Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier:          P+BagpihjyLpzQMPyXAO1Glzem/14z0B+ERxUtSbjTQ=
Subject key identifier:   62:BF:F4:AE:C8:C7:26:50:3A:9C:79:D2:0A:1B:FD:41:ED:3D:57:9F
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer:       /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial:       01962ECF925CF6CE79633DA27F684079986B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: uKlS8Yut+mu9COcRZWtB0GNSuticzIKdDWeMyzakRfU=)
                          2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:5c:f6:ce:79:63:3d:a2:7f:68:40:79:98:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=62bff4aec8c726503a9c79d20a1bfd41ed3d579f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:09:70:4f:fe:f9:6d:bc:03:48:32:9d:f7:
                    0e:15:85:0c:2f:af:69:ea:a0:99:fc:8b:3b:f0:89:
                    0a:dd:11:e3:a5:4a:a6:17:64:1a:dd:15:57:0b:ff:
                    64:76:ff:54:06:98:09:e5:fd:d8:eb:a8:5a:77:3d:
                    39:7d:b1:3b:af:77:d3:e2:78:47:b8:fa:be:3c:04:
                    73:5f:3f:51:9f:77:1c:ab:19:6f:ba:aa:0f:19:1b:
                    6c:dc:59:92:61:04:b0:13:e6:49:64:2c:f6:a9:2c:
                    92:bb:c2:ed:38:02:ea:30:c5:66:5d:1a:7f:cb:ff:
                    be:59:3a:93:e0:c2:f2:93:4c:3f:8b:89:be:ee:aa:
                    19:b4:fd:47:78:ba:49:40:2f:15:6c:ed:74:1f:9f:
                    e6:ef:96:88:a1:b8:24:45:68:f8:1f:a5:11:73:ba:
                    1d:c7:97:cd:20:f3:31:72:a0:a6:2e:34:74:ff:fc:
                    6d:0f:da:73:90:ad:c8:41:73:67:b5:67:f8:6f:41:
                    d2:a3:43:cf:83:b8:0a:d4:98:1c:7c:a8:37:22:21:
                    87:de:72:b6:26:6d:40:9f:f4:79:0f:58:a0:41:4c:
                    f8:fa:f0:32:07:cb:e9:76:ba:54:9e:8c:83:d9:6a:
                    bf:66:64:25:fa:1f:36:61:fe:38:fe:6c:6b:a8:97:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:F4:AE:C8:C7:26:50:3A:9C:79:D2:0A:1B:FD:41:ED:3D:57:9F
            X509v3 Authority Key Identifier:
                keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ed:1f:ea:4f:1b:01:87:3b:05:75:65:26:18:b3:66:4d:8c:
         ad:f7:31:8a:42:b6:31:2f:d4:e5:bd:da:76:05:b7:f2:0d:da:
         5c:3d:52:a4:5d:da:ff:1d:99:1c:e3:b7:b8:60:f8:9e:e4:44:
         a7:a4:50:20:de:09:bc:98:10:c4:75:20:a4:09:4c:98:67:c9:
         b0:da:8a:0e:51:e6:bf:9f:e3:b4:a4:4c:07:39:0f:d2:7c:54:
         a4:6f:24:f0:f5:08:40:59:39:e0:1a:5a:50:74:8d:99:b7:1d:
         3b:5b:7f:06:9d:f1:4a:a0:63:e6:a4:99:c2:cb:73:9e:ed:c2:
         11:24:60:67:26:f6:c6:96:62:b4:5f:3a:2a:b2:51:c1:c8:62:
         db:aa:a2:e2:db:35:d3:c3:e0:1e:6a:e5:83:2b:12:cb:cb:32:
         bf:43:42:14:69:70:09:11:55:f3:2b:98:bb:71:cc:1a:09:8e:
         f5:98:25:8f:74:2a:75:ee:32:44:40:55:c8:fd:f1:fb:ee:e0:
         80:a8:15:16:9d:b0:4c:58:e6:4e:f5:a8:cd:e8:27:63:9c:03:
         0d:30:94:26:45:0b:dd:d7:f6:20:ab:35:70:44:bd:0c:e9:8a:
         f8:1d:c3:71:9f:50:fa:68:48:c1:3a:81:84:ef:c3:61:d6:47:
         91:eb:23:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5Jc9s55Yz2if2hAeZhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjUwNDEzMTEwMTE3WhcNMjUwNDE0MTEwMTE3WjAzMTEwLwYDVQQD
Eyg2MmJmZjRhZWM4YzcyNjUwM2E5Yzc5ZDIwYTFiZmQ0MWVkM2Q1NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n4JcE/++W28A0gynfcOFYUML69p
6qCZ/Is78IkK3RHjpUqmF2Qa3RVXC/9kdv9UBpgJ5f3Y66hadz05fbE7r3fT4nhH
uPq+PARzXz9Rn3ccqxlvuqoPGRts3FmSYQSwE+ZJZCz2qSySu8LtOALqMMVmXRp/
y/++WTqT4MLyk0w/i4m+7qoZtP1HeLpJQC8VbO10H5/m75aIobgkRWj4H6URc7od
x5fNIPMxcqCmLjR0//xtD9pzkK3IQXNntWf4b0HSo0PPg7gK1JgcfKg3IiGH3nK2
Jm1An/R5D1igQUz4+vAyB8vpdrpUnoyD2Wq/ZmQl+h82Yf44/mxrqJexhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGK/9K7IxyZQOpx50gob/UHtPVefMB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtO0f6k8b
AYc7BXVlJhizZk2MrfcxikK2MS/U5b3adgW38g3aXD1SpF3a/x2ZHOO3uGD4nuRE
p6RQIN4JvJgQxHUgpAlMmGfJsNqKDlHmv5/jtKRMBzkP0nxUpG8k8PUIQFk54Bpa
UHSNmbcdO1t/Bp3xSqBj5qSZwstznu3CESRgZyb2xpZitF86KrJRwchi26qi4ts1
08PgHmrlgysSy8syv0NCFGlwCRFV8yuYu3HMGgmO9Zglj3Qqde4yREBVyP3x++7g
gKgVFp2wTFjmTvWozegnY5wDDTCUJkUL3df2IKs1cES9DOmK+B3DcZ9Q+mhIwTqB
hO/DYdZHkesjPQ==
-----END CERTIFICATE-----