Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File:                     9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier:          /PFhB5j9zMLFn1KPH3ZpcGpBhbOCb5ew72JB5U4xmt8=
Subject key identifier:   9D:4F:0B:59:07:B0:E2:BA:C2:55:9E:3B:70:64:1F:DD:7E:E5:B4:80
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer:       /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial:       01962E9955A2F68F4081A73582EEFD138E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number:          12A3
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=)
                          2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: HVMEHYJeSAWGxxTd+cOXleUQPFhL5pDVJ4amMYFfIDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:55:a2:f6:8f:40:81:a7:35:82:ee:fd:13:8e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=9d4f0b5907b0e2bac2559e3b70641fdd7ee5b480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:3e:8e:d0:67:7a:5e:cf:71:d5:28:58:ea:
                    28:55:75:81:f8:e6:0d:68:42:0f:52:e7:7a:7b:de:
                    b9:09:83:a1:78:32:48:7d:ae:96:78:98:2c:7c:01:
                    3d:c0:76:2e:0e:4a:b6:bc:a2:6c:09:3c:01:4a:35:
                    89:1b:de:02:39:18:f7:d0:23:50:c7:2d:d8:98:28:
                    8c:f3:dd:5c:2e:e7:6a:4d:34:2e:27:0d:b2:4b:2e:
                    03:52:58:b2:4e:ad:91:58:03:ae:52:ae:90:62:bc:
                    9c:fa:b1:88:8a:e8:3f:d4:a9:d9:cb:c9:ad:4a:e8:
                    7a:ad:b9:59:80:b1:a9:0f:79:ee:14:a8:85:4a:67:
                    76:c7:cb:e7:83:67:19:63:50:e1:7d:8e:11:41:5d:
                    b1:39:84:8c:e6:a5:76:33:a3:25:30:eb:7a:c3:0d:
                    30:42:b8:c4:3b:5b:71:aa:43:4c:e1:18:2a:f6:33:
                    89:d4:e3:9a:10:87:e8:22:18:70:4a:a4:0d:0a:25:
                    0d:5e:db:db:e4:4d:0d:f2:a5:22:89:7a:31:27:17:
                    3e:de:e8:71:ce:cf:fc:72:1d:58:ec:5c:85:6e:74:
                    c0:41:22:d1:46:30:0a:20:87:c0:30:da:d0:9e:09:
                    5f:c5:1f:3c:61:d6:57:22:f4:0c:19:96:21:25:5f:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4F:0B:59:07:B0:E2:BA:C2:55:9E:3B:70:64:1F:DD:7E:E5:B4:80
            X509v3 Authority Key Identifier:
                keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:de:27:15:d5:ad:82:56:0e:7e:55:a0:0c:75:d7:e2:bf:
         17:9e:d4:85:d0:f3:2a:97:43:e5:94:b5:ad:f6:14:31:e6:c0:
         87:ae:9a:ef:31:01:e1:b0:87:4d:5e:1f:b5:6b:0e:19:33:fd:
         94:5e:90:43:66:ab:98:3b:0a:a9:23:9f:78:7b:b0:e6:88:29:
         c8:0c:40:2f:9d:c9:d2:aa:96:fc:81:50:bf:30:a7:17:09:a2:
         94:19:46:8d:28:18:78:47:4e:bf:3d:36:ad:95:c4:9c:db:53:
         46:4f:64:fe:51:49:87:03:2e:d8:37:db:13:b2:81:3b:f8:33:
         c6:8b:f3:9f:79:2a:92:65:e8:95:a4:8e:16:ad:6c:44:8b:10:
         fd:d5:f7:da:c7:c2:a0:e0:2c:b3:ee:b3:d9:96:ec:01:54:c1:
         33:b4:ef:e2:8b:aa:4d:ba:6e:59:04:cc:7d:9d:4b:a3:44:e0:
         be:e0:8a:76:2a:47:ae:08:1d:da:56:71:d4:45:f3:a9:0c:30:
         a3:5d:6f:3a:dd:5e:d4:88:0c:80:6e:cc:60:c5:bd:34:b3:db:
         1d:d6:70:b3:60:fd:9e:f2:6a:01:05:38:83:d1:59:37:48:0a:
         db:69:c8:bb:9b:7d:32:e7:32:59:94:48:eb:24:22:26:ec:7c:
         5e:d7:62:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVWi9o9Agac1gu79E45iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTgyNTYxZDJkYTE3OTAyZjgzZWZmZTEzMjQ5OWY4MmQ1
MmYxNjMwHhcNMjUwNDEzMTAwMjAyWhcNMjUwNDE0MTAwMjAyWjAzMTEwLwYDVQQD
Eyg5ZDRmMGI1OTA3YjBlMmJhYzI1NTllM2I3MDY0MWZkZDdlZTViNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTg+jtBnel7PcdUoWOooVXWB+OYN
aEIPUud6e965CYOheDJIfa6WeJgsfAE9wHYuDkq2vKJsCTwBSjWJG94CORj30CNQ
xy3YmCiM891cLudqTTQuJw2ySy4DUliyTq2RWAOuUq6QYryc+rGIiug/1KnZy8mt
Suh6rblZgLGpD3nuFKiFSmd2x8vng2cZY1DhfY4RQV2xOYSM5qV2M6MlMOt6ww0w
QrjEO1txqkNM4Rgq9jOJ1OOaEIfoIhhwSqQNCiUNXtvb5E0N8qUiiXoxJxc+3uhx
zs/8ch1Y7FyFbnTAQSLRRjAKIIfAMNrQnglfxR88YdZXIvQMGZYhJV+z/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1PC1kHsOK6wlWeO3BkH91+5bSAMB8GA1UdIwQY
MBaAFPaYJWHS2heQL4Pv/hMkmfgtUvFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQt
ODczMTRkZjdkZWI0LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQtODczMTRkZjdkZWI0
LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPPeJxXV
rYJWDn5VoAx11+K/F57UhdDzKpdD5ZS1rfYUMebAh66a7zEB4bCHTV4ftWsOGTP9
lF6QQ2armDsKqSOfeHuw5ogpyAxAL53J0qqW/IFQvzCnFwmilBlGjSgYeEdOvz02
rZXEnNtTRk9k/lFJhwMu2DfbE7KBO/gzxovzn3kqkmXolaSOFq1sRIsQ/dX32sfC
oOAss+6z2ZbsAVTBM7Tv4ouqTbpuWQTMfZ1Lo0TgvuCKdipHrggd2lZx1EXzqQww
o11vOt1e1IgMgG7MYMW9NLPbHdZws2D9nvJqAQU4g9FZN0gK22nIu5t9MucyWZRI
6yQiJux8XtdiiA==
-----END CERTIFICATE-----