Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
File:                     lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft (raw, json)
Hash identifier:          Yt5GpoRsN2BXhSM6eISC9K3Lai99dJBYecZWl7Yv+M4=
Subject key identifier:   88:02:E3:C4:8F:71:86:11:89:11:25:87:30:6D:51:71:B0:BA:E9:D6
Authority key identifier: 94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Certificate issuer:       /CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Certificate serial:       01962ECF730FBD61ABB769772DD904F16B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 7gS8nFstYvHiaaGc7IpNtagOuCY.roa (hash: 4SiUHytZpEAnR4OzG8jjEPYSBs2q4THE0R+2ggxYfSc=)
                          2: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl (hash: jwkdf+jzBEHegrpyuvZn3lByzYxPTxjP0sIqSmxAdyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:0f:bd:61:ab:b7:69:77:2d:d9:04:f1:6b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=8802e3c48f71861189112587306d5171b0bae9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:9c:2e:15:3c:29:1b:ec:44:46:06:db:f0:
                    fe:fd:16:4e:8d:fb:cd:f0:a4:f6:7a:65:d8:0c:10:
                    10:a2:ff:81:cb:45:b5:e4:39:5b:21:9e:09:0d:e3:
                    6f:e8:a6:c1:51:58:ee:d5:3d:15:c3:bf:78:33:06:
                    63:44:ae:ef:67:ff:8c:d5:33:1f:db:8a:70:5c:95:
                    da:71:6b:de:d1:b4:bb:27:53:be:e6:f3:61:8d:f5:
                    c9:1e:63:35:83:cd:00:92:79:bd:79:6d:4e:b1:45:
                    bc:f4:af:1d:7c:4a:74:5c:f7:6d:72:bb:d6:6c:68:
                    81:00:3b:5e:85:8d:29:1b:af:16:7f:07:b4:9e:c2:
                    aa:9d:39:20:35:2a:7a:56:2d:fc:b2:70:0b:09:a9:
                    7f:30:ee:08:3a:96:c0:a1:e9:ae:4c:69:45:e2:fe:
                    2c:6a:c6:d0:f5:29:84:1c:5e:b9:69:d8:68:39:8c:
                    4a:72:d2:c0:73:bb:7f:dc:db:9e:b9:ef:2d:8b:78:
                    be:e7:7f:de:5e:4d:fa:e6:0e:d6:fa:8c:3a:0a:9b:
                    37:40:a2:b4:93:36:66:7f:db:45:ea:8a:44:eb:f0:
                    a6:db:13:f5:11:eb:36:0a:a9:ed:ec:49:55:d7:bf:
                    8e:bc:87:66:a2:7e:3a:b0:ad:31:35:4e:63:4a:9a:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:E3:C4:8F:71:86:11:89:11:25:87:30:6D:51:71:B0:BA:E9:D6
            X509v3 Authority Key Identifier:
                keyid:94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:89:86:f1:8d:ac:42:83:79:cb:64:0e:a2:6c:ca:f4:26:
         83:5b:30:87:76:e8:67:a9:b0:36:80:01:71:ae:8c:bf:08:b3:
         97:24:35:82:e0:bc:df:e1:4a:b0:a9:c2:92:90:78:9b:41:d9:
         a0:56:e5:b8:a4:b6:68:63:01:a7:1c:47:58:33:51:47:88:00:
         98:38:5f:dc:50:10:87:50:84:a4:0a:44:c2:37:de:1d:f4:84:
         19:56:b1:17:f5:dc:fb:69:7b:d3:ea:21:50:0f:55:be:b8:a0:
         58:a8:3f:d3:52:ad:1f:9a:f7:99:e1:06:3d:b1:69:35:49:e9:
         c2:0d:f3:fc:1a:be:a7:36:94:e6:10:1b:d2:c8:71:d5:0b:2e:
         46:77:a8:b8:eb:d1:e8:f5:90:fd:a8:9b:9f:fe:2d:10:47:53:
         ab:6e:3e:53:e7:f9:16:b3:8e:0f:38:ce:5c:15:b4:52:a7:ff:
         bc:38:e9:18:46:ae:f3:a8:2a:9a:5b:2e:67:f0:5f:48:08:fd:
         d1:ee:36:e6:2b:a0:8c:53:d6:df:3e:e2:43:90:ba:d2:8c:8a:
         3e:84:38:a2:9e:29:aa:3e:4d:b5:85:5c:ae:e6:44:1d:3e:b8:
         b7:2e:08:46:ba:94:3c:fd:eb:5e:3e:8a:0f:4b:28:25:c1:5c:
         06:63:14:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3MPvWGrt2l3LdkE8WtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2U4MjdmNjZkNWIzOTU1ZmU2ZDczYmEwZjE1ZmJhYWM4
YjUxNTAwHhcNMjUwNDEzMTEwMTA5WhcNMjUwNDE0MTEwMTA5WjAzMTEwLwYDVQQD
Eyg4ODAyZTNjNDhmNzE4NjExODkxMTI1ODczMDZkNTE3MWIwYmFlOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuycLhU8KRvsREYG2/D+/RZOjfvN
8KT2emXYDBAQov+By0W15DlbIZ4JDeNv6KbBUVju1T0Vw794MwZjRK7vZ/+M1TMf
24pwXJXacWve0bS7J1O+5vNhjfXJHmM1g80Aknm9eW1OsUW89K8dfEp0XPdtcrvW
bGiBADtehY0pG68Wfwe0nsKqnTkgNSp6Vi38snALCal/MO4IOpbAoemuTGlF4v4s
asbQ9SmEHF65adhoOYxKctLAc7t/3Nueue8ti3i+53/eXk365g7W+ow6Cps3QKK0
kzZmf9tF6opE6/Cm2xP1Ees2Cqnt7ElV17+OvIdmon46sK0xNU5jSprV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgC48SPcYYRiRElhzBtUXGwuunWMB8GA1UdIwQY
MBaAFJQ+gn9m1bOVX+bXO6DxX7qsi1FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEQ2Q2YyYlZzNVZmNXRjN29QRmZ1cXlMVVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wOGI1OWItNGZkMy00NTY5LTliNTYt
MWUwY2M1ZTE1OGZhLzEvbEQ2Q2YyYlZzNVZmNXRjN29QRmZ1cXlMVVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wOGI1OWItNGZkMy00NTY5LTliNTYtMWUwY2M1ZTE1OGZh
LzEvbEQ2Q2YyYlZzNVZmNXRjN29QRmZ1cXlMVVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxSJhvGN
rEKDectkDqJsyvQmg1swh3boZ6mwNoABca6MvwizlyQ1guC83+FKsKnCkpB4m0HZ
oFbluKS2aGMBpxxHWDNRR4gAmDhf3FAQh1CEpApEwjfeHfSEGVaxF/Xc+2l70+oh
UA9VvrigWKg/01KtH5r3meEGPbFpNUnpwg3z/Bq+pzaU5hAb0shx1QsuRneouOvR
6PWQ/aibn/4tEEdTq24+U+f5FrOODzjOXBW0Uqf/vDjpGEau86gqmlsuZ/BfSAj9
0e425iugjFPW3z7iQ5C60oyKPoQ4op4pqj5NtYVcruZEHT64ty4IRrqUPP3rXj6K
D0soJcFcBmMU+w==
-----END CERTIFICATE-----