Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File:                     3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier:          dmfY9xn3hmGoZ+hVM+bNgcI4rho4SZkYwHYUfuo//uc=
Subject key identifier:   A5:13:0C:05:43:F8:D1:4C:B8:79:8F:21:4C:37:31:9F:31:4B:E2:F5
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer:       /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial:       01962E2AC4B3F4ED81658EBD8105EBEDE04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number:          0CCF
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: u7MpfGWWuk7kvlDafzzLVwZimDYUKbVvYml3U+ZNgmE=)
                          2: D7PGGduIwX7v-ShQSUz8OVV9C1w.roa (hash: 7ckgBrpQ8LkiNGwk/n+SRdsap+chU5QW5iJNm8qHanE=)
                          3: IrsYdpqcOnQ3SpbKBx6nFfzcVrQ.roa (hash: AIbJqohxVTkRlwXht+/E+fE7aYFk0d/YsXjveY/e/+A=)
                          4: QV_KHSRk0F1p49xmdU8Cjw9F95k.roa (hash: bXFoeKrbp3I/mSHJx/SNzgxE/ZuKpJd2GAhpkwSz+z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c4:b3:f4:ed:81:65:8e:bd:81:05:eb:ed:e0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=a5130c0543f8d14cb8798f214c37319f314be2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:3a:0e:1b:f5:31:2a:d1:78:43:03:eb:5e:
                    58:11:ea:77:a2:92:a5:fe:15:b5:0b:c6:05:2c:a9:
                    ca:a1:c3:55:36:d0:67:3c:16:d0:1d:23:54:38:41:
                    5d:a8:73:00:0f:e0:74:eb:4c:f1:3d:30:78:14:6f:
                    e7:85:65:f2:29:3d:e2:a6:b0:1f:fb:2c:f4:e1:c9:
                    37:b4:42:58:0d:1b:db:a9:91:fc:a6:a9:b8:c8:06:
                    8f:c5:b8:25:5a:1d:05:fb:9e:04:3d:9d:3f:45:a3:
                    d2:d7:85:41:c8:55:52:5b:77:ef:f2:ec:b7:66:44:
                    fa:d0:14:38:d9:58:10:99:e3:e6:04:32:72:11:2e:
                    38:89:ea:c4:56:8e:ce:83:29:6a:c5:b8:3e:2a:dd:
                    a4:60:5d:12:c8:68:63:46:fa:c2:90:71:b3:0c:fe:
                    b8:22:d4:3b:60:f4:51:6d:f8:66:91:f0:02:f2:03:
                    e8:72:40:0a:f9:d2:fa:0a:8b:79:12:04:48:c7:c5:
                    e9:d7:ae:5d:af:ab:60:9e:51:e3:7c:4d:1b:0a:d8:
                    a4:65:83:45:1b:57:eb:20:18:a7:54:c4:e0:6e:d5:
                    14:b5:2e:14:90:4b:a8:41:d9:ea:e0:75:e4:e3:ec:
                    17:da:62:d7:ba:fd:5e:a6:4c:0d:cc:e7:de:0c:b1:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:13:0C:05:43:F8:D1:4C:B8:79:8F:21:4C:37:31:9F:31:4B:E2:F5
            X509v3 Authority Key Identifier:
                keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:dd:f8:28:14:0b:a1:20:ce:d8:b1:02:24:50:44:a2:c1:
         ff:07:45:c2:d5:47:52:72:1c:9a:70:91:89:88:0b:cf:6f:66:
         ad:f2:9b:64:c5:a2:ef:05:7f:67:4a:5a:81:6e:44:96:62:cd:
         91:36:9b:65:f7:43:58:6c:2b:89:dd:e1:18:3a:64:c6:43:9d:
         42:02:cf:bc:3d:be:cb:7b:8d:07:7b:81:5f:5a:7b:65:1a:d1:
         8d:f0:37:43:95:3d:40:3f:98:f0:48:66:73:bc:fb:a5:2c:9c:
         e1:31:f8:0a:73:69:ed:b1:66:b5:a0:c0:7b:17:c6:9c:c3:ea:
         2d:f8:6e:74:06:34:47:37:fc:26:c6:ff:e0:4b:10:48:20:2c:
         f5:27:df:c4:b5:cb:e2:4c:9e:90:ec:43:11:c9:34:c5:db:44:
         82:65:36:dd:0d:6b:e5:50:90:dc:e4:f5:b3:45:a4:2d:92:0c:
         89:5c:03:44:69:44:33:db:4b:4a:b4:80:ff:cd:48:b9:ea:5a:
         07:67:7b:a0:04:56:6d:67:80:a5:fd:81:1d:e5:56:0d:30:2f:
         7f:12:cc:40:b3:87:0e:0f:6d:9d:41:05:6f:72:fc:67:7c:7e:
         22:fa:5f:d0:32:be:b0:28:89:01:6c:22:dc:d7:66:96:6f:d1:
         e2:72:a4:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsSz9O2BZY69gQXr7eBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjUwNDEzMDgwMTE2WhcNMjUwNDE0MDgwMTE2WjAzMTEwLwYDVQQD
EyhhNTEzMGMwNTQzZjhkMTRjYjg3OThmMjE0YzM3MzE5ZjMxNGJlMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf06Dhv1MSrReEMD615YEep3opKl
/hW1C8YFLKnKocNVNtBnPBbQHSNUOEFdqHMAD+B060zxPTB4FG/nhWXyKT3iprAf
+yz04ck3tEJYDRvbqZH8pqm4yAaPxbglWh0F+54EPZ0/RaPS14VByFVSW3fv8uy3
ZkT60BQ42VgQmePmBDJyES44ierEVo7Ogylqxbg+Kt2kYF0SyGhjRvrCkHGzDP64
ItQ7YPRRbfhmkfAC8gPockAK+dL6Cot5EgRIx8Xp165dr6tgnlHjfE0bCtikZYNF
G1frIBinVMTgbtUUtS4UkEuoQdnq4HXk4+wX2mLXuv1epkwNzOfeDLGAqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUTDAVD+NFMuHmPIUw3MZ8xS+L1MB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJk/d+CgU
C6EgztixAiRQRKLB/wdFwtVHUnIcmnCRiYgLz29mrfKbZMWi7wV/Z0pagW5ElmLN
kTabZfdDWGwrid3hGDpkxkOdQgLPvD2+y3uNB3uBX1p7ZRrRjfA3Q5U9QD+Y8Ehm
c7z7pSyc4TH4CnNp7bFmtaDAexfGnMPqLfhudAY0Rzf8Jsb/4EsQSCAs9SffxLXL
4kyekOxDEck0xdtEgmU23Q1r5VCQ3OT1s0WkLZIMiVwDRGlEM9tLSrSA/81Iuepa
B2d7oARWbWeApf2BHeVWDTAvfxLMQLOHDg9tnUEFb3L8Z3x+Ivpf0DK+sCiJAWwi
3Ndmlm/R4nKkVg==
-----END CERTIFICATE-----