Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File:                     dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier:          gEdbpV1Vv4XGTFMfM/C6isYWvkukQi3yMJnvAoX470g=
Subject key identifier:   DE:9F:D1:38:09:86:DB:28:D9:52:06:EE:38:84:CA:29:CD:5C:D9:1F
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer:       /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial:       01962F745209A5646A0FAEF13EA43086C33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number:          0132
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: CJn8O4r7UU2AwSd4fUXa2FW2z/GuJaT+LjZAWg44v2g=)
                          2: jugqzSPR-0ldHom0_xkR53XyLHs.roa (hash: +3psaXdJuyPggmQWBeIUw9hKrdTT6O3Z6jepxI5OERo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:09:a5:64:6a:0f:ae:f1:3e:a4:30:86:c3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=de9fd1380986db28d95206ee3884ca29cd5cd91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:58:ff:29:43:d2:b8:ce:21:71:8d:8a:40:
                    1f:93:cc:28:39:a6:ed:e7:57:f1:32:89:26:61:97:
                    11:c6:c6:db:66:cf:7f:86:54:bd:76:db:1a:48:4d:
                    5b:45:2e:3a:79:b6:05:0d:04:84:9a:ba:84:9e:e3:
                    c9:98:6e:51:71:0b:0b:32:18:a9:62:ff:99:67:ca:
                    61:b0:52:80:da:67:08:f9:e0:27:ba:05:6d:ed:fb:
                    28:dc:5e:7a:e5:3a:e2:c0:84:98:36:f0:ed:58:15:
                    92:6c:69:4d:78:ed:3d:41:29:8c:82:e7:81:04:8b:
                    8b:08:72:33:57:49:a3:98:1c:04:c5:4d:80:3e:26:
                    e9:3f:75:58:55:31:0c:52:a8:18:6f:64:b4:b7:34:
                    4d:f8:76:7c:eb:fb:2a:57:47:63:8c:a0:47:d3:c8:
                    a6:94:ff:f6:ed:5c:d0:3c:86:ed:16:48:b6:62:42:
                    c9:92:d6:46:35:5f:c0:1e:5b:38:32:4c:a2:c4:34:
                    0b:f4:80:09:54:39:1d:5b:53:15:37:b9:55:38:ae:
                    8a:6d:5f:05:21:c2:3d:3f:d0:4b:1f:da:c4:1b:c0:
                    8f:1e:98:ed:43:78:2f:c1:8e:f3:39:2a:4f:62:07:
                    69:bd:47:1a:e4:64:7a:71:dd:57:21:8f:cc:e3:01:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9F:D1:38:09:86:DB:28:D9:52:06:EE:38:84:CA:29:CD:5C:D9:1F
            X509v3 Authority Key Identifier:
                keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:cc:a6:02:70:5c:36:e8:80:d6:30:d7:bd:52:b3:80:ed:
         c5:c8:b5:50:93:7c:31:4b:df:af:10:26:93:a9:65:69:4e:53:
         0c:e9:cf:0e:bb:f9:a9:6a:c8:e4:b3:af:1e:ee:f3:e8:5b:3c:
         ec:52:b7:a7:3e:dc:3a:3a:10:37:39:36:f8:0d:b5:2b:bf:ff:
         28:51:ee:a0:d0:2f:d3:ce:f9:14:e2:77:7a:50:b9:ff:80:43:
         3e:e3:07:d7:75:02:b8:3c:81:12:9b:0b:1d:26:ac:6f:c5:21:
         41:e9:9d:94:e1:6c:df:30:1b:c9:d2:1c:d4:68:15:b2:5b:51:
         48:7f:6c:74:ab:f1:82:f1:79:03:78:21:37:ef:fb:d6:ba:34:
         1f:1a:ab:cf:f4:64:d0:0b:81:d3:ac:bd:a0:71:bf:de:e1:ff:
         8c:b7:29:72:fd:a0:e6:24:60:f7:30:71:84:d8:58:71:f5:56:
         80:ea:e3:34:87:6d:ad:8c:79:f9:9a:3f:db:1f:0b:21:ae:cc:
         7e:ef:3f:e1:16:9a:4b:23:2b:91:ee:4e:40:be:5d:42:60:a3:
         02:97:6c:3a:a5:2b:71:35:6f:84:3d:7d:01:cd:60:8a:d6:1a:
         85:86:5a:c6:6a:bc:b2:6a:7d:d6:95:4c:8a:b0:f5:a3:67:1a:
         a8:f6:97:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFIJpWRqD67xPqQwhsM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw
YWMxN2IwHhcNMjUwNDEzMTQwMTE0WhcNMjUwNDE0MTQwMTE0WjAzMTEwLwYDVQQD
EyhkZTlmZDEzODA5ODZkYjI4ZDk1MjA2ZWUzODg0Y2EyOWNkNWNkOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvExY/ylD0rjOIXGNikAfk8woOabt
51fxMokmYZcRxsbbZs9/hlS9dtsaSE1bRS46ebYFDQSEmrqEnuPJmG5RcQsLMhip
Yv+ZZ8phsFKA2mcI+eAnugVt7fso3F565TriwISYNvDtWBWSbGlNeO09QSmMgueB
BIuLCHIzV0mjmBwExU2APibpP3VYVTEMUqgYb2S0tzRN+HZ86/sqV0djjKBH08im
lP/27VzQPIbtFki2YkLJktZGNV/AHls4MkyixDQL9IAJVDkdW1MVN7lVOK6KbV8F
IcI9P9BLH9rEG8CPHpjtQ3gvwY7zOSpPYgdpvUca5GR6cd1XIY/M4wF0KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6f0TgJhtso2VIG7jiEyinNXNkfMB8GA1UdIwQY
MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt
MDFlNzEzMWFlMWRlLzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl
LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8HMpgJw
XDbogNYw171Ss4Dtxci1UJN8MUvfrxAmk6llaU5TDOnPDrv5qWrI5LOvHu7z6Fs8
7FK3pz7cOjoQNzk2+A21K7//KFHuoNAv0875FOJ3elC5/4BDPuMH13UCuDyBEpsL
HSasb8UhQemdlOFs3zAbydIc1GgVsltRSH9sdKvxgvF5A3ghN+/71ro0Hxqrz/Rk
0AuB06y9oHG/3uH/jLcpcv2g5iRg9zBxhNhYcfVWgOrjNIdtrYx5+Zo/2x8LIa7M
fu8/4RaaSyMrke5OQL5dQmCjApdsOqUrcTVvhD19Ac1gitYahYZaxmq8smp91pVM
irD1o2caqPaXjA==
-----END CERTIFICATE-----