Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          lAW9H7hUi8OJUcTUgr008IGQb7vPTZDQfwXpQ9ONnqE=
Subject key identifier:   47:7C:C7:91:E4:37:CE:F8:E8:6E:0C:16:53:31:6C:34:A4:3B:47:3C
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       01962DF3A8FCE149836C906B0C061C93A36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: YYstOHcKH8Tz5NuPFAVE1cSrKW6ldYgcKC4GKbhjaHg=)
                          2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:fc:e1:49:83:6c:90:6b:0c:06:1c:93:a3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=477cc791e437cef8e86e0c1653316c34a43b473c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:c5:2e:32:48:1b:43:ec:5b:5d:ed:63:48:
                    b2:dd:80:b2:cc:41:95:ea:34:9e:e0:31:10:ab:b0:
                    0a:13:bc:66:66:f4:84:99:ac:bf:76:8e:01:d1:5b:
                    b4:b1:7f:de:bc:91:d4:fe:12:ac:01:de:ae:4d:be:
                    f3:36:2a:c4:91:3f:db:e1:af:c9:5c:d9:a3:ab:33:
                    0f:a0:97:05:7f:14:11:ef:f3:35:d9:f3:d5:09:81:
                    a3:bb:2c:55:2c:f2:4f:71:b6:28:3d:5f:3b:f8:56:
                    68:1a:73:85:dd:38:d5:83:15:88:ba:7a:0f:a8:8d:
                    0f:4d:90:5b:8e:a7:d9:96:c8:07:78:c5:bc:b7:54:
                    d2:4d:a5:e0:b5:0f:03:ec:c1:0d:52:2c:3a:ae:d7:
                    d8:28:23:92:b3:a3:32:10:12:14:7a:d1:da:e4:dd:
                    27:b2:f2:23:09:0b:c1:16:a1:1c:62:32:c9:94:57:
                    e0:70:e8:52:e9:ab:4f:60:00:9e:a0:57:8b:66:5e:
                    0c:69:c7:c3:82:19:68:56:1b:c7:62:a9:87:56:fd:
                    00:21:52:0b:42:3f:69:9f:09:36:ad:c4:9c:0f:bd:
                    02:b6:03:66:9c:ae:ac:f2:7b:b9:9e:54:63:27:b4:
                    30:70:48:18:fd:0b:73:11:95:51:23:97:01:09:0a:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:C7:91:E4:37:CE:F8:E8:6E:0C:16:53:31:6C:34:A4:3B:47:3C
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c5:3e:8f:30:f2:ea:f2:40:db:aa:f2:d2:fa:62:e6:b6:37:
         17:2e:48:48:ac:ce:b2:57:3b:b9:d0:a9:7f:fe:2d:dd:19:9c:
         9b:9a:f3:80:5b:2e:09:76:06:e2:8c:46:40:44:3d:bb:fa:fd:
         08:0b:4f:31:4e:16:53:5d:df:9b:9d:14:8b:8e:a2:91:b7:ff:
         a1:8b:df:d3:0c:92:47:96:cd:a9:b7:e8:bd:0b:c4:3b:0d:f3:
         21:c3:b7:ab:52:b6:b7:34:a7:34:de:5e:54:e0:df:fb:d5:94:
         46:85:4e:b9:e4:92:0b:5f:91:b5:b9:27:13:e8:5e:cb:5d:96:
         8a:6e:71:7d:86:20:a9:27:98:88:a7:fa:fe:6e:65:cd:97:d9:
         ab:ca:e8:64:ee:e3:d2:e7:83:8e:f4:fa:3a:f1:89:40:4b:0f:
         21:df:b1:69:1c:bd:b3:b1:93:52:f5:47:96:55:fa:78:89:06:
         9a:e4:eb:bd:fa:31:67:fa:88:6a:22:7c:90:cc:57:cc:72:48:
         a6:58:9e:75:ef:b0:75:fb:eb:0d:65:6f:b5:09:b9:c7:7c:e3:
         e5:7c:9d:d5:5e:83:7d:18:bd:e1:c3:72:f7:24:1c:9c:4b:36:
         10:10:ee:94:ed:19:f1:12:c0:39:80:64:53:cd:ec:94:da:3c:
         43:63:86:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86j84UmDbJBrDAYck6NsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl
Y2E4ZGUwHhcNMjUwNDEzMDcwMTA1WhcNMjUwNDE0MDcwMTA1WjAzMTEwLwYDVQQD
Eyg0NzdjYzc5MWU0MzdjZWY4ZTg2ZTBjMTY1MzMxNmMzNGE0M2I0NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZTFLjJIG0PsW13tY0iy3YCyzEGV
6jSe4DEQq7AKE7xmZvSEmay/do4B0Vu0sX/evJHU/hKsAd6uTb7zNirEkT/b4a/J
XNmjqzMPoJcFfxQR7/M12fPVCYGjuyxVLPJPcbYoPV87+FZoGnOF3TjVgxWIunoP
qI0PTZBbjqfZlsgHeMW8t1TSTaXgtQ8D7MENUiw6rtfYKCOSs6MyEBIUetHa5N0n
svIjCQvBFqEcYjLJlFfgcOhS6atPYACeoFeLZl4MacfDghloVhvHYqmHVv0AIVIL
Qj9pnwk2rcScD70CtgNmnK6s8nu5nlRjJ7QwcEgY/QtzEZVRI5cBCQqtCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEd8x5HkN8746G4MFlMxbDSkO0c8MB8GA1UdIwQY
MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt
YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4
LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8U+jzDy
6vJA26ry0vpi5rY3Fy5ISKzOslc7udCpf/4t3Rmcm5rzgFsuCXYG4oxGQEQ9u/r9
CAtPMU4WU13fm50Ui46ikbf/oYvf0wySR5bNqbfovQvEOw3zIcO3q1K2tzSnNN5e
VODf+9WURoVOueSSC1+RtbknE+hey12Wim5xfYYgqSeYiKf6/m5lzZfZq8roZO7j
0ueDjvT6OvGJQEsPId+xaRy9s7GTUvVHllX6eIkGmuTrvfoxZ/qIaiJ8kMxXzHJI
pliede+wdfvrDWVvtQm5x3zj5Xyd1V6DfRi94cNy9yQcnEs2EBDulO0Z8RLAOYBk
U83slNo8Q2OGDQ==
-----END CERTIFICATE-----