Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File:                     H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier:          Y+eow1RAUfx7DZ11W7WPhDqJ7nG+zIPPEPOlHcJEmds=
Subject key identifier:   2C:A0:99:D9:64:05:B6:91:37:F9:B9:50:2B:77:03:50:D4:3F:6C:21
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer:       /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial:       01962DF40866A02119764BF3C904D058D088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number:          04F8
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: hLUYZ7+H8TmBfvwFHTnsgDUS8vv+f6lJIZUiycZSyAM=)
                          2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
                          3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:66:a0:21:19:76:4b:f3:c9:04:d0:58:d0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=2ca099d96405b69137f9b9502b770350d43f6c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:79:d7:ee:b8:bb:76:f0:b9:13:c9:17:f6:
                    d9:3a:95:7f:fe:7a:8b:5a:29:76:c0:97:c1:fc:62:
                    fc:e6:8c:72:9f:92:de:ac:c0:1e:43:9c:c0:b4:8a:
                    e0:c8:e4:7f:21:a9:8e:08:58:ac:43:d1:07:87:0e:
                    fc:a1:7a:d6:c9:5e:a4:3f:1d:99:f3:58:b5:bc:e9:
                    0b:af:86:4a:9a:ca:85:1e:b0:30:91:58:87:bc:f1:
                    9b:91:a4:78:24:45:9d:57:48:54:be:e8:d5:d3:e0:
                    e5:e4:31:05:12:ce:f7:fc:57:e2:7b:76:e4:03:68:
                    a8:d1:18:8f:3d:8d:e4:57:99:63:ad:99:c0:e7:f1:
                    5a:3e:32:9a:77:1f:4c:34:ca:69:44:63:8e:44:e3:
                    80:3a:b2:64:d0:bb:fd:ef:45:d8:1b:86:e7:6d:86:
                    a2:95:c4:1c:ee:13:92:e9:7f:d9:94:66:81:cf:f3:
                    de:64:36:61:58:1b:48:af:8d:30:b7:07:78:03:28:
                    3a:f9:fd:f7:39:fa:b8:1b:2f:d7:d3:e9:14:0b:e6:
                    d2:41:3b:3f:bc:b2:6d:16:4f:c4:8b:4f:06:6b:86:
                    a5:3a:fa:cd:ad:cc:86:3f:b2:7b:fe:8c:11:7f:e2:
                    bb:b6:5d:e2:61:f8:4a:5b:1b:25:e8:e5:7d:1c:dd:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:99:D9:64:05:B6:91:37:F9:B9:50:2B:77:03:50:D4:3F:6C:21
            X509v3 Authority Key Identifier:
                keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:03:32:3d:ea:99:50:14:87:0d:e8:b9:5e:ca:61:17:d5:b2:
         dc:76:20:57:29:19:d3:11:da:9f:bc:bc:1f:ce:90:30:25:22:
         dd:88:97:7e:b4:7e:5d:63:aa:bf:30:7e:5b:c2:7e:5e:0f:af:
         cc:45:75:85:a7:c5:e5:2e:27:65:90:ad:a3:37:71:25:4f:ad:
         57:15:ca:ac:e4:25:03:25:ab:0e:1f:b8:7d:d1:5d:86:58:f6:
         3d:ac:33:95:74:ed:89:47:de:7f:40:2f:ce:bf:d8:48:3b:25:
         58:5d:f1:e9:6a:f8:6a:32:79:a3:5b:1b:ab:2d:bc:89:fe:a8:
         67:f1:32:55:06:52:92:39:76:63:b1:05:8e:e1:f2:1a:5e:0d:
         d0:82:e8:b3:50:34:61:f0:5d:ae:68:93:00:43:8d:f9:6f:f2:
         7b:0b:9b:d5:9d:24:e1:dd:83:f4:7c:fb:64:68:d9:2c:d0:c6:
         9d:c3:dc:84:7c:c6:72:35:fa:0b:84:cf:c0:56:c8:62:75:3f:
         2e:7f:08:2c:e2:48:1d:fe:68:6c:5a:59:c2:4c:55:74:e7:88:
         e9:ef:20:22:b3:b1:25:0c:24:78:5f:6b:b3:d1:a3:db:e8:fe:
         23:5d:64:2d:68:0b:89:3b:90:d5:dd:6e:20:28:ae:70:6c:3e:
         b0:d7:ee:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9AhmoCEZdkvzyQTQWNCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODhiNWU5MzUyMmI4OThlNzZmNDVmNDc4NDQzYzM0OGY1
N2I5MTYwHhcNMjUwNDEzMDcwMTI5WhcNMjUwNDE0MDcwMTI5WjAzMTEwLwYDVQQD
EygyY2EwOTlkOTY0MDViNjkxMzdmOWI5NTAyYjc3MDM1MGQ0M2Y2YzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoR51+64u3bwuRPJF/bZOpV//nqL
Wil2wJfB/GL85oxyn5LerMAeQ5zAtIrgyOR/IamOCFisQ9EHhw78oXrWyV6kPx2Z
81i1vOkLr4ZKmsqFHrAwkViHvPGbkaR4JEWdV0hUvujV0+Dl5DEFEs73/Ffie3bk
A2io0RiPPY3kV5ljrZnA5/FaPjKadx9MNMppRGOOROOAOrJk0Lv970XYG4bnbYai
lcQc7hOS6X/ZlGaBz/PeZDZhWBtIr40wtwd4Ayg6+f33Ofq4Gy/X0+kUC+bSQTs/
vLJtFk/Ei08Ga4alOvrNrcyGP7J7/owRf+K7tl3iYfhKWxsl6OV9HN1h8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCygmdlkBbaRN/m5UCt3A1DUP2whMB8GA1UdIwQY
MBaAFB+Itek1IriY529F9HhEPDSPV7kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYt
Y2QzOTJiMGRlZGNmLzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYtY2QzOTJiMGRlZGNm
LzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQMyPeqZ
UBSHDei5XsphF9Wy3HYgVykZ0xHan7y8H86QMCUi3YiXfrR+XWOqvzB+W8J+Xg+v
zEV1hafF5S4nZZCtozdxJU+tVxXKrOQlAyWrDh+4fdFdhlj2PawzlXTtiUfef0Av
zr/YSDslWF3x6Wr4ajJ5o1sbqy28if6oZ/EyVQZSkjl2Y7EFjuHyGl4N0ILos1A0
YfBdrmiTAEON+W/yewub1Z0k4d2D9Hz7ZGjZLNDGncPchHzGcjX6C4TPwFbIYnU/
Ln8ILOJIHf5obFpZwkxVdOeI6e8gIrOxJQwkeF9rs9Gj2+j+I11kLWgLiTuQ1d1u
ICiucGw+sNfu4A==
-----END CERTIFICATE-----