3D5DE40D173244D4FBF6228692905E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number:          14A3
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
                          2: Ogjl1IwxcY0INT0hoc3V-UZ1sHo.roa (hash: w0QqL1VQBTrf30Omc7SiLZ4gKL+da0byGUFGvs9DV9w=)
                          3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
                          4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
                          5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
                          6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: fSnLWu3awPQEPji3XYlB4sovS4qQswHxwre+nIOtZiM=)
                          7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
                          8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
                          9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5d:e4:0d:17:32:44:d4:fb:f6:22:86:92:90:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=dfc0d7811cde5b827ceb4e20e3b7f93d726646d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:89:56:df:9e:fa:c6:b3:52:21:f5:58:e8:
                    57:60:82:c5:6f:f0:5b:39:c4:a0:fe:ce:df:e5:6c:
                    66:88:97:10:e7:6e:10:26:ba:eb:9d:e0:85:a6:0e:
                    f7:de:87:92:8f:06:b8:e3:a6:1c:83:8f:c0:99:07:
                    b7:d3:e0:29:65:ed:15:fb:16:a4:71:97:ce:39:a7:
                    2a:98:27:a0:f6:12:e6:c0:bd:c6:b5:13:80:16:ca:
                    a8:20:c3:35:a2:46:52:40:ac:fc:77:eb:a9:6a:33:
                    91:3d:25:67:bb:d6:84:4e:63:3b:26:21:16:bb:f0:
                    b0:ee:4e:a9:4a:dd:13:83:27:be:66:c3:7c:2f:8e:
                    00:52:1a:fc:72:00:2c:45:a6:69:75:bb:90:68:5e:
                    20:dd:b0:16:27:67:78:10:7a:a8:23:6d:cb:83:d2:
                    5d:c2:0e:40:dc:a8:3d:05:78:91:71:29:03:c0:8b:
                    d1:a3:98:52:eb:2c:f3:9b:a7:66:f5:58:5f:c9:c6:
                    96:fa:ae:86:f1:72:fa:93:76:18:6c:bd:18:5d:84:
                    34:b5:7c:cd:16:70:67:6e:3e:88:4a:7c:1e:48:b2:
                    fb:e5:15:2f:96:d7:8b:96:30:54:8d:0a:2d:e9:48:
                    28:35:14:6a:66:28:d4:bf:e2:d7:97:99:d5:8e:54:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C0:D7:81:1C:DE:5B:82:7C:EB:4E:20:E3:B7:F9:3D:72:66:46:D0
            X509v3 Authority Key Identifier:
                keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:73:03:b2:17:94:7f:4c:44:3e:23:77:b4:b9:f1:6e:f7:
         79:e9:89:c4:e3:4e:e0:df:4b:30:a3:05:9d:7f:9c:62:b5:6d:
         96:b9:c4:19:8d:89:d7:45:4b:fa:21:2b:37:88:6f:2f:21:77:
         87:b9:63:b3:9f:91:39:79:89:dd:4b:9b:e2:09:8b:de:06:63:
         c3:36:69:b0:db:16:ad:23:f2:32:ca:cb:d9:af:a4:f6:c1:39:
         45:ba:c7:27:26:4f:4f:80:63:d6:e2:10:d3:f7:eb:7d:38:c1:
         52:7e:1b:29:6a:7a:62:e6:2c:82:5f:a4:b2:3b:0d:0b:84:e9:
         a0:98:70:77:39:a4:ed:89:77:44:24:05:2d:63:28:c1:05:b2:
         31:37:cd:a3:2d:ba:58:f3:6b:bb:62:75:98:66:26:e5:07:e7:
         e2:e1:70:9e:37:75:00:ec:40:82:ee:ff:8c:a6:59:a9:b2:9e:
         5a:bc:66:ef:58:2e:12:9e:6e:d1:95:23:87:f8:59:c5:80:2b:
         38:51:40:a2:34:a7:33:10:a3:9e:e1:25:9d:ee:4d:52:b1:50:
         56:ce:e4:1c:15:13:0b:05:44:f9:a3:2b:26:4a:b7:0c:23:b8:
         c3:47:b0:a4:7c:f5:93:bd:65:3b:ee:8f:81:28:ca:e9:3c:e1:
         7a:47:a8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPV3kDRcyRNT79iKGkpBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4
YjlkODcwHhcNMjUwNDEzMTMwMTEyWhcNMjUwNDE0MTMwMTEyWjAzMTEwLwYDVQQD
EyhkZmMwZDc4MTFjZGU1YjgyN2NlYjRlMjBlM2I3ZjkzZDcyNjY0NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8CJVt+e+sazUiH1WOhXYILFb/Bb
OcSg/s7f5WxmiJcQ524QJrrrneCFpg733oeSjwa446Ycg4/AmQe30+ApZe0V+xak
cZfOOacqmCeg9hLmwL3GtROAFsqoIMM1okZSQKz8d+upajORPSVnu9aETmM7JiEW
u/Cw7k6pSt0Tgye+ZsN8L44AUhr8cgAsRaZpdbuQaF4g3bAWJ2d4EHqoI23Lg9Jd
wg5A3Kg9BXiRcSkDwIvRo5hS6yzzm6dm9VhfycaW+q6G8XL6k3YYbL0YXYQ0tXzN
FnBnbj6ISnweSLL75RUvlteLljBUjQot6UgoNRRqZijUv+LXl5nVjlRGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/A14Ec3luCfOtOIOO3+T1yZkbQMB8GA1UdIwQY
MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt
Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm
LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoRzA7IX
lH9MRD4jd7S58W73eemJxONO4N9LMKMFnX+cYrVtlrnEGY2J10VL+iErN4hvLyF3
h7ljs5+ROXmJ3Uub4gmL3gZjwzZpsNsWrSPyMsrL2a+k9sE5RbrHJyZPT4Bj1uIQ
0/frfTjBUn4bKWp6YuYsgl+ksjsNC4TpoJhwdzmk7Yl3RCQFLWMowQWyMTfNoy26
WPNru2J1mGYm5Qfn4uFwnjd1AOxAgu7/jKZZqbKeWrxm71guEp5u0ZUjh/hZxYAr
OFFAojSnMxCjnuElne5NUrFQVs7kHBUTCwVE+aMrJkq3DCO4w0ewpHz1k71lO+6P
gSjK6TzhekeoSw==
-----END CERTIFICATE-----