Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File:                     O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier:          sRuM/rlWnuqeczXKHJVNsnVUrTSFa5r5SITAmcB1aGU=
Subject key identifier:   91:FF:C6:8A:57:A6:80:F0:6D:A9:68:07:76:5D:DA:8C:57:C0:99:B1
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer:       /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial:       01962F3D65E62D901EFCB946041534081F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: dpFaKBcmvzahOYrJzJg5pRAJJbPSKO/kFt/UcvBGNrs=)
                          2: jMpUEgHSZf2qOszwtc711nMPkbs.roa (hash: KVxroJGfZ6IooHrXhz1nFqpU1SJ2R+pcxgHHc+ctJ6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:65:e6:2d:90:1e:fc:b9:46:04:15:34:08:1f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=91ffc68a57a680f06da96807765dda8c57c099b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:8b:10:5c:f6:0b:c1:10:af:30:8d:c5:29:
                    46:92:79:7e:4d:d4:d8:c8:42:10:14:5b:3a:43:88:
                    79:87:d5:0a:4f:bc:c7:33:90:fb:e8:b6:f9:c8:7d:
                    a9:f9:53:ca:62:b2:a9:06:9a:8b:e8:59:88:27:14:
                    a1:ce:9e:dc:ee:f2:9b:66:b9:f7:fe:5d:8d:66:e7:
                    fc:57:41:81:27:1c:2b:e2:af:5c:0f:53:b3:9d:f2:
                    2c:dc:33:a2:f9:95:c3:40:40:11:18:74:3a:68:f6:
                    bb:fe:9a:7b:f9:e1:88:d9:22:57:3b:93:87:60:47:
                    17:0d:20:da:79:6d:dd:30:ed:0e:f9:39:5f:c4:75:
                    f9:1d:b8:a8:0d:a6:26:e8:4f:36:3a:e5:2e:80:86:
                    d7:86:4a:6a:43:0c:2a:f4:5d:c8:f8:a1:cb:da:5c:
                    2f:f5:cd:35:ad:d4:b7:e8:c2:67:f8:7c:d7:dc:6a:
                    5f:de:c9:95:e0:d2:0d:90:b6:e3:8e:24:1f:39:f4:
                    55:cb:5f:61:a7:b2:04:96:2a:a5:c9:03:34:f3:3f:
                    7f:57:6f:8a:fd:69:08:fe:27:fe:7d:4e:f4:3e:5f:
                    4c:a8:61:b8:bf:d6:31:8d:35:7c:a7:4c:da:9d:cc:
                    77:0d:41:68:73:4c:14:33:85:c5:8e:95:b8:b8:aa:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FF:C6:8A:57:A6:80:F0:6D:A9:68:07:76:5D:DA:8C:57:C0:99:B1
            X509v3 Authority Key Identifier:
                keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:b9:25:76:86:17:bd:a0:f5:64:8c:a7:ce:e0:4c:8f:3d:
         43:72:b7:86:e4:af:fb:79:12:fd:38:16:ed:db:10:a0:23:46:
         89:12:3d:49:f1:9e:ba:b5:4f:d0:d1:fc:49:b4:06:6f:c1:a6:
         56:3f:e5:23:ed:f3:70:5b:e8:ed:db:e2:c6:93:e5:21:c3:d7:
         c1:91:70:e1:88:3b:ff:f9:55:73:57:15:4f:df:f6:6d:bf:f0:
         52:6c:48:02:d0:86:8a:e1:84:70:2d:c3:8c:7c:dc:7a:da:80:
         a1:a8:23:ee:d5:98:41:54:f8:8f:b3:35:66:e7:13:5a:83:30:
         ff:9f:74:6a:0d:89:bd:af:3f:5a:ab:b1:2c:9a:93:6c:6a:ec:
         f4:51:64:ce:ba:89:d2:89:0c:27:94:e6:51:d0:ae:09:3f:0b:
         cb:17:ef:7b:87:d7:35:ff:4a:c1:f0:13:18:97:ff:af:4c:cd:
         8f:6d:4a:0d:a6:53:11:f3:82:ad:3f:d1:d5:78:d2:8c:e3:91:
         2a:d2:02:9c:b7:25:6d:39:eb:04:1b:7d:8d:95:ae:70:df:ed:
         17:67:83:5a:bc:40:19:82:83:cd:33:5d:aa:60:0c:ed:99:ad:
         dc:56:27:8a:59:6b:77:69:34:bf:3d:4b:62:d5:7f:97:07:8c:
         e9:74:b8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWXmLZAe/LlGBBU0CB9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5
YjIzOGYwHhcNMjUwNDEzMTMwMTE0WhcNMjUwNDE0MTMwMTE0WjAzMTEwLwYDVQQD
Eyg5MWZmYzY4YTU3YTY4MGYwNmRhOTY4MDc3NjVkZGE4YzU3YzA5OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvneLEFz2C8EQrzCNxSlGknl+TdTY
yEIQFFs6Q4h5h9UKT7zHM5D76Lb5yH2p+VPKYrKpBpqL6FmIJxShzp7c7vKbZrn3
/l2NZuf8V0GBJxwr4q9cD1OznfIs3DOi+ZXDQEARGHQ6aPa7/pp7+eGI2SJXO5OH
YEcXDSDaeW3dMO0O+TlfxHX5HbioDaYm6E82OuUugIbXhkpqQwwq9F3I+KHL2lwv
9c01rdS36MJn+HzX3Gpf3smV4NINkLbjjiQfOfRVy19hp7IEliqlyQM08z9/V2+K
/WkI/if+fU70Pl9MqGG4v9YxjTV8p0zancx3DUFoc0wUM4XFjpW4uKqX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH/xopXpoDwbaloB3Zd2oxXwJmxMB8GA1UdIwQY
MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt
MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl
LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1W5JXaG
F72g9WSMp87gTI89Q3K3huSv+3kS/TgW7dsQoCNGiRI9SfGeurVP0NH8SbQGb8Gm
Vj/lI+3zcFvo7dvixpPlIcPXwZFw4Yg7//lVc1cVT9/2bb/wUmxIAtCGiuGEcC3D
jHzcetqAoagj7tWYQVT4j7M1ZucTWoMw/590ag2Jva8/WquxLJqTbGrs9FFkzrqJ
0okMJ5TmUdCuCT8Lyxfve4fXNf9KwfATGJf/r0zNj21KDaZTEfOCrT/R1XjSjOOR
KtICnLclbTnrBBt9jZWucN/tF2eDWrxAGYKDzTNdqmAM7Zmt3FYnillrd2k0vz1L
YtV/lweM6XS4Tw==
-----END CERTIFICATE-----