Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File:                     szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier:          gO1sF9nwP2w/ZGrQ6UhVDQzlx9ZGevgLnawPKMVWpXE=
Subject key identifier:   1A:12:3B:C2:71:92:54:ED:9F:45:08:D3:07:2B:4A:9F:1A:09:E6:D7
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer:       /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial:       01962ECFBC1FF9749BC5ACC22426FC0FF886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
                          2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
                          3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: uF2eR9HaEYsi1s8ZL54InQLzbZhEd2smJhGp6YhcdFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bc:1f:f9:74:9b:c5:ac:c2:24:26:fc:0f:f8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=1a123bc2719254ed9f4508d3072b4a9f1a09e6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:d0:a2:e0:fb:a5:7d:a3:d6:94:87:fe:53:
                    0a:a9:49:96:e1:cb:0d:05:e8:09:b7:68:47:da:41:
                    25:45:57:e0:6c:07:27:78:ff:6f:61:9c:e7:96:27:
                    e3:70:f1:38:07:75:eb:19:0c:e2:3c:83:92:83:7a:
                    ec:30:b6:4d:79:26:16:fb:51:74:e2:eb:d4:6d:8d:
                    25:d5:fb:ab:10:3c:ce:2c:87:6f:b4:16:2d:65:ee:
                    b9:39:dc:68:e5:ff:ac:92:fa:2f:b4:33:17:86:f9:
                    41:c0:c8:5f:c3:98:96:23:c9:6b:cc:bc:41:ca:c7:
                    1f:23:39:7a:48:1f:b3:03:55:71:6f:6c:06:c3:7c:
                    92:4d:bf:20:50:76:01:0a:9d:91:d5:d2:64:98:7c:
                    a9:34:96:71:03:40:70:c8:ea:9b:d0:18:ac:55:cf:
                    5b:fc:d8:df:df:59:90:c7:db:93:95:6e:47:cd:4a:
                    89:1e:3f:56:ee:74:00:18:ee:5d:ec:e4:8c:a4:27:
                    13:4d:c0:19:12:02:35:f1:b1:84:8b:4c:82:3b:cf:
                    09:f6:52:19:0b:f0:47:9f:2c:bb:84:83:82:13:09:
                    54:91:75:51:1c:98:70:0d:57:c1:10:97:9c:e6:64:
                    33:4f:ee:19:9d:98:1c:d3:eb:45:a7:18:db:ac:0e:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:12:3B:C2:71:92:54:ED:9F:45:08:D3:07:2B:4A:9F:1A:09:E6:D7
            X509v3 Authority Key Identifier:
                keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a0:2a:31:f3:36:85:c2:4a:52:4c:39:ef:ae:df:b2:90:aa:
         62:94:19:4c:32:fa:15:68:ca:70:22:5b:a6:90:cd:43:5e:12:
         d1:5d:6d:54:f2:ad:f6:66:63:ff:ef:d6:bd:53:63:56:7b:4c:
         4c:f1:a7:58:e2:b3:70:e1:1e:4d:4b:b7:28:12:44:54:77:da:
         27:83:ca:c8:b9:ff:79:cd:f0:7f:1c:4b:ff:83:6c:5f:51:77:
         ac:6b:b1:1a:2c:1d:6a:b4:52:7a:97:00:45:fc:d7:c9:87:a0:
         01:e1:ed:53:ba:c2:f9:70:36:fd:1f:51:c2:bf:cb:d1:cf:77:
         9d:2a:10:f2:c3:7f:b4:64:dc:1b:b2:c7:a1:b7:a5:29:a8:e6:
         50:61:5d:72:57:c8:1e:c7:6a:8b:2f:77:9c:95:bc:cd:67:35:
         c3:48:17:ee:70:cf:a7:c4:e7:19:41:a8:08:17:a0:f9:b8:a0:
         52:8e:03:ca:04:0a:f6:fa:9b:88:41:ec:e5:b6:ea:89:22:a0:
         f4:f8:18:c0:64:a2:43:e3:bb:b0:4a:db:05:4a:05:70:55:05:
         81:11:30:3b:66:68:59:2b:80:ef:a0:71:9e:56:a0:1b:6a:7d:
         a0:eb:08:8c:1b:24:ae:fc:b8:06:a3:6d:9c:d2:68:ba:a2:8f:
         2b:77:bd:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7wf+XSbxazCJCb8D/iGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj
MDY4NWEwHhcNMjUwNDEzMTEwMTI4WhcNMjUwNDE0MTEwMTI4WjAzMTEwLwYDVQQD
EygxYTEyM2JjMjcxOTI1NGVkOWY0NTA4ZDMwNzJiNGE5ZjFhMDllNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY3QouD7pX2j1pSH/lMKqUmW4csN
BegJt2hH2kElRVfgbAcneP9vYZznlifjcPE4B3XrGQziPIOSg3rsMLZNeSYW+1F0
4uvUbY0l1furEDzOLIdvtBYtZe65Odxo5f+skvovtDMXhvlBwMhfw5iWI8lrzLxB
yscfIzl6SB+zA1Vxb2wGw3ySTb8gUHYBCp2R1dJkmHypNJZxA0BwyOqb0BisVc9b
/Njf31mQx9uTlW5HzUqJHj9W7nQAGO5d7OSMpCcTTcAZEgI18bGEi0yCO88J9lIZ
C/BHnyy7hIOCEwlUkXVRHJhwDVfBEJec5mQzT+4ZnZgc0+tFpxjbrA4+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoSO8JxklTtn0UI0wcrSp8aCebXMB8GA1UdIwQY
MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt
MzZlNjRhYzY0NTQyLzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy
LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKAqMfM2
hcJKUkw5767fspCqYpQZTDL6FWjKcCJbppDNQ14S0V1tVPKt9mZj/+/WvVNjVntM
TPGnWOKzcOEeTUu3KBJEVHfaJ4PKyLn/ec3wfxxL/4NsX1F3rGuxGiwdarRSepcA
RfzXyYegAeHtU7rC+XA2/R9Rwr/L0c93nSoQ8sN/tGTcG7LHobelKajmUGFdclfI
Hsdqiy93nJW8zWc1w0gX7nDPp8TnGUGoCBeg+bigUo4DygQK9vqbiEHs5bbqiSKg
9PgYwGSiQ+O7sErbBUoFcFUFgREwO2ZoWSuA76BxnlagG2p9oOsIjBskrvy4BqNt
nNJouqKPK3e9fg==
-----END CERTIFICATE-----