Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
File:                     pN15cHEksgZy5pw44Xtma3-ufB0.mft (raw, json)
Hash identifier:          hKy50D+TcGFUKvnRIFD9mj/l+XDC/hZ9qVmfJKPp0LE=
Subject key identifier:   F1:40:E1:FD:62:4A:32:EA:1C:EA:4D:8E:F2:37:F0:D2:F2:AF:A5:A7
Authority key identifier: A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
Certificate issuer:       /CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Certificate serial:       01962F748172DA5943EA14721BAC2D14D989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
Manifest number:          03C0
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: pN15cHEksgZy5pw44Xtma3-ufB0.crl (hash: 0nx85DFpDn98t6HFDkKmDek8VA25JrWif5KSgkFReAE=)
                          2: yqAKtMjQr06lqjkgV4xVRo64daM.roa (hash: x/Jj/C/0x92hbipjJNdh/WcznLtF4AoIFg/Jhn39tzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:72:da:59:43:ea:14:72:1b:ac:2d:14:d9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=f140e1fd624a32ea1cea4d8ef237f0d2f2afa5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:2c:f1:35:b4:71:85:46:69:94:a9:1d:da:
                    60:bd:6e:88:e0:ce:b1:d3:89:14:b4:ad:f7:35:f3:
                    55:c8:26:ad:64:7a:85:d1:b0:31:65:20:ef:de:b4:
                    79:5f:68:29:05:93:51:cf:61:6a:46:7a:bd:56:bc:
                    7b:48:04:22:53:6a:75:9d:e4:6b:0b:9d:80:c7:79:
                    b3:03:a6:7e:85:32:56:70:9b:30:79:a9:17:78:40:
                    51:7d:18:01:8d:59:cd:5a:cd:33:37:9a:e7:cb:7c:
                    92:c5:ff:e5:b7:79:0f:84:f8:89:b8:96:41:f5:ae:
                    b4:08:09:27:e9:72:2f:d6:06:ba:c5:da:ab:99:44:
                    d3:99:67:44:ff:67:85:46:1c:25:af:f2:79:d2:42:
                    fa:ce:6d:a6:b6:52:e3:b5:06:01:a8:4f:78:48:ae:
                    d4:91:92:bd:67:f3:a0:78:ee:e9:cf:7f:a1:f3:c0:
                    3f:26:75:69:c1:ce:41:ef:c7:f2:aa:84:19:62:63:
                    cc:90:ba:d0:be:a4:11:4d:70:b4:e4:87:ba:67:28:
                    b6:31:8e:96:d9:d8:d7:57:1a:d5:7d:3d:ac:07:d5:
                    3d:96:2a:e4:93:c7:d8:f7:19:9c:0e:17:17:1d:d2:
                    bd:94:fd:e4:c7:d0:e9:41:b7:fa:c6:e8:2d:9a:dd:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:E1:FD:62:4A:32:EA:1C:EA:4D:8E:F2:37:F0:D2:F2:AF:A5:A7
            X509v3 Authority Key Identifier:
                keyid:A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fe:8b:01:e0:21:89:fa:b4:49:c4:1e:eb:2d:85:80:48:8a:
         76:72:17:e2:2d:18:b0:2a:fb:8d:8d:7b:1e:76:dc:7b:0e:82:
         36:ba:18:e3:d5:85:1f:6a:58:b9:3b:db:9a:6d:be:15:ab:49:
         6e:76:5c:0f:e8:6b:4a:f1:51:5d:49:f2:f8:a2:4e:a9:6b:40:
         a4:15:47:37:50:6d:e7:55:3a:d1:ed:32:04:58:47:0a:a2:d9:
         26:1d:f6:cc:f5:06:82:b4:1f:6a:88:b2:f8:33:3d:45:3b:63:
         b7:13:97:2e:dd:f8:22:6c:0a:f6:88:58:82:b5:c5:ce:04:4f:
         c1:5f:77:38:ba:dc:53:88:7a:f1:a2:5e:3b:ea:be:c5:28:94:
         b7:1c:fb:25:7b:67:ae:66:40:53:b0:30:81:ee:e5:89:87:d5:
         74:ae:33:1a:bc:41:0d:65:84:0c:d9:93:b8:a8:40:bd:20:52:
         f6:b0:f8:dd:44:76:5d:2f:00:15:7e:bf:a6:9d:dd:82:8b:d4:
         a7:4a:7a:0e:dd:73:69:d2:08:8e:2b:ba:d2:0a:c8:01:00:7d:
         59:c8:75:7c:a1:5b:03:b6:dc:44:fc:a5:7b:6f:e3:e4:71:3a:
         ea:4f:5f:0a:8e:44:3b:eb:4f:5a:e6:05:c4:fb:5b:b3:5b:9e:
         d0:83:2d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIFy2llD6hRyG6wtFNmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZGQ3OTcwNzEyNGIyMDY3MmU2OWMzOGUxN2I2NjZiN2Zh
ZTdjMWQwHhcNMjUwNDEzMTQwMTI2WhcNMjUwNDE0MTQwMTI2WjAzMTEwLwYDVQQD
EyhmMTQwZTFmZDYyNGEzMmVhMWNlYTRkOGVmMjM3ZjBkMmYyYWZhNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vks8TW0cYVGaZSpHdpgvW6I4M6x
04kUtK33NfNVyCatZHqF0bAxZSDv3rR5X2gpBZNRz2FqRnq9Vrx7SAQiU2p1neRr
C52Ax3mzA6Z+hTJWcJsweakXeEBRfRgBjVnNWs0zN5rny3ySxf/lt3kPhPiJuJZB
9a60CAkn6XIv1ga6xdqrmUTTmWdE/2eFRhwlr/J50kL6zm2mtlLjtQYBqE94SK7U
kZK9Z/OgeO7pz3+h88A/JnVpwc5B78fyqoQZYmPMkLrQvqQRTXC05Ie6Zyi2MY6W
2djXVxrVfT2sB9U9lirkk8fY9xmcDhcXHdK9lP3kx9DpQbf6xugtmt2MxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFA4f1iSjLqHOpNjvI38NLyr6WnMB8GA1UdIwQY
MBaAFKTdeXBxJLIGcuacOOF7Zmt/rnwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZDFjZWEtNGQ5ZC00OTA2LTk4ZDct
NzE4OGQ5MWE2Y2E5LzEvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZDFjZWEtNGQ5ZC00OTA2LTk4ZDctNzE4OGQ5MWE2Y2E5
LzEvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/6LAeAh
ifq0ScQe6y2FgEiKdnIX4i0YsCr7jY17Hnbcew6CNroY49WFH2pYuTvbmm2+FatJ
bnZcD+hrSvFRXUny+KJOqWtApBVHN1Bt51U60e0yBFhHCqLZJh32zPUGgrQfaoiy
+DM9RTtjtxOXLt34ImwK9ohYgrXFzgRPwV93OLrcU4h68aJeO+q+xSiUtxz7JXtn
rmZAU7Awge7liYfVdK4zGrxBDWWEDNmTuKhAvSBS9rD43UR2XS8AFX6/pp3dgovU
p0p6Dt1zadIIjiu60grIAQB9Wch1fKFbA7bcRPyle2/j5HE66k9fCo5EO+tPWuYF
xPtbs1ue0IMttw==
-----END CERTIFICATE-----