Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          oaYV494xZ9BOnXIMKRpdKgrU5b/FkqABL/OsNweswDk=
Subject key identifier:   F5:2B:1A:CB:AC:38:74:7C:24:FB:F2:2D:AA:17:20:BB:C7:93:22:D3
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       01962E98A47EF5F6BF45C15C3735B0D93020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          152A
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: j5y3TGcq07P+j5Jzm5EiEITawEM6ppwa5QudGLH3lo8=)
                          2: FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa (hash: EXRrJEXVP7rdDwQuvA0Wxw32aRD+U0gT9dH37IYXXsA=)
                          3: PcLN4OCrAYo7gp9-LrNRS28FuGA.roa (hash: 4PVTYuLNKNpIeRdCU1ysaHpHPoiG6A7KV2YGI8bMc1w=)
                          4: Rowc--7buNg_Ew_zrmynFHimxmQ.roa (hash: tRqjTRWW7K8WV4ruLRwNapxECkPe5ofBmkCYh5TfGtI=)
                          5: ubO5COeLYEj8EUH84jT31h_xw1g.roa (hash: s3liWR9u5QAr3kzTofUM8+A1nG9imw9GL31c3qivTBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a4:7e:f5:f6:bf:45:c1:5c:37:35:b0:d9:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=f52b1acbac38747c24fbf22daa1720bbc79322d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:d7:f9:66:d8:79:d2:7e:35:fd:3e:14:3b:
                    56:0d:22:98:8e:ff:8a:4c:df:40:ea:71:d5:40:97:
                    1f:bf:34:40:91:27:15:be:90:a8:75:d6:b8:71:c5:
                    4b:19:18:1e:e5:d9:18:65:88:f5:97:f4:96:1c:88:
                    64:d6:e2:57:0f:8e:62:fa:ef:7b:1b:15:50:b3:8b:
                    a0:71:28:22:8e:ce:87:c9:5a:b7:90:90:3a:c6:33:
                    d7:52:b5:91:51:76:08:e1:d8:ef:de:f1:1b:94:73:
                    f8:73:20:af:f9:39:1d:ee:d5:51:6a:cf:6b:dd:b3:
                    29:52:18:29:6e:d6:de:e9:2e:e4:ce:10:5e:f5:09:
                    9e:95:a1:d3:ef:9e:02:6c:14:4e:eb:a5:81:8d:95:
                    a0:45:68:0a:dc:03:18:f6:ec:6a:50:83:5f:42:c2:
                    0e:c2:91:87:9a:29:a9:b9:91:af:1b:0b:ad:50:f1:
                    5f:35:04:c1:3a:ab:77:8b:82:0d:ba:6f:53:0e:18:
                    b9:9b:29:61:17:f9:ac:72:ec:64:b9:6d:e7:95:13:
                    84:a0:d7:d2:91:c7:01:8d:8d:7a:42:d9:fa:6c:6e:
                    5d:c5:bf:b6:f8:2c:8f:45:bb:d1:81:47:cf:87:fb:
                    40:62:b0:cd:9d:2a:44:ab:a2:4d:a6:a3:7b:8b:65:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:1A:CB:AC:38:74:7C:24:FB:F2:2D:AA:17:20:BB:C7:93:22:D3
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6f:1b:67:c1:ed:b3:ab:a2:fb:14:79:b7:18:cd:06:58:11:
         dc:a5:56:c8:e3:59:54:8c:a9:1b:2e:ea:58:b7:4c:d4:51:38:
         83:5a:76:6d:b3:5b:19:f2:02:2f:04:b9:3c:95:21:62:c8:8c:
         02:63:20:1b:4c:be:0c:aa:8f:06:66:5f:dd:58:1a:03:58:dc:
         9f:c7:11:98:49:6d:e1:50:ac:e4:84:d7:42:01:c0:05:14:1c:
         ae:71:17:e3:6f:a8:45:e1:18:ec:7b:f5:0e:f6:cc:76:54:a1:
         ff:86:ac:17:e8:f2:51:00:73:7c:ad:d3:1e:7f:2c:40:fc:f8:
         41:a6:d9:12:a9:7f:1c:3d:9a:8c:6a:d7:fb:af:38:af:3f:ff:
         ce:d7:63:19:63:47:bf:8e:ab:aa:7a:52:74:fe:4a:65:3e:f4:
         0f:23:1a:b7:41:50:3d:68:7a:e6:18:d7:a4:77:8d:82:37:a7:
         72:b3:8a:2d:71:ba:54:0a:5d:f9:f9:d9:f9:b7:af:d8:48:7c:
         14:c6:94:69:a6:76:33:d0:f3:8b:7e:09:0c:5f:ca:47:77:f1:
         1d:7c:4b:52:72:cd:b5:2c:75:80:7f:02:8e:e8:00:db:0d:b9:
         07:e9:46:23:08:3a:71:9a:29:1b:db:83:e4:90:8a:4e:48:12:
         9b:6f:3e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKR+9fa/RcFcNzWw2TAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjUwNDEzMTAwMTE3WhcNMjUwNDE0MTAwMTE3WjAzMTEwLwYDVQQD
EyhmNTJiMWFjYmFjMzg3NDdjMjRmYmYyMmRhYTE3MjBiYmM3OTMyMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCLX+WbYedJ+Nf0+FDtWDSKYjv+K
TN9A6nHVQJcfvzRAkScVvpCodda4ccVLGRge5dkYZYj1l/SWHIhk1uJXD45i+u97
GxVQs4ugcSgijs6HyVq3kJA6xjPXUrWRUXYI4djv3vEblHP4cyCv+Tkd7tVRas9r
3bMpUhgpbtbe6S7kzhBe9QmelaHT754CbBRO66WBjZWgRWgK3AMY9uxqUINfQsIO
wpGHmimpuZGvGwutUPFfNQTBOqt3i4INum9TDhi5mylhF/mscuxkuW3nlROEoNfS
kccBjY16Qtn6bG5dxb+2+CyPRbvRgUfPh/tAYrDNnSpEq6JNpqN7i2V2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUrGsusOHR8JPvyLaoXILvHkyLTMB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnG8bZ8Ht
s6ui+xR5txjNBlgR3KVWyONZVIypGy7qWLdM1FE4g1p2bbNbGfICLwS5PJUhYsiM
AmMgG0y+DKqPBmZf3VgaA1jcn8cRmElt4VCs5ITXQgHABRQcrnEX42+oReEY7Hv1
DvbMdlSh/4asF+jyUQBzfK3THn8sQPz4QabZEql/HD2ajGrX+684rz//ztdjGWNH
v46rqnpSdP5KZT70DyMat0FQPWh65hjXpHeNgjencrOKLXG6VApd+fnZ+bev2Eh8
FMaUaaZ2M9Dzi34JDF/KR3fxHXxLUnLNtSx1gH8CjugA2w25B+lGIwg6cZopG9uD
5JCKTkgSm28+/w==
-----END CERTIFICATE-----