Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File:                     kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier:          GvYmYDzuRaivxOlZk/FzD9lEMKUTunwn4PtpKbpFajA=
Subject key identifier:   9C:E7:24:42:92:1B:35:21:46:8C:A9:44:D0:86:A0:60:5E:5F:D1:BC
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer:       /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial:       01962DF41F3CA9A12EF9F778EB39A4E72308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
                          2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: +2jh3JjgCajxx2L44tBJpO65crhJjo5FrjYiLCVZ5fc=)
                          3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:3c:a9:a1:2e:f9:f7:78:eb:39:a4:e7:23:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=9ce72442921b3521468ca944d086a0605e5fd1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:ca:30:c1:dc:d9:c6:e5:47:43:8d:87:6e:
                    f2:77:31:72:c6:3c:03:54:62:a1:5d:28:4e:54:db:
                    4a:7e:ef:20:7c:64:4f:6c:72:3c:2d:57:9d:4f:f4:
                    4f:f6:82:49:32:da:e8:d4:a2:76:1e:35:cc:9f:e2:
                    ae:8e:9d:35:40:c4:dd:f3:f3:48:2b:eb:1d:32:4a:
                    d0:49:b8:b2:e1:3e:83:09:69:5e:62:a9:24:50:25:
                    2d:ff:d3:c4:6e:24:6a:8d:6c:01:e0:94:70:63:76:
                    49:04:c6:aa:3b:b8:35:ed:95:08:16:0e:c4:bc:10:
                    df:c6:77:c6:04:e8:46:a9:2e:03:5e:34:1f:4a:4a:
                    1b:38:c5:73:d2:81:7c:4f:25:b6:b1:4b:c6:ad:c1:
                    49:c7:d5:64:b3:dc:70:d7:f8:b9:b7:98:03:66:b6:
                    42:3e:5a:a9:8e:33:18:96:d1:5e:00:ee:c1:6b:4f:
                    99:12:ce:5f:e6:af:41:83:12:63:cf:a4:cf:19:6c:
                    8a:44:8c:83:fa:b0:2b:0d:a8:0c:8a:b3:db:7d:fa:
                    51:6b:aa:d5:c7:eb:8f:e5:6f:d5:f1:82:38:a2:13:
                    39:98:0d:db:41:69:e9:15:f6:66:ca:bf:7f:22:ef:
                    50:03:8d:bb:da:8d:e9:f4:eb:6f:e5:b3:5c:48:5e:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:24:42:92:1B:35:21:46:8C:A9:44:D0:86:A0:60:5E:5F:D1:BC
            X509v3 Authority Key Identifier:
                keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:da:86:4e:68:3a:0a:82:3a:b3:99:af:2f:25:72:c1:47:ea:
         59:f2:19:ee:da:11:90:eb:75:f1:23:6e:ea:13:88:e5:49:01:
         56:55:47:fc:60:35:2c:1e:98:be:5e:93:d9:b3:f8:2e:ae:de:
         ac:c6:d2:65:b8:4f:69:c0:a5:c0:23:12:a1:fa:ce:1f:1c:0b:
         34:8d:1d:7d:b5:af:55:73:3e:92:7b:3a:f1:aa:71:f2:0d:96:
         78:38:34:eb:3e:51:6e:f3:b5:1f:8c:00:a2:79:c8:48:64:21:
         f5:e1:a0:81:c7:59:4b:30:50:89:b7:99:f1:cf:be:b5:2d:7c:
         c8:9a:45:5b:9c:33:88:dd:9a:01:b2:fa:33:ee:6e:4b:7d:82:
         36:46:e3:ab:64:62:0d:09:42:9b:c4:bb:15:03:7e:73:53:4c:
         72:f7:47:b2:aa:37:77:06:a2:9b:c6:b4:78:04:69:e0:16:d2:
         2b:49:1a:f6:cd:e6:80:f5:7f:35:44:2f:e9:35:d0:ee:82:76:
         5a:0f:e0:a9:81:a3:b9:4e:8e:25:e9:75:7c:2a:e1:c5:d1:85:
         f5:74:37:46:6d:60:b3:c5:6b:7b:55:f7:ae:40:31:41:b9:e0:
         10:fd:eb:11:4f:48:08:be:66:8c:67:40:1a:04:2d:05:1c:b2:
         33:7f:2c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B88qaEu+fd46zmk5yMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc2NTM3ZmY3NDU4OTNlMzE0MmZhMDk4NGY0NDliNzI1
YjhmZDMwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg5Y2U3MjQ0MjkyMWIzNTIxNDY4Y2E5NDRkMDg2YTA2MDVlNWZkMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvonKMMHc2cblR0ONh27ydzFyxjwD
VGKhXShOVNtKfu8gfGRPbHI8LVedT/RP9oJJMtro1KJ2HjXMn+Kujp01QMTd8/NI
K+sdMkrQSbiy4T6DCWleYqkkUCUt/9PEbiRqjWwB4JRwY3ZJBMaqO7g17ZUIFg7E
vBDfxnfGBOhGqS4DXjQfSkobOMVz0oF8TyW2sUvGrcFJx9Vks9xw1/i5t5gDZrZC
PlqpjjMYltFeAO7Ba0+ZEs5f5q9BgxJjz6TPGWyKRIyD+rArDagMirPbffpRa6rV
x+uP5W/V8YI4ohM5mA3bQWnpFfZmyr9/Iu9QA4272o3p9Otv5bNcSF4rLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJznJEKSGzUhRoypRNCGoGBeX9G8MB8GA1UdIwQY
MBaAFJD3ZTf/dFiT4xQvoJhPRJtyW4/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2It
N2M2MmQ1YzMxNWJmLzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2ItN2M2MmQ1YzMxNWJm
LzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdqGTmg6
CoI6s5mvLyVywUfqWfIZ7toRkOt18SNu6hOI5UkBVlVH/GA1LB6Yvl6T2bP4Lq7e
rMbSZbhPacClwCMSofrOHxwLNI0dfbWvVXM+kns68apx8g2WeDg06z5RbvO1H4wA
onnISGQh9eGggcdZSzBQibeZ8c++tS18yJpFW5wziN2aAbL6M+5uS32CNkbjq2Ri
DQlCm8S7FQN+c1NMcvdHsqo3dwaim8a0eARp4BbSK0ka9s3mgPV/NUQv6TXQ7oJ2
Wg/gqYGjuU6OJel1fCrhxdGF9XQ3Rm1gs8Vre1X3rkAxQbngEP3rEU9ICL5mjGdA
GgQtBRyyM38sOw==
-----END CERTIFICATE-----