Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File:                     0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier:          c+jZBYUHSD2CLnuTlLZUwX7t3xQSKT4hZabnyTB/Slk=
Subject key identifier:   71:EC:55:A7:B5:9B:E5:02:29:50:E1:4B:E2:14:B0:70:39:7A:CF:58
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer:       /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial:       01962DF4028B379E92D8E713C656DFA01D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: DcCkBKm7Rc6JivlxnNPtTVmG/G3xz4VNMfCqNpZDw88=)
                          2: aLQQDXXyyFCFCxYHC8_say5CLUI.roa (hash: zI2tGfqAmXq7ygJfVvFOBT2dePoqj3hccAoRf3t6VUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:02:8b:37:9e:92:d8:e7:13:c6:56:df:a0:1d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=71ec55a7b59be5022950e14be214b070397acf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:3d:83:f9:8d:70:55:81:e5:ed:d7:42:c4:
                    28:6f:a7:12:46:6b:ae:f4:9c:1c:9e:18:ed:63:29:
                    39:e9:ec:de:82:fa:1a:27:07:65:34:56:41:63:96:
                    89:d3:6e:dc:e9:28:01:70:64:42:b3:58:fc:48:72:
                    8a:47:c5:7c:32:da:36:2a:8c:27:f8:3a:db:58:64:
                    12:56:3c:28:fa:ca:84:4d:80:bb:b7:16:7e:52:fb:
                    50:8b:ee:d4:10:87:1f:60:6e:f5:1a:12:da:43:e3:
                    c2:a9:23:a5:b1:49:87:18:a0:0d:bd:cb:ec:a4:6a:
                    02:16:30:40:1b:20:a0:f3:7a:e6:9c:c1:c6:66:91:
                    df:21:4a:ef:5b:30:6b:c0:7c:4b:c6:c9:96:c9:df:
                    c2:62:cd:75:71:d5:7b:47:80:96:f7:1d:75:cc:06:
                    ce:ba:09:b7:12:9f:30:6e:21:81:6f:76:bc:50:8c:
                    a7:e8:54:5b:d3:76:14:15:cc:1f:3a:97:08:ae:a3:
                    a6:6e:65:c5:e0:50:4d:06:4b:33:f1:07:0e:28:7f:
                    8b:2f:a1:b6:96:4d:db:7e:15:fc:98:6d:39:23:44:
                    9d:a3:b5:68:5b:d6:a3:c2:d0:16:59:d8:41:5b:05:
                    03:7a:60:9e:a3:43:69:6e:09:f1:e7:5d:f7:c0:30:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:55:A7:B5:9B:E5:02:29:50:E1:4B:E2:14:B0:70:39:7A:CF:58
            X509v3 Authority Key Identifier:
                keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:6b:79:fb:74:c2:c6:ea:3e:96:da:db:02:8c:07:9d:b0:
         73:29:c7:a0:b4:70:c5:dd:c8:97:b3:23:f3:2e:f1:34:52:71:
         14:cc:95:40:1b:a9:43:32:d7:06:b0:2a:95:aa:f4:e2:b3:00:
         83:97:35:5c:2b:5d:42:8f:47:12:8e:8f:98:98:cb:aa:0c:97:
         37:aa:c9:d7:63:1c:25:1f:41:14:da:45:28:7b:c4:67:37:e7:
         6b:ac:70:7e:8a:32:6e:af:2b:62:d7:f8:2a:5e:5e:4f:97:1f:
         f4:a9:f0:69:6a:aa:e1:aa:f4:1a:fd:d6:45:f9:a0:e9:4f:63:
         ca:d5:95:f2:bc:9c:c2:5b:4c:28:ae:b0:37:b5:36:a1:00:19:
         39:92:af:3b:c6:58:b3:a3:30:76:30:3f:54:66:d9:cb:17:0f:
         56:7c:fb:9b:20:0b:71:18:03:86:b7:e1:5b:40:3f:62:63:6b:
         c1:87:39:30:1f:3e:36:90:26:86:91:08:1e:fd:ee:3a:8d:22:
         e8:76:81:a5:a0:ea:72:bb:b1:0a:cb:ab:38:28:82:aa:30:a2:
         5b:e8:de:06:3a:a7:d9:64:eb:0e:42:2f:02:c8:83:99:fd:ba:
         73:8e:b6:2d:a2:c5:dd:3f:5a:ba:63:75:be:87:c4:15:a1:52:
         59:69:df:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9AKLN56S2OcTxlbfoB0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmQ0Yzc1Y2ViZTg5NjE0Y2YyZTdlMmU2MTRjMDM2ZjZm
NTNlZTIwHhcNMjUwNDEzMDcwMTI4WhcNMjUwNDE0MDcwMTI4WjAzMTEwLwYDVQQD
Eyg3MWVjNTVhN2I1OWJlNTAyMjk1MGUxNGJlMjE0YjA3MDM5N2FjZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOA9g/mNcFWB5e3XQsQob6cSRmuu
9JwcnhjtYyk56ezegvoaJwdlNFZBY5aJ027c6SgBcGRCs1j8SHKKR8V8Mto2Kown
+DrbWGQSVjwo+sqETYC7txZ+UvtQi+7UEIcfYG71GhLaQ+PCqSOlsUmHGKANvcvs
pGoCFjBAGyCg83rmnMHGZpHfIUrvWzBrwHxLxsmWyd/CYs11cdV7R4CW9x11zAbO
ugm3Ep8wbiGBb3a8UIyn6FRb03YUFcwfOpcIrqOmbmXF4FBNBksz8QcOKH+LL6G2
lk3bfhX8mG05I0Sdo7VoW9ajwtAWWdhBWwUDemCeo0Npbgnx5133wDAlCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHsVae1m+UCKVDhS+IUsHA5es9YMB8GA1UdIwQY
MBaAFNJtTHXOvolhTPLn4uYUwDb29T7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUt
ODg5MzhiZDUzYzE2LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUtODg5MzhiZDUzYzE2
LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9Freft0
wsbqPpba2wKMB52wcynHoLRwxd3Il7Mj8y7xNFJxFMyVQBupQzLXBrAqlar04rMA
g5c1XCtdQo9HEo6PmJjLqgyXN6rJ12McJR9BFNpFKHvEZzfna6xwfooybq8rYtf4
Kl5eT5cf9KnwaWqq4ar0Gv3WRfmg6U9jytWV8rycwltMKK6wN7U2oQAZOZKvO8ZY
s6MwdjA/VGbZyxcPVnz7myALcRgDhrfhW0A/YmNrwYc5MB8+NpAmhpEIHv3uOo0i
6HaBpaDqcruxCsurOCiCqjCiW+jeBjqn2WTrDkIvAsiDmf26c462LaLF3T9aumN1
vofEFaFSWWnfjw==
-----END CERTIFICATE-----