Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File:                     0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier:          aIlhifOeWBOQOKBRUECtjXEcqiLdfWhgnqc5uD3kROg=
Subject key identifier:   31:1B:57:53:7C:EF:D0:8B:DB:90:20:67:B8:56:A5:02:13:64:27:95
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer:       /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial:       01962E61B2D47070FACC3AB3A3C3ECDB22C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: La4YBLXSS+p2F8p11BQOyCbLV3oueEBazQyjOqwPT3Y=)
                          2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
                          3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
                          4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
                          5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b2:d4:70:70:fa:cc:3a:b3:a3:c3:ec:db:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=311b57537cefd08bdb902067b856a50213642795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:ed:39:84:4a:59:7e:89:54:93:f5:a3:52:
                    d7:5d:a5:9b:fa:c8:51:81:9f:97:b9:65:de:e1:cf:
                    05:47:20:ef:94:67:09:72:df:0b:a1:34:8c:0f:f7:
                    56:cc:53:f7:92:b8:00:74:e0:91:d1:c2:65:f1:6a:
                    02:92:20:ce:f9:2c:e9:6d:fa:4f:96:0a:89:db:48:
                    85:bf:8e:f2:9b:8f:e3:cc:b4:79:6d:4e:17:60:1a:
                    4d:88:db:bd:bb:4f:95:49:6f:fc:b5:62:af:ce:db:
                    3b:ef:fa:ca:90:f7:28:3c:40:bb:55:ae:cc:dc:ec:
                    f9:e0:7b:64:c0:5b:de:15:cc:82:e2:fb:07:a2:d9:
                    2e:9d:5f:13:40:de:5b:b0:cb:ad:6d:88:75:47:d1:
                    5c:d4:c7:63:77:76:26:5f:d2:e6:8d:ec:0b:bc:30:
                    e6:f0:a1:00:58:35:8f:f0:ad:7a:54:32:76:9f:10:
                    23:e7:e8:a5:eb:fd:d3:c6:45:e1:dd:55:b6:c3:7d:
                    a1:21:72:7b:40:69:e6:31:f3:1b:8d:2b:53:a5:61:
                    5c:ef:e3:42:14:50:69:2b:e3:02:a1:34:5c:b7:b0:
                    e4:e4:99:a1:18:92:9e:1e:03:03:c2:cb:00:2f:f0:
                    b2:aa:a8:1b:48:2e:fb:7c:65:51:7a:c2:0f:61:33:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:57:53:7C:EF:D0:8B:DB:90:20:67:B8:56:A5:02:13:64:27:95
            X509v3 Authority Key Identifier:
                keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:2f:a1:9c:97:05:78:08:b4:8a:a2:1e:4e:7c:e8:55:56:6d:
         f5:7b:29:2b:83:82:28:23:39:da:42:23:a1:13:ff:0b:28:a2:
         30:18:37:2c:0b:19:38:7b:46:5b:1f:e9:59:e6:fb:4d:e0:04:
         83:8e:ca:84:e7:1d:a2:3a:ef:24:53:00:ec:f2:2d:dd:41:25:
         7b:ed:06:c4:b6:7a:3d:6a:d5:5f:d7:2f:6e:92:b6:4a:5a:0f:
         28:8b:5d:43:b7:3d:96:39:1a:a7:34:d4:df:dd:ea:46:fa:1e:
         3f:4b:63:0b:90:3c:a1:05:df:35:73:a3:d7:7d:9b:c6:f2:f2:
         9b:8c:d4:00:74:19:f7:9c:7e:12:32:8d:70:75:2d:eb:95:64:
         af:06:35:34:ff:66:a5:86:26:43:d6:27:99:77:c6:81:d2:80:
         86:a5:68:6f:c4:18:65:a6:6e:c0:4e:40:8a:bd:b1:3b:fa:1c:
         5c:56:70:ee:42:34:cb:d4:48:5d:0b:4b:f6:46:ba:65:54:9e:
         ac:65:be:1d:97:01:06:56:22:7b:42:1f:5d:92:7e:08:d7:47:
         ed:ac:6a:2e:a8:a6:57:4e:29:fe:bf:1d:b9:fc:d1:60:f4:d3:
         9d:0a:d7:41:32:16:69:80:6e:1e:ad:b3:2b:6f:61:29:7a:3e:
         aa:1d:ff:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbLUcHD6zDqzo8Ps2yLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGY0ODAzZTU0YjA4NGE5OWNiN2JiMDQ0YmY3OTEzMjc1
OTRiNzMwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
EygzMTFiNTc1MzdjZWZkMDhiZGI5MDIwNjdiODU2YTUwMjEzNjQyNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yXtOYRKWX6JVJP1o1LXXaWb+shR
gZ+XuWXe4c8FRyDvlGcJct8LoTSMD/dWzFP3krgAdOCR0cJl8WoCkiDO+SzpbfpP
lgqJ20iFv47ym4/jzLR5bU4XYBpNiNu9u0+VSW/8tWKvzts77/rKkPcoPEC7Va7M
3Oz54HtkwFveFcyC4vsHotkunV8TQN5bsMutbYh1R9Fc1Mdjd3YmX9LmjewLvDDm
8KEAWDWP8K16VDJ2nxAj5+il6/3TxkXh3VW2w32hIXJ7QGnmMfMbjStTpWFc7+NC
FFBpK+MCoTRct7Dk5JmhGJKeHgMDwssAL/CyqqgbSC77fGVResIPYTMPDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEbV1N879CL25AgZ7hWpQITZCeVMB8GA1UdIwQY
MBaAFNHfSAPlSwhKmct7sES/eRMnWUtzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5Nzct
NDhmNWU4NzY3ZDAyLzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wZDVmNTMtOTY1My00N2ZiLWE5NzctNDhmNWU4NzY3ZDAy
LzEvMGQ5SUEtVkxDRXFaeTN1d1JMOTVFeWRaUzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyi+hnJcF
eAi0iqIeTnzoVVZt9XspK4OCKCM52kIjoRP/CyiiMBg3LAsZOHtGWx/pWeb7TeAE
g47KhOcdojrvJFMA7PIt3UEle+0GxLZ6PWrVX9cvbpK2SloPKItdQ7c9ljkapzTU
393qRvoeP0tjC5A8oQXfNXOj132bxvLym4zUAHQZ95x+EjKNcHUt65VkrwY1NP9m
pYYmQ9YnmXfGgdKAhqVob8QYZaZuwE5Air2xO/ocXFZw7kI0y9RIXQtL9ka6ZVSe
rGW+HZcBBlYie0IfXZJ+CNdH7axqLqimV04p/r8dufzRYPTTnQrXQTIWaYBuHq2z
K29hKXo+qh3/jQ==
-----END CERTIFICATE-----