Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File:                     dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier:          jm+96so0RvJ2zR/Sf9lPA2H+d5QPb9B1tdIyN7qQNkM=
Subject key identifier:   50:AA:89:43:E4:49:98:E2:D3:A2:A7:5C:E7:95:59:6D:00:5A:7E:FB
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer:       /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial:       01962F07441F10515B1877AB37413063DFCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number:          1201
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=)
                          2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: da26Iu8ND+lLzNhOIEoocOKWJv4xzKw/W9TWius55i8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:1f:10:51:5b:18:77:ab:37:41:30:63:df:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=50aa8943e44998e2d3a2a75ce795596d005a7efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:19:ad:3e:87:66:f5:82:8b:b7:95:66:f5:
                    02:fc:ca:fa:68:5e:86:94:21:cb:56:f6:c3:0b:9a:
                    0f:3f:95:dc:0b:10:54:da:2b:05:c0:5a:e5:a0:1c:
                    80:b3:0f:40:28:5f:75:23:7e:3c:91:9d:0a:0e:4e:
                    99:18:a1:c9:81:79:3c:14:2d:39:b8:a0:6d:9e:db:
                    2e:a5:b7:ed:bb:d4:f3:cf:b7:f7:bd:d4:9b:e3:59:
                    96:47:de:33:48:39:7d:c6:e5:1d:1e:f0:27:69:c8:
                    31:65:8a:9a:db:1f:24:77:3e:ef:6c:0a:3c:28:f8:
                    a2:e9:fd:a9:ed:aa:8f:0f:5c:18:a2:6b:6d:29:4d:
                    81:21:43:72:00:ee:0d:ae:0f:6b:26:f9:cf:39:1c:
                    3b:f5:fc:b0:30:fa:62:ef:06:03:4f:41:55:ba:59:
                    4b:36:06:2a:be:cd:7e:b5:cf:eb:07:50:5a:ac:7c:
                    69:48:ef:2d:6b:ba:bc:44:4e:90:c4:af:c7:34:c4:
                    7e:07:12:72:de:e6:b1:ca:6e:04:0c:99:cf:05:15:
                    b6:1a:c3:bb:b2:26:77:f2:84:27:69:32:13:35:11:
                    a4:09:7d:4c:48:6b:55:10:f5:e0:5c:32:a8:00:19:
                    f4:0c:d4:80:61:55:8a:78:a6:08:c8:3c:bb:51:84:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:89:43:E4:49:98:E2:D3:A2:A7:5C:E7:95:59:6D:00:5A:7E:FB
            X509v3 Authority Key Identifier:
                keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d8:bb:a3:ee:19:4f:9d:53:b8:fe:b9:8d:b4:93:ac:ad:a2:
         76:4f:dd:0f:d0:2c:15:a5:08:bb:0a:e9:5f:f0:09:68:06:22:
         10:4e:02:47:45:35:f3:d2:c2:59:1e:38:d3:5f:ee:32:b8:70:
         a9:7b:1b:79:b8:6c:ca:14:c9:8d:49:0f:36:9d:12:c5:0b:32:
         89:c0:42:69:3c:d1:3e:67:35:cc:85:4b:4e:de:63:0f:6a:a1:
         a5:93:b8:a9:7c:e3:93:6e:d4:76:1b:a3:c1:66:b5:fe:df:5f:
         3e:04:b6:85:6e:b0:c5:2b:d3:2b:2b:02:28:67:e5:76:44:40:
         65:53:88:af:36:99:ec:6c:27:5e:47:87:5c:4f:55:30:01:7e:
         dd:2e:f8:79:e7:18:31:3d:dc:42:39:c3:89:f3:f3:ec:e9:26:
         17:af:36:35:b6:cf:98:6c:7d:a1:70:1b:e6:16:28:a4:e1:a4:
         05:03:31:9c:48:73:8f:7a:7d:d8:46:70:91:7b:dc:a8:5e:f5:
         89:09:a2:59:83:a1:0a:fc:82:b6:10:3b:c8:13:36:57:e8:0a:
         5e:e9:61:b2:d9:da:b4:f3:cb:d4:da:4a:be:d0:2a:f9:5b:4f:
         e6:66:00:ca:3a:6a:22:72:7b:da:19:a5:e1:a3:6f:ea:30:2e:
         52:bf:af:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0QfEFFbGHerN0EwY9/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2
YmU4NjAwHhcNMjUwNDEzMTIwMjA3WhcNMjUwNDE0MTIwMjA3WjAzMTEwLwYDVQQD
Eyg1MGFhODk0M2U0NDk5OGUyZDNhMmE3NWNlNzk1NTk2ZDAwNWE3ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0ZrT6HZvWCi7eVZvUC/Mr6aF6G
lCHLVvbDC5oPP5XcCxBU2isFwFrloByAsw9AKF91I348kZ0KDk6ZGKHJgXk8FC05
uKBtntsupbftu9Tzz7f3vdSb41mWR94zSDl9xuUdHvAnacgxZYqa2x8kdz7vbAo8
KPii6f2p7aqPD1wYomttKU2BIUNyAO4Nrg9rJvnPORw79fywMPpi7wYDT0FVullL
NgYqvs1+tc/rB1BarHxpSO8ta7q8RE6QxK/HNMR+BxJy3uaxym4EDJnPBRW2GsO7
siZ38oQnaTITNRGkCX1MSGtVEPXgXDKoABn0DNSAYVWKeKYIyDy7UYTXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCqiUPkSZji06KnXOeVWW0AWn77MB8GA1UdIwQY
MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt
Mzk1NmU1NmMxODM1LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1
LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNi7o+4Z
T51TuP65jbSTrK2idk/dD9AsFaUIuwrpX/AJaAYiEE4CR0U189LCWR4401/uMrhw
qXsbebhsyhTJjUkPNp0SxQsyicBCaTzRPmc1zIVLTt5jD2qhpZO4qXzjk27Udhuj
wWa1/t9fPgS2hW6wxSvTKysCKGfldkRAZVOIrzaZ7GwnXkeHXE9VMAF+3S74eecY
MT3cQjnDifPz7OkmF682NbbPmGx9oXAb5hYopOGkBQMxnEhzj3p92EZwkXvcqF71
iQmiWYOhCvyCthA7yBM2V+gKXulhstnatPPL1NpKvtAq+VtP5mYAyjpqInJ72hml
4aNv6jAuUr+v4A==
-----END CERTIFICATE-----