Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File:                     3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier:          flEGZyriaZhldFzMv+GO0L3XzWp4Wm7DtGB056Tb7x8=
Subject key identifier:   64:F0:6F:CF:B0:68:5B:84:1B:C2:04:28:84:D0:3F:D8:51:D7:B3:B1
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer:       /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial:       01962FAB6CE7258C234F18CE4DA72C8AD7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: XG/DDrUTOJ+8BZZGC6AfcFSH7zujLhoKRy/B/EHDsZQ=)
                          2: 6JZopMJN7uTSjk8RLqAqQqiOTv8.roa (hash: i0CLCf229jC92V+lcugJs5cHzmKb/QwzzortpUgSlE0=)
                          3: C_l7gY4HKMAH6m-SKmgQfr13Qes.roa (hash: pRZ/nLpDPpbsV4pq3dfe7vuh4pYoUDOFa7B5tX5SH6o=)
                          4: F28FkCdyuci3Fria3smj-aR0Mo8.roa (hash: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=)
                          5: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (hash: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=)
                          6: J6fnUwtuy6KkAVjKhE44GNNzN8M.roa (hash: nJgWO4VkQ+dgAVkCE/fAmTK8VpG4vrJ+GVnehbPgZ8E=)
                          7: KwTls30WYcznTSabSq35vBeXpj0.roa (hash: X/ekOhBXSP8fVDHGwbrzlLZCwxwJt0Lb7wF+ki+I/bA=)
                          8: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (hash: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=)
                          9: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (hash: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6c:e7:25:8c:23:4f:18:ce:4d:a7:2c:8a:d7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=64f06fcfb0685b841bc2042884d03fd851d7b3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:2d:85:2e:f4:80:f3:68:c9:d7:57:54:4c:
                    f5:eb:71:76:74:c1:74:84:6a:57:d7:3a:39:d9:14:
                    bc:d4:c6:3c:7a:ad:ca:8d:de:0e:ff:a3:5b:57:25:
                    b4:be:c5:d0:5a:93:c8:fa:86:71:a4:d7:fd:1a:ec:
                    7b:a8:3d:30:b7:76:95:c1:04:ae:ae:bb:d0:29:e6:
                    20:73:d0:f3:0b:9a:7a:71:be:10:ea:c6:06:76:64:
                    8e:14:45:74:d2:c6:00:2b:3b:69:f6:a1:3d:0d:86:
                    b2:06:ac:b9:07:7e:b6:0c:b2:70:36:5a:5e:d1:5a:
                    7d:53:9a:b8:8d:b2:8a:11:18:46:ad:f8:ea:2d:3f:
                    6c:d5:b9:ed:df:b5:74:a9:c4:62:0d:5d:40:99:47:
                    84:14:7f:d4:56:88:6f:04:e6:24:f5:39:01:85:2c:
                    08:46:b3:e0:07:d7:59:68:5a:08:34:ce:76:4f:85:
                    2c:7f:2d:07:4e:1b:9d:5e:b2:a4:91:ed:5f:f1:d0:
                    17:0f:72:78:98:bc:3a:dd:e7:bf:e3:6d:09:35:2b:
                    d4:41:d8:db:83:e3:71:e8:ff:c8:ae:58:8d:ec:a9:
                    f3:e0:3c:4c:f0:af:98:c1:85:2b:96:63:43:93:80:
                    5f:40:1f:e1:6a:c5:f5:8a:34:41:df:5a:61:d1:71:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F0:6F:CF:B0:68:5B:84:1B:C2:04:28:84:D0:3F:D8:51:D7:B3:B1
            X509v3 Authority Key Identifier:
                keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:60:0e:fa:bc:43:1e:38:c0:48:5d:78:7e:ce:8a:96:aa:1d:
         79:ab:70:fd:f6:35:24:f5:47:f1:b0:5c:ad:c1:b5:8a:8a:94:
         aa:15:14:09:45:81:f5:f8:49:7e:ee:3b:1c:a4:a7:a2:3e:64:
         ae:16:51:20:31:2c:04:a3:d9:77:05:09:cb:2b:78:2b:e5:77:
         4c:c9:75:5a:5e:cb:df:45:87:8b:ce:3d:6f:3b:53:05:92:a0:
         23:c0:3e:dd:f5:29:ba:b3:7f:90:f9:d4:b3:c2:1d:69:cc:cb:
         85:fb:78:77:b3:9e:45:6f:f7:f5:48:d2:c6:06:79:b6:81:c5:
         19:51:5a:10:42:ea:04:a9:d7:86:95:dc:6f:3a:1a:81:54:de:
         b5:41:d5:dd:40:23:d2:e7:ca:ed:ca:c1:7f:c8:47:77:3d:e8:
         3a:ba:16:f2:2f:d0:98:92:d9:40:86:ce:7b:6d:10:55:7d:4e:
         0d:e1:d7:cf:0b:bc:fe:ec:82:84:3e:ca:3e:b6:95:95:80:ae:
         19:21:e3:a5:5d:65:b6:97:e5:0b:08:8a:d9:40:12:fe:28:c4:
         46:18:28:ee:71:25:32:3a:d7:7b:14:0d:38:13:62:b7:b4:00:
         75:3b:05:66:47:f8:97:49:31:30:b0:3b:82:46:86:ef:fd:15:
         a9:06:39:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2znJYwjTxjOTacsitfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0
ZDkwNTYwHhcNMjUwNDEzMTUwMTI1WhcNMjUwNDE0MTUwMTI1WjAzMTEwLwYDVQQD
Eyg2NGYwNmZjZmIwNjg1Yjg0MWJjMjA0Mjg4NGQwM2ZkODUxZDdiM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk0thS70gPNoyddXVEz163F2dMF0
hGpX1zo52RS81MY8eq3Kjd4O/6NbVyW0vsXQWpPI+oZxpNf9Gux7qD0wt3aVwQSu
rrvQKeYgc9DzC5p6cb4Q6sYGdmSOFEV00sYAKztp9qE9DYayBqy5B362DLJwNlpe
0Vp9U5q4jbKKERhGrfjqLT9s1bnt37V0qcRiDV1AmUeEFH/UVohvBOYk9TkBhSwI
RrPgB9dZaFoINM52T4Usfy0HThudXrKkke1f8dAXD3J4mLw63ee/420JNSvUQdjb
g+Nx6P/IrliN7Knz4DxM8K+YwYUrlmNDk4BfQB/hasX1ijRB31ph0XG28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTwb8+waFuEG8IEKITQP9hR17OxMB8GA1UdIwQY
MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt
NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl
LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmAO+rxD
HjjASF14fs6Klqodeatw/fY1JPVH8bBcrcG1ioqUqhUUCUWB9fhJfu47HKSnoj5k
rhZRIDEsBKPZdwUJyyt4K+V3TMl1Wl7L30WHi849bztTBZKgI8A+3fUpurN/kPnU
s8IdaczLhft4d7OeRW/39UjSxgZ5toHFGVFaEELqBKnXhpXcbzoagVTetUHV3UAj
0ufK7crBf8hHdz3oOroW8i/QmJLZQIbOe20QVX1ODeHXzwu8/uyChD7KPraVlYCu
GSHjpV1ltpflCwiK2UAS/ijERhgo7nElMjrXexQNOBNit7QAdTsFZkf4l0kxMLA7
gkaG7/0VqQY5WA==
-----END CERTIFICATE-----