Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File:                     po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier:          IDH/SiMKrdWGSN/DZm6EvN1V+wMhsfmPs/6l10g2gyg=
Subject key identifier:   1A:11:2B:3C:39:0C:C7:B6:97:99:0C:E2:C2:69:12:DA:2D:D2:49:0D
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer:       /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial:       01962FAB1BE6F76C87E90CFAA98B7F27F9D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
                          2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
                          3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: /PYmWzbvJawnsgcYrRQ2QOOX3oaHC1PAecKNNy2LhGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1b:e6:f7:6c:87:e9:0c:fa:a9:8b:7f:27:f9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=1a112b3c390cc7b697990ce2c26912da2dd2490d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:29:a9:1e:95:13:f6:77:34:6c:b3:74:4f:
                    a8:37:4f:56:c1:0a:b5:18:97:d9:26:58:17:d6:7b:
                    d3:bf:aa:43:b9:82:fe:cc:7c:c4:bb:b0:9c:84:e2:
                    19:07:5e:e8:b2:95:ba:7b:df:2c:32:e4:e1:e8:f6:
                    69:02:ea:b8:d2:01:80:85:89:a6:b0:c0:ca:db:82:
                    64:90:a8:3d:9b:87:a4:ab:e8:bf:32:6b:aa:da:0e:
                    68:c9:e9:3e:c9:04:05:5e:c1:66:4b:89:62:03:10:
                    56:6c:42:bf:e9:c6:ed:ca:cf:23:15:80:41:8b:2e:
                    6e:37:f4:00:d8:46:4a:2d:6a:2f:75:b8:f1:18:64:
                    84:93:a5:52:46:01:3e:b1:aa:83:f9:2d:92:b5:aa:
                    54:84:a4:02:bd:2b:e8:59:f7:5e:c7:f7:04:f8:2b:
                    9e:a6:be:35:01:c2:98:0f:29:19:ab:bc:8a:23:e4:
                    64:e0:01:5b:6c:50:ed:33:c3:fb:2f:e9:9d:83:e7:
                    26:76:49:0e:e4:9e:25:0d:3a:4f:9e:7b:e5:73:83:
                    44:50:83:9c:b3:f5:b2:a2:ba:9e:bd:b6:c0:61:81:
                    a5:cd:94:ab:0a:c4:6f:10:8c:4f:60:37:86:da:01:
                    e9:0d:d4:e7:9e:08:7f:92:8a:84:7d:53:80:ab:d6:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:2B:3C:39:0C:C7:B6:97:99:0C:E2:C2:69:12:DA:2D:D2:49:0D
            X509v3 Authority Key Identifier:
                keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:ce:f5:d3:ba:f9:90:15:bb:d5:22:bd:89:ed:e5:91:cf:
         2c:a5:b4:96:61:16:22:e9:41:ce:32:03:b1:f2:89:b2:53:bc:
         45:9e:a9:39:e1:94:8c:80:3e:b0:a8:46:18:0f:39:c4:89:1b:
         a7:3b:da:a2:d6:da:e8:08:f8:17:a8:a0:9b:a2:5d:0f:36:cb:
         3f:cc:ea:e8:05:3a:b5:d6:3a:b2:49:27:7d:2f:19:a2:84:0d:
         3c:f0:31:4b:dc:b3:43:a2:42:ca:ab:80:33:2f:40:59:88:af:
         fd:fe:84:33:c2:c9:f3:95:e0:10:8d:9d:61:de:ad:3f:18:e6:
         21:40:ab:4e:8c:6b:7e:e0:28:cc:37:01:07:c1:86:2b:e6:f5:
         e6:b2:7a:41:31:99:be:a5:a1:c3:21:a0:9c:04:95:e4:17:51:
         f8:c7:b2:36:a3:4d:57:19:7c:a9:e2:91:29:47:3e:7c:94:12:
         c6:e4:77:fc:2d:ab:f7:a2:d6:dd:fe:54:31:e9:73:dd:bb:d7:
         b6:fb:b0:17:8b:99:ef:b2:87:91:71:d6:cc:b6:b3:96:92:fa:
         9b:c1:bf:66:86:67:c6:1a:c6:29:e3:5e:29:ce:0a:9f:22:50:
         ab:b4:c4:35:77:85:a0:e5:1a:cd:25:5d:fc:e0:e4:3e:db:03:
         21:9f:f4:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxvm92yH6Qz6qYt/J/nXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1
ODdlY2MwHhcNMjUwNDEzMTUwMTA1WhcNMjUwNDE0MTUwMTA1WjAzMTEwLwYDVQQD
EygxYTExMmIzYzM5MGNjN2I2OTc5OTBjZTJjMjY5MTJkYTJkZDI0OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1ApqR6VE/Z3NGyzdE+oN09WwQq1
GJfZJlgX1nvTv6pDuYL+zHzEu7CchOIZB17ospW6e98sMuTh6PZpAuq40gGAhYmm
sMDK24JkkKg9m4ekq+i/Mmuq2g5oyek+yQQFXsFmS4liAxBWbEK/6cbtys8jFYBB
iy5uN/QA2EZKLWovdbjxGGSEk6VSRgE+saqD+S2StapUhKQCvSvoWfdex/cE+Cue
pr41AcKYDykZq7yKI+Rk4AFbbFDtM8P7L+mdg+cmdkkO5J4lDTpPnnvlc4NEUIOc
s/WyorqevbbAYYGlzZSrCsRvEIxPYDeG2gHpDdTnngh/koqEfVOAq9YunQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoRKzw5DMe2l5kM4sJpEtot0kkNMB8GA1UdIwQY
MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt
MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3
LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2nO9dO6
+ZAVu9UivYnt5ZHPLKW0lmEWIulBzjIDsfKJslO8RZ6pOeGUjIA+sKhGGA85xIkb
pzvaotba6Aj4F6igm6JdDzbLP8zq6AU6tdY6skknfS8ZooQNPPAxS9yzQ6JCyquA
My9AWYiv/f6EM8LJ85XgEI2dYd6tPxjmIUCrToxrfuAozDcBB8GGK+b15rJ6QTGZ
vqWhwyGgnASV5BdR+MeyNqNNVxl8qeKRKUc+fJQSxuR3/C2r96LW3f5UMelz3bvX
tvuwF4uZ77KHkXHWzLazlpL6m8G/ZoZnxhrGKeNeKc4KnyJQq7TENXeFoOUazSVd
/ODkPtsDIZ/0tg==
-----END CERTIFICATE-----