Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          uzeBrZwjFgDmCWqbGPHyONXzSyfPnR46dozeOvfiQ8c=
Subject key identifier:   37:93:BD:7A:C9:DF:51:B4:4B:7C:1C:BA:26:DF:71:4C:EA:1A:85:EC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       01962FAB65C6084E650F895648EFB8E97B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          11E9
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: v2XCOkw3/xXhanvD5FZqZKtA3fKo+2jFabwM5Vvd5Xk=)
                          2: 1-tIjuiVKG5efKq728l75mt6vFcI.roa (hash: i9dyyJea0WVUAcUbhig9A7yoFw52SsLjOuVcqGjw+D8=)
                          3: 1IpB1KwV9m_FKARx7ylIUMT4DwQ.roa (hash: efzAaMp8YPorhGhURmm5hw49DSGuTMXno8F72sN9BDs=)
                          4: 2-68_Bzi4xWbZGyCWg8-EGYgNqA.roa (hash: PYhWYX6MKr91BZMJLhMG9KYJYMTak8HHTpbuYWCGrl0=)
                          5: 2ZejEgmiPZzCplMEBjadS5Liuc8.roa (hash: +yuD1h8OddiqC/ppQeNKmjmov9ABpW0BWsQYtSsXTLI=)
                          6: 2zHtlNzBguVKDS5nTasTmyjW9hE.roa (hash: m9msWqaYN8otuMiejG9SIvRQgF5RRPTjT4hMG5TzZ+g=)
                          7: 4A12nw_PGOtE0lp0UfI0h7Y-99Q.roa (hash: HkSeQ6WxnAp78h46xIjTBHoUtcNA5UyOtMZ2PMoUHZc=)
                          8: 5Jm-BvPAKNHZFq96dxLsREv6a4A.roa (hash: a/89u2WD7s95Qrynaw/nDEIXPn6qcHIzz4Nzpd0PT8A=)
                          9: 5iHKh2fvXWQj2HWia5_IKvPwHoU.roa (hash: s8W1Yl6T5ofAhDsk1QSpkpatIaKjULwoUAnxpS4PU7E=)
                          10: 6-E3GV-1zl_2yzB1tlLwKIaoDeo.roa (hash: Y4flrl4xeR5/WpyVgKZh1kuBPxjD9smyUQlEgtTVekg=)
                          11: 687gtUPSJsm3-i7xBwQZZfUo7RA.roa (hash: ZJBlEAwm8vM/KO8KNVy3dQsPdyR1wyAD6U4kIMtu0no=)
                          12: 6x6vqgCHnPQXXCFncfeZab-OtNs.roa (hash: vEqAS2W1Mca8pIVlABSdoB6CUZnRlz4vKzwu26p0xNw=)
                          13: 7H-gv5_EU1xgyQL3Fwr9Ti3ldV8.roa (hash: GfZNpqCfFPI4SruOS+PuW/xPD+NoVArHkQIWeNYXs4s=)
                          14: 82a09L9D-GHlixpv15qMJsus9Ko.roa (hash: 0JZFGi/+dAf5HJYO25NhCh8MWQYr8KOw+UTZmm8CQiY=)
                          15: 8h34ZnrpMeSXe4YFX1Tg6Z57-So.roa (hash: RF5kdoR62UZPeBgepPRvMAtAF1E4LgAyNJZMeuVy/s0=)
                          16: DEhE_ypiBE06kNcR8dcJl852_o0.roa (hash: HEfWjNNUWJB/xXURsfKkp+P3LFzpYaEky6LDs3aHYZM=)
                          17: FPjxQ4o4SwR17Rt2SS5L4PwX_zw.roa (hash: K48JyPgyTAb4lzNQOhkJXih/OMOra+QPg087+WMsBrM=)
                          18: GdVfMn99GCEaRf_NMRqcGzJjjMA.roa (hash: qiitLByIe7OfviCT5Cw4nPlSlgMBgdhVEIHbh2M9XZc=)
                          19: KsYpdxnPHFkWaRlO_sJqr_gcews.roa (hash: 2YwMvZNsa1WyFTg69SdjSGD+xKc9HPEGausUwLuiL7s=)
                          20: P4ZZtp4JsXxCVJn9ZyOpcYAlv1M.roa (hash: obi7f5CZLsaGmFd3EP61o1huj6lo+CnC/CM6mxCG4YI=)
                          21: Q9n5LyWptjtprJQLhllalzNTCQY.roa (hash: aKQXmD0BQQGmCd8TN0DAeLdmX/uWQC+Je4vTp+GPO8w=)
                          22: QKj0bwIvQOUHGFTSemOrVI7iC_8.roa (hash: Z64MhYCgxnsYnTs1qjGcdXBB1K5Qolvqt/ZZm2Na6Rw=)
                          23: VeAThzN4MiE-pEOg8xjqgrStOwc.roa (hash: JhE0WtlH8hg6GykVZO2CHFN+TBcnCX7Nk9yJKcxDieM=)
                          24: ZyoU0jW6Bmgy3uEe-aextVch-A0.roa (hash: hQ2ZnSobSVoCandMJ91GKEPDEW5hMyMeQYN3RL8Zmuw=)
                          25: fd6iDZuVXW8FYriumU_UacsN2WE.roa (hash: yzIgTL4lzoBopSMbJYgVjjE1VaKS+Y57P3a7GsBTCkU=)
                          26: gTeouPyjDdiClKTIsrjmm-4QSAY.roa (hash: Gn6t45fEt9l+/zAGQA8uRZuistHiw2vwGcnrPM6JDcQ=)
                          27: h5I2QrKP1Cyc8pihXm8C_2OfIWo.roa (hash: vfRlgWm7051wbahpydRtV1aRTWqhEtXphul+L25YupI=)
                          28: hGyiWQJ2x7Lz-vGMD4VHAnBfCcI.roa (hash: FyG1URSpdZ1nDCEqfEM6nyvdRBJYqN426KFcTgYB3kc=)
                          29: haRmGkgL6GKDvr6SDajw89Xp5tg.roa (hash: o32EnHNWIdaHJ7DwN5wuihXLN2OTJ904FIZNfQEBK4s=)
                          30: iimc9Zf7eDnJUU7sJsv967Ptuy8.roa (hash: 8BjeCOOPz5Pd+hLtbnZwnLmiX3W5LcV8Mk0yhqgIqKA=)
                          31: jRPfLG6RyZ7SZSXO_mU9NKiCcw4.roa (hash: wJ1Kb8DcLkiF8lcwDzcj7MAfl2lJGCFUBETZdyBX7GA=)
                          32: kF7D5dOU02LhBrPQO5JPO-bbuPs.roa (hash: eiunCdT7pUYvc+BAnzB9LUduC3rIC8v3xX5Jq9EgDg8=)
                          33: kfs1UarSBV-0sIiqvXCIuJusPXc.roa (hash: sRvQmRT9NVaInuP82T5AEyNszD9aBaJrjYEla8gwxEs=)
                          34: nBIa_MgNpUDV3SBtlinbR6es4Rg.roa (hash: hC7k/XXxiWX1E2MebUDMjEyqkFmK2BgTyk5G2ezPJmw=)
                          35: ptCX-_1nc89pNjfGQ5x6IbDKZVA.roa (hash: g1rGRlkVp9beVUJJwTM6hTC16xmemNH4K4Mbj6oXKgE=)
                          36: r9rbyLKE8i7Fw-ENJEzUTPECXLA.roa (hash: wqHT6bzo8llL5sY2VWnVDlxdxp/3/yHtg4s/KtYCUUg=)
                          37: rFSszZrAXt7klkpsUlQXY_mxSAU.roa (hash: i1ims/sNXA4gtCRRZdO2d0D52xjGt/wQWta8p0+dVOk=)
                          38: tmVQh_Zrc4vNnbHiXndqXjmcFIE.roa (hash: yQMwq2wwKjRpZ8/s+bQHYD4lppDeT3TrWmVSZyzj5ow=)
                          39: uz4McPhf0ZJty4pFsDqtFJPUkMQ.roa (hash: jXSmEgBurOdjHM+8Kd56IR1+to1H/cB1CMI91O3kaLk=)
                          40: w39M32gYL2NDwd5cVd3yf1ZIfWs.roa (hash: Ke5x3YeXj0QllIb1M7bwfbR8AV3buXpnmWShNR4GkxI=)
                          41: w8TSE6TWhxYEC3G7690lp4jAZQ0.roa (hash: kKIXoDx5kHVxX6nKrBuw4NO0boqNhoiQXe6SSC6VUsE=)
                          42: xWT0vGiyeYFeT3MlbcSyxAQfDe0.roa (hash: F4j2u+pN0Kwg6R9CG3jmLGvcL6lROMUw46GD8fLeKqU=)
                          43: xZVOAyL775Qzj55wnSDSNO2P908.roa (hash: tBZgDimuQzefEDv90knX4m+kR3YFpLyb41RdW8yjLbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:65:c6:08:4e:65:0f:89:56:48:ef:b8:e9:7b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=3793bd7ac9df51b44b7c1cba26df714cea1a85ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:54:f1:53:4c:69:fd:41:7c:89:04:d2:6f:
                    f9:e2:4e:c4:55:c5:f2:52:11:d3:88:df:7e:db:8e:
                    bf:68:76:fc:05:d9:97:07:a8:d3:b2:ef:50:ea:fd:
                    a5:39:03:17:33:47:cb:3e:d9:a2:34:f4:72:d1:07:
                    78:70:b3:7b:b0:26:7b:d7:1a:75:f2:52:b4:be:9e:
                    28:7f:fe:f9:36:c8:e3:a0:fb:ea:19:3a:2d:15:f2:
                    19:47:86:65:e1:c9:56:1f:63:be:51:d8:c4:c6:01:
                    f7:fc:cf:2a:cd:11:5c:99:16:20:45:d0:50:fc:b6:
                    9e:a9:67:02:90:86:4e:63:5e:40:64:d7:6b:7a:02:
                    0c:eb:76:d3:19:34:01:fa:f3:48:e5:7e:d0:d0:cf:
                    da:86:93:04:1d:0e:0d:1e:df:ed:fb:8c:58:e2:a4:
                    41:0a:f4:91:ac:99:ec:9e:d2:d5:c9:29:1b:07:fb:
                    6d:ab:79:07:cf:fe:08:d0:23:64:5e:d9:2a:66:9c:
                    7e:6e:26:ce:e0:27:19:9a:60:f1:13:1b:6e:64:da:
                    1d:bf:30:ec:59:62:53:ce:22:a1:e9:ad:f7:85:1b:
                    4a:b6:b9:56:6d:03:4c:22:8f:f9:6b:a2:53:34:0c:
                    d8:46:a3:c9:53:ce:13:e0:4d:ff:00:5c:09:9e:9e:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:BD:7A:C9:DF:51:B4:4B:7C:1C:BA:26:DF:71:4C:EA:1A:85:EC
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:37:90:d7:a6:2f:39:72:e9:b0:49:ec:93:94:d2:e3:51:ed:
         cb:68:00:4f:fa:90:91:d4:69:b4:3b:0f:89:17:62:34:45:c0:
         89:21:71:5f:fe:4b:77:40:de:1b:da:02:77:6a:ab:70:c7:2a:
         af:b5:aa:a3:48:b7:d0:2e:a8:22:13:9e:f0:f6:7f:a8:0e:15:
         7a:7c:bd:6c:98:c6:20:df:2e:0b:95:6e:06:43:7c:83:ad:de:
         e1:a4:c8:4f:75:7e:8d:3e:fe:dc:29:52:3b:60:03:88:3e:b9:
         6f:01:b4:77:be:e3:b6:81:2c:a9:08:f7:7d:ea:4d:01:d2:83:
         2a:c2:22:56:06:86:37:8e:7d:fe:b9:67:77:58:21:2f:01:bd:
         71:37:f9:96:33:aa:d3:1b:11:d3:96:7a:9e:55:9f:3f:0f:1f:
         02:88:7e:01:f5:62:57:4e:7a:6c:00:4c:45:9b:7f:d3:22:d6:
         c5:13:fa:42:84:6f:13:e2:d3:51:8e:09:da:ae:24:2a:bc:9a:
         aa:f2:0b:3f:ba:c1:7c:15:d2:ad:6e:df:86:25:66:4e:21:6d:
         43:74:f7:b4:cf:c7:7f:00:70:09:95:92:85:2f:9c:48:99:60:
         f2:f7:00:24:e7:26:c1:f0:c5:9e:3d:59:6e:fe:29:35:24:75:
         41:e3:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----