Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File:                     06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier:          EDTx6hELRE8v5R3fZKJbup4FsKLv65Ep7s1fVyuhhsM=
Subject key identifier:   3F:65:C4:C9:D0:10:6F:24:D4:C1:A3:1F:C3:87:3B:E7:FD:96:86:30
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer:       /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial:       01962E2AE5F1F054911C3FF3508A6BF01D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number:          02D8
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: qhJTibRMMA1VljJsODRJ1r7A0IuHVPVQgGXEN5fY7rw=)
                          2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
                          3: vGKjbeI63RzXbx2moMgZ88gkL0o.roa (hash: 78K41RNch9PgQsEO5vrAtY0Bw9PWHwlD6lBB0OVTon8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e5:f1:f0:54:91:1c:3f:f3:50:8a:6b:f0:1d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=3f65c4c9d0106f24d4c1a31fc3873be7fd968630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:5a:c3:d3:3a:cc:1c:ca:a5:44:7d:8b:c7:
                    06:14:45:2d:97:93:99:0b:10:84:f1:13:32:b4:03:
                    94:41:85:d0:87:fe:93:91:a0:28:c1:ef:85:5a:5b:
                    14:00:df:66:0f:53:c6:46:0c:bf:2f:c4:36:99:81:
                    57:6c:0d:86:0e:b5:6d:e6:e0:49:b0:db:70:fd:52:
                    de:7c:5c:79:1d:d5:d1:8d:dd:c5:27:a8:8d:2a:b8:
                    c9:7d:cd:40:3b:cd:12:65:ff:38:06:3a:c4:74:6b:
                    e1:bd:5d:47:0e:92:9a:de:21:83:11:e7:5a:cb:a6:
                    20:6e:36:cf:18:c8:d9:a9:1e:81:1c:bc:91:45:39:
                    9c:e6:9c:f5:7e:c7:08:8b:eb:86:37:b0:ea:00:61:
                    c8:9f:d9:4d:29:79:28:02:d8:2c:70:64:33:35:02:
                    ac:22:a9:83:fb:e8:0b:a6:77:f3:ca:4d:da:03:0c:
                    5a:03:8e:bc:d2:41:dd:9e:71:6b:9f:20:da:5a:b5:
                    61:25:74:1a:d2:ed:b9:d9:ac:a6:54:ea:f4:88:04:
                    5e:c3:a8:de:91:9d:61:bb:25:c7:66:c3:01:01:c0:
                    86:19:2a:b3:5e:19:fb:7a:f9:41:f0:5f:4e:27:bd:
                    3d:fa:ca:f7:27:7e:6d:fe:fc:24:8f:6f:ef:45:d5:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:65:C4:C9:D0:10:6F:24:D4:C1:A3:1F:C3:87:3B:E7:FD:96:86:30
            X509v3 Authority Key Identifier:
                keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:75:82:a8:5f:bc:3c:92:8b:96:34:81:34:21:61:4b:ae:10:
         04:f1:15:2d:a1:6e:80:a1:0d:dd:0c:c7:78:19:58:c6:63:17:
         29:fa:04:33:0d:c8:86:74:5f:c3:ae:c4:2c:51:97:84:2d:04:
         1a:7a:fa:17:a6:ab:fa:28:8b:e5:fd:ac:73:89:56:04:d5:1c:
         97:93:f0:85:d9:a3:ec:87:00:0d:80:d5:8b:76:2e:b9:37:cd:
         c6:0c:f9:21:f4:db:db:4d:47:bf:d6:65:b9:99:30:8b:98:4b:
         42:00:ce:e1:a1:f6:f6:04:e8:cc:8d:1a:6e:f8:d6:77:dc:34:
         37:e9:2e:6f:f1:3d:e3:c3:63:48:53:df:10:2b:d1:29:ae:00:
         ff:19:58:93:b0:91:1d:5a:87:d6:ce:ab:7c:8c:48:13:7a:de:
         ba:1f:aa:3d:56:db:08:65:43:f3:bb:ec:13:bb:22:53:c8:d5:
         58:11:e1:76:27:05:5e:a2:90:42:84:39:b0:dc:2c:8c:4c:aa:
         8e:0b:eb:ac:5a:4f:a1:e3:d3:0c:ee:e8:d1:16:1d:d1:eb:70:
         65:70:50:30:08:c9:75:10:4c:4c:6d:4c:c4:8c:4c:04:13:5c:
         86:0e:56:ea:5a:ca:c0:d1:c4:4e:fa:d9:cd:6e:4a:5a:81:81:
         e5:ee:90:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKuXx8FSRHD/zUIpr8B1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm
YTdhMDkwHhcNMjUwNDEzMDgwMTI1WhcNMjUwNDE0MDgwMTI1WjAzMTEwLwYDVQQD
EygzZjY1YzRjOWQwMTA2ZjI0ZDRjMWEzMWZjMzg3M2JlN2ZkOTY4NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpZaw9M6zBzKpUR9i8cGFEUtl5OZ
CxCE8RMytAOUQYXQh/6TkaAowe+FWlsUAN9mD1PGRgy/L8Q2mYFXbA2GDrVt5uBJ
sNtw/VLefFx5HdXRjd3FJ6iNKrjJfc1AO80SZf84BjrEdGvhvV1HDpKa3iGDEeda
y6YgbjbPGMjZqR6BHLyRRTmc5pz1fscIi+uGN7DqAGHIn9lNKXkoAtgscGQzNQKs
IqmD++gLpnfzyk3aAwxaA4680kHdnnFrnyDaWrVhJXQa0u252aymVOr0iARew6je
kZ1huyXHZsMBAcCGGSqzXhn7evlB8F9OJ709+sr3J35t/vwkj2/vRdWNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9lxMnQEG8k1MGjH8OHO+f9loYwMB8GA1UdIwQY
MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt
NWMxMGJkYjg2NmUwLzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw
LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1XWCqF+8
PJKLljSBNCFhS64QBPEVLaFugKEN3QzHeBlYxmMXKfoEMw3IhnRfw67ELFGXhC0E
Gnr6F6ar+iiL5f2sc4lWBNUcl5Pwhdmj7IcADYDVi3YuuTfNxgz5IfTb201Hv9Zl
uZkwi5hLQgDO4aH29gTozI0abvjWd9w0N+kub/E948NjSFPfECvRKa4A/xlYk7CR
HVqH1s6rfIxIE3reuh+qPVbbCGVD87vsE7siU8jVWBHhdicFXqKQQoQ5sNwsjEyq
jgvrrFpPoePTDO7o0RYd0etwZXBQMAjJdRBMTG1MxIxMBBNchg5W6lrKwNHETvrZ
zW5KWoGB5e6QAQ==
-----END CERTIFICATE-----