Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          HeHZGOp60MKW+/n5IY8gPr1hi+MjxaVaFdHtPFOW1zo=
Subject key identifier:   4D:3E:5B:FA:95:0E:E3:73:6D:64:04:51:42:7F:9B:BF:86:6E:6D:3D
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       01962DF3D4058DE9F74F060909F25023FBCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
                          2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
                          3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: vBIHR0TgVQomkx92DalFqJk8kreykeP+UE5HlA8JvtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d4:05:8d:e9:f7:4f:06:09:09:f2:50:23:fb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=4d3e5bfa950ee3736d640451427f9bbf866e6d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:e6:33:c6:f5:5c:8c:88:33:58:71:d1:08:
                    22:33:ed:66:81:08:4e:9c:b8:ee:1b:59:85:7a:07:
                    ef:0b:8a:55:1d:d5:7f:0e:4f:0a:d8:d1:45:1c:e8:
                    59:31:83:b7:ec:59:21:ec:8a:fe:8e:52:47:ad:9e:
                    a4:5f:00:88:a7:c9:17:0b:48:c6:02:24:3f:d8:07:
                    f5:d6:08:d2:ee:cf:3a:81:76:1e:6d:5b:67:ac:72:
                    36:3f:c4:f6:97:63:41:a5:a6:6a:e5:b0:f2:eb:9a:
                    9a:40:25:da:d8:85:9a:c6:96:0b:ce:89:ce:33:ce:
                    e0:ef:2f:1c:6a:64:9c:d5:d6:71:4d:3f:3a:9b:1e:
                    b5:98:1f:22:78:42:a5:4a:f2:db:af:03:76:44:67:
                    9e:9e:71:0b:ab:5b:0f:b3:86:a4:82:11:da:c5:6f:
                    09:56:70:90:88:5d:72:b7:23:f6:a7:7e:e2:f1:b5:
                    b3:17:a8:00:c8:ef:e8:13:47:25:06:20:02:cb:dc:
                    d0:77:8b:ee:b1:22:7b:f1:10:4e:fc:f7:e5:a0:0d:
                    09:16:99:f9:3a:52:59:80:63:57:3d:0a:7f:d6:fe:
                    69:12:b7:ee:62:70:b7:51:7c:77:7b:12:c2:12:10:
                    75:f7:c4:04:d8:03:71:b6:36:48:1c:8c:c9:19:9d:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3E:5B:FA:95:0E:E3:73:6D:64:04:51:42:7F:9B:BF:86:6E:6D:3D
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4e:55:42:d0:72:8a:7a:3e:1d:d2:7c:79:85:cc:2e:6c:05:
         b4:ef:4c:c8:da:14:c2:90:dd:c6:b1:0f:b8:e6:c5:3e:d5:e1:
         bd:f9:66:fd:d8:20:48:d5:9a:d4:49:ca:b2:f8:0d:49:af:38:
         d0:3d:da:38:0d:cc:21:ed:ea:64:e3:bf:60:a8:b6:56:d3:97:
         f1:9b:4a:2b:35:d9:20:66:a6:58:a2:c0:6f:0a:35:1e:c8:92:
         28:e7:4b:a2:18:30:13:8f:f5:3b:92:57:b3:40:fd:c8:96:07:
         79:cd:58:aa:c1:47:f2:32:79:5a:eb:34:ba:81:8a:97:95:21:
         09:82:3e:88:e9:22:ab:0b:ef:55:50:4e:69:76:4e:1d:72:c7:
         6c:54:a4:a2:9f:9f:85:84:2b:20:4e:12:43:d1:7a:e8:92:c3:
         a7:70:70:a8:34:f0:a7:5e:d5:66:80:9c:d7:de:b8:91:fa:11:
         54:9f:92:eb:a1:ca:85:6a:fe:f7:52:0e:92:3b:94:28:9c:c5:
         fb:5f:86:d0:5c:d7:23:33:21:19:22:b0:ec:06:00:ff:a5:13:
         8c:32:59:8e:dc:96:8d:3a:64:31:7b:41:48:9c:32:0c:1d:e4:
         13:60:f4:dc:4d:1c:12:fe:1f:4e:f7:e9:c2:47:68:a6:18:f8:
         ca:b5:4d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89QFjen3TwYJCfJQI/vNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDYwMTAyODNhODIwMmVlYWEzZmVmMzI1MzRlM2U5N2Uw
NDA3OWUwHhcNMjUwNDEzMDcwMTE2WhcNMjUwNDE0MDcwMTE2WjAzMTEwLwYDVQQD
Eyg0ZDNlNWJmYTk1MGVlMzczNmQ2NDA0NTE0MjdmOWJiZjg2NmU2ZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkfmM8b1XIyIM1hx0QgiM+1mgQhO
nLjuG1mFegfvC4pVHdV/Dk8K2NFFHOhZMYO37Fkh7Ir+jlJHrZ6kXwCIp8kXC0jG
AiQ/2Af11gjS7s86gXYebVtnrHI2P8T2l2NBpaZq5bDy65qaQCXa2IWaxpYLzonO
M87g7y8camSc1dZxTT86mx61mB8ieEKlSvLbrwN2RGeennELq1sPs4akghHaxW8J
VnCQiF1ytyP2p37i8bWzF6gAyO/oE0clBiACy9zQd4vusSJ78RBO/PfloA0JFpn5
OlJZgGNXPQp/1v5pErfuYnC3UXx3exLCEhB198QE2ANxtjZIHIzJGZ1X1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0+W/qVDuNzbWQEUUJ/m7+Gbm09MB8GA1UdIwQY
MBaAFLFGAQKDqCAu6qP+8yU04+l+BAeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWIt
YzAzMDdiMGY2MmRjLzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWItYzAzMDdiMGY2MmRj
LzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE5VQtBy
ino+HdJ8eYXMLmwFtO9MyNoUwpDdxrEPuObFPtXhvflm/dggSNWa1EnKsvgNSa84
0D3aOA3MIe3qZOO/YKi2VtOX8ZtKKzXZIGamWKLAbwo1HsiSKOdLohgwE4/1O5JX
s0D9yJYHec1YqsFH8jJ5Wus0uoGKl5UhCYI+iOkiqwvvVVBOaXZOHXLHbFSkop+f
hYQrIE4SQ9F66JLDp3BwqDTwp17VZoCc1964kfoRVJ+S66HKhWr+91IOkjuUKJzF
+1+G0FzXIzMhGSKw7AYA/6UTjDJZjtyWjTpkMXtBSJwyDB3kE2D03E0cEv4fTvfp
wkdophj4yrVNMg==
-----END CERTIFICATE-----