Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File:                     gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier:          YiyNf0FVNeciU+f/Nmtx/aPNdLlHf03LYpTEIqAf5vg=
Subject key identifier:   79:2E:C0:E0:2D:1F:B6:F3:EE:A0:57:87:D9:20:2D:B2:43:F7:23:A0
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer:       /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial:       01962E99D0BB87735823D7B6B5BE60B37A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 10:02:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:34 +0000
Files and hashes:         1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
                          2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: CLP8X7KKsEBQbeklSdnMz24ua9WWrGHYfo131QUNOFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:d0:bb:87:73:58:23:d7:b6:b5:be:60:b3:7a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
        Validity
            Not Before: Apr 13 10:02:34 2025 GMT
            Not After : Apr 14 10:02:34 2025 GMT
        Subject: CN=792ec0e02d1fb6f3eea05787d9202db243f723a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:33:57:cf:9e:26:22:15:06:b7:d4:7c:47:
                    e4:b1:33:ba:8c:a5:03:47:97:15:60:09:78:25:a2:
                    81:69:fb:98:d6:ec:c8:bc:f5:ca:b7:f9:9e:b8:38:
                    f8:af:7a:44:c9:ee:3a:e0:83:90:04:a5:23:bd:5f:
                    25:cd:88:07:2c:45:48:53:9d:d8:b1:29:fb:2e:9b:
                    c9:63:54:06:3b:df:c3:0b:28:71:e0:52:f0:89:a2:
                    79:46:6d:2a:cd:51:54:68:09:22:31:ef:41:a7:87:
                    ca:4a:65:d4:23:78:d1:f1:01:fd:75:b8:68:71:07:
                    82:a7:4c:9a:ef:ac:07:2f:c2:55:71:08:a1:c5:d9:
                    d1:d9:cd:11:45:dc:6a:85:d7:06:6f:8c:b8:fa:a4:
                    48:d2:ac:7f:87:85:03:76:a3:38:de:bc:c7:da:b0:
                    4b:43:17:e6:61:23:ca:11:21:9e:4a:e5:31:be:dc:
                    a6:a4:0c:0a:0d:a8:91:4b:1b:22:17:3e:57:31:20:
                    91:96:1b:bf:9f:e7:a5:99:de:1f:ca:96:ac:bd:f9:
                    2a:81:ed:47:44:2d:84:82:f0:59:c4:a9:6d:cb:98:
                    fb:33:c5:57:ba:ba:64:6b:bd:bc:b5:b4:6f:df:66:
                    4d:e1:ef:42:5f:79:fc:74:3c:db:39:a5:22:0a:98:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:C0:E0:2D:1F:B6:F3:EE:A0:57:87:D9:20:2D:B2:43:F7:23:A0
            X509v3 Authority Key Identifier:
                keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:c1:25:fe:79:3b:aa:13:b3:35:0d:2b:32:75:e3:b5:40:
         7e:ec:6f:b7:4b:34:65:2d:54:bd:c6:91:38:02:51:ea:df:04:
         f0:ce:ba:0e:4d:23:f9:f1:0c:d4:b0:72:9a:65:01:f4:bc:aa:
         46:11:ed:15:bc:93:db:fa:37:b8:25:63:28:f2:e1:9b:d1:e3:
         ea:36:ae:82:47:21:58:e5:bb:77:51:2d:71:ce:f7:4f:68:d0:
         9c:46:f8:49:c2:62:59:39:21:22:a7:fc:1d:a5:ca:f4:9e:0b:
         cb:bf:46:7c:15:53:0a:2a:db:a0:1b:fa:73:45:6c:fb:ad:a9:
         f3:7e:b7:32:81:e5:84:1f:91:db:5c:a5:5d:01:8e:d3:cd:71:
         f0:74:20:8a:76:54:42:11:14:41:f2:b3:38:b2:4d:62:f4:a3:
         21:ac:c0:c7:1b:7b:c8:c3:84:e3:8c:ed:d1:9c:55:d3:8f:03:
         2d:85:94:e7:1a:20:64:34:5c:10:39:c3:6c:4c:9b:f8:80:9a:
         72:b0:5a:f6:6e:82:4a:bb:1e:b8:3a:21:02:9b:61:82:37:1a:
         cd:92:dd:74:88:de:97:62:d7:63:04:72:01:8d:39:b2:12:76:
         52:c5:a0:b3:c2:45:17:64:16:07:a7:5d:b8:2e:9a:97:11:72:
         89:d9:70:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumdC7h3NYI9e2tb5gs3pIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTg4N2Y0NWFiYmMwODFhYTQ2OWE2NWMxNzk4ZGU2MTEw
ZDljODkwHhcNMjUwNDEzMTAwMjM0WhcNMjUwNDE0MTAwMjM0WjAzMTEwLwYDVQQD
Eyg3OTJlYzBlMDJkMWZiNmYzZWVhMDU3ODdkOTIwMmRiMjQzZjcyM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNEzV8+eJiIVBrfUfEfksTO6jKUD
R5cVYAl4JaKBafuY1uzIvPXKt/meuDj4r3pEye464IOQBKUjvV8lzYgHLEVIU53Y
sSn7LpvJY1QGO9/DCyhx4FLwiaJ5Rm0qzVFUaAkiMe9Bp4fKSmXUI3jR8QH9dbho
cQeCp0ya76wHL8JVcQihxdnR2c0RRdxqhdcGb4y4+qRI0qx/h4UDdqM43rzH2rBL
QxfmYSPKESGeSuUxvtympAwKDaiRSxsiFz5XMSCRlhu/n+elmd4fypasvfkqge1H
RC2EgvBZxKlty5j7M8VXurpka728tbRv32ZN4e9CX3n8dDzbOaUiCphdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkuwOAtH7bz7qBXh9kgLbJD9yOgMB8GA1UdIwQY
MBaAFIFYh/Rau8CBqkaaZcF5jeYRDZyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjIt
MzE4YjBlOTk2YWQxLzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjItMzE4YjBlOTk2YWQx
LzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsHBJf55
O6oTszUNKzJ147VAfuxvt0s0ZS1UvcaROAJR6t8E8M66Dk0j+fEM1LBymmUB9Lyq
RhHtFbyT2/o3uCVjKPLhm9Hj6jaugkchWOW7d1Etcc73T2jQnEb4ScJiWTkhIqf8
HaXK9J4Ly79GfBVTCirboBv6c0Vs+62p8363MoHlhB+R21ylXQGO081x8HQginZU
QhEUQfKzOLJNYvSjIazAxxt7yMOE44zt0ZxV048DLYWU5xogZDRcEDnDbEyb+ICa
crBa9m6CSrseuDohApthgjcazZLddIjel2LXYwRyAY05shJ2UsWgs8JFF2QWB6dd
uC6alxFyidlwXg==
-----END CERTIFICATE-----