Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File:                     vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier:          UUAm1vxzIu1griQsT8dbSdDSbx9txesVz/LoBr4DcAM=
Subject key identifier:   20:19:A4:8C:EC:8D:DB:ED:33:A4:9A:DE:62:D9:C7:2E:F8:9E:E2:08
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer:       /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial:       01962FAB9C6498037A2B7E2D82A68254EB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number:          14FF
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 1B6A9qa7KF81whAgrnv2KejzGGk.roa (hash: fbDtOi1s8oPbJKd6w9Zwx51Tf1HUbRzTLL7akFEQ9HM=)
                          2: IahDGP-i6VZriKXBsEnZCAjLxgQ.roa (hash: z6ZadpnmLWXnUrqDsvmd8VdfOzGOWV1JcSwpVi9K+wA=)
                          3: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: uEUHGo6vGSnAXkUyJWfr2YGuHdRWdrszGXSFVDaMqrE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9c:64:98:03:7a:2b:7e:2d:82:a6:82:54:eb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=2019a48cec8ddbed33a49ade62d9c72ef89ee208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:12:e1:ce:a9:9e:00:d1:45:3a:a3:6e:0c:
                    06:c5:58:3f:ae:08:60:03:04:d4:da:3a:31:e9:00:
                    07:1e:68:ba:ad:80:1f:0e:8d:e7:c1:c6:6a:ed:b4:
                    ae:55:8c:95:2f:93:ff:0f:99:57:f9:0d:f3:55:44:
                    92:9c:23:98:09:65:15:92:b2:62:36:11:f1:83:33:
                    c3:c6:ce:97:1e:a7:e4:8e:cd:e3:d9:e2:30:34:b0:
                    5b:b2:be:f4:f2:5d:1c:4c:a3:97:26:7a:57:f5:ad:
                    45:b7:41:27:b5:af:a9:79:b5:41:b3:0c:42:51:00:
                    90:89:fc:df:5c:16:22:e6:7c:35:7a:dd:54:ff:e3:
                    46:5d:fc:0a:a1:23:35:02:3e:81:65:1e:14:3a:b4:
                    e0:70:d8:47:c8:5f:fd:15:a3:bd:37:4a:21:90:a6:
                    bb:6e:b3:52:de:58:30:5d:2e:76:82:bd:4a:ca:2a:
                    8b:3b:92:b9:71:f5:35:d0:97:d5:c6:cd:6a:5d:da:
                    84:b3:4c:5b:aa:a8:6b:e0:59:ef:9b:98:3e:fc:c8:
                    81:a7:b2:6e:38:75:d8:ef:c6:a1:91:c8:a9:8d:97:
                    23:85:e4:35:13:b5:02:ee:ce:61:cb:29:2a:35:28:
                    3a:fc:c6:89:ed:54:1b:8c:a5:19:33:b0:67:c2:b2:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:A4:8C:EC:8D:DB:ED:33:A4:9A:DE:62:D9:C7:2E:F8:9E:E2:08
            X509v3 Authority Key Identifier:
                keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2d:61:5c:49:6e:1e:fa:76:96:5d:04:01:3a:d2:c6:f5:4e:
         d4:3b:eb:4f:17:a2:ea:97:10:2e:0b:c4:58:78:bc:f7:33:46:
         69:49:92:6f:86:27:2b:f5:68:9b:59:34:a1:b6:53:cf:ea:88:
         f3:b6:fe:ec:be:66:ae:20:fa:29:d1:aa:98:a3:d9:67:2f:b6:
         c9:2e:ee:1b:41:8e:92:8d:04:ed:bc:12:9c:8f:9e:4a:1d:3a:
         4e:de:33:df:75:bc:98:3a:a2:df:5b:b1:07:d5:b7:e4:9f:e7:
         fb:01:09:93:57:96:f9:2d:f2:d0:96:a2:3b:c2:bf:63:5a:7e:
         99:15:f5:3c:cc:45:91:56:ba:d1:bd:4f:2f:48:fe:f6:2f:06:
         f8:4f:ba:62:cd:f8:77:51:6d:af:fe:d5:53:86:8b:60:4c:7e:
         9d:d9:5c:3f:50:9c:dd:fb:53:5a:0d:54:c9:b4:38:4b:4b:d5:
         4f:a2:20:06:28:05:5f:92:64:07:a4:34:52:04:57:cf:83:41:
         8b:1b:6b:77:fb:26:1b:78:6c:06:d6:02:ab:d7:ab:0a:3a:cd:
         92:a7:c6:78:56:7e:c5:48:79:05:6e:61:b4:82:d5:f7:89:85:
         55:5f:11:fe:cd:1a:e7:d5:cf:7c:9c:8e:62:7e:35:5a:99:9e:
         8d:a7:ca:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5xkmAN6K34tgqaCVOtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjUwNDEzMTUwMTM3WhcNMjUwNDE0MTUwMTM3WjAzMTEwLwYDVQQD
EygyMDE5YTQ4Y2VjOGRkYmVkMzNhNDlhZGU2MmQ5YzcyZWY4OWVlMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ8S4c6pngDRRTqjbgwGxVg/rghg
AwTU2jox6QAHHmi6rYAfDo3nwcZq7bSuVYyVL5P/D5lX+Q3zVUSSnCOYCWUVkrJi
NhHxgzPDxs6XHqfkjs3j2eIwNLBbsr708l0cTKOXJnpX9a1Ft0Enta+pebVBswxC
UQCQifzfXBYi5nw1et1U/+NGXfwKoSM1Aj6BZR4UOrTgcNhHyF/9FaO9N0ohkKa7
brNS3lgwXS52gr1KyiqLO5K5cfU10JfVxs1qXdqEs0xbqqhr4Fnvm5g+/MiBp7Ju
OHXY78ahkcipjZcjheQ1E7UC7s5hyykqNSg6/MaJ7VQbjKUZM7BnwrL/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAZpIzsjdvtM6Sa3mLZxy74nuIIMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi1hXElu
Hvp2ll0EATrSxvVO1DvrTxei6pcQLgvEWHi89zNGaUmSb4YnK/Vom1k0obZTz+qI
87b+7L5mriD6KdGqmKPZZy+2yS7uG0GOko0E7bwSnI+eSh06Tt4z33W8mDqi31ux
B9W35J/n+wEJk1eW+S3y0JaiO8K/Y1p+mRX1PMxFkVa60b1PL0j+9i8G+E+6Ys34
d1Ftr/7VU4aLYEx+ndlcP1Cc3ftTWg1UybQ4S0vVT6IgBigFX5JkB6Q0UgRXz4NB
ixtrd/smG3hsBtYCq9erCjrNkqfGeFZ+xUh5BW5htILV94mFVV8R/s0a59XPfJyO
Yn41WpmejafKyQ==
-----END CERTIFICATE-----