Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File:                     da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier:          O1BXd+K3RUI6x1E5WToFCVx7zMEOLw4JRfkgk4KT+Jo=
Subject key identifier:   A1:E2:D1:7C:F9:2E:61:84:12:2B:89:35:4B:3D:AE:55:83:47:8A:47
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer:       /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial:       01962DF4265E3F375B171DD7C7CFF423406E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number:          0DD3
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
                          2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: ELFaXqJvwEgVliYx9rSq80bnSZY7kOhwK8iJZWKuW78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:5e:3f:37:5b:17:1d:d7:c7:cf:f4:23:40:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=a1e2d17cf92e6184122b89354b3dae5583478a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:8e:b0:7b:f4:9b:9f:52:b5:b5:22:f9:43:
                    f4:fe:13:3a:b0:0d:35:14:14:18:8a:a3:cb:7d:95:
                    37:92:8a:a5:53:d4:8e:2c:9a:3b:84:0f:b9:b2:db:
                    ab:23:43:34:51:bb:97:21:07:6e:16:f5:93:09:f2:
                    e6:bf:68:cd:a8:99:68:db:fd:d1:d7:25:6a:7b:10:
                    9e:75:58:78:a1:37:f7:77:07:f5:12:b9:8b:7e:ac:
                    12:7f:d1:b1:e9:37:ea:38:ef:d1:f6:71:31:9c:d8:
                    dc:c5:d7:ee:f3:b9:b7:b0:6c:86:c4:0e:65:21:dc:
                    5c:71:35:70:88:8f:08:e2:81:dd:01:01:08:92:1c:
                    18:74:48:fd:03:35:14:0c:0b:20:0c:d7:f7:0a:f1:
                    78:9c:98:d6:7e:0a:1f:2f:98:e0:21:2f:1a:8b:41:
                    9d:5a:8c:d1:3a:f8:4f:88:68:ce:a7:8e:e4:e8:ea:
                    5a:88:ef:76:92:d3:aa:3c:56:0d:8e:13:0d:94:d1:
                    bb:60:84:1c:ae:a2:91:d5:d9:66:0e:f5:9b:2c:7f:
                    9b:e8:54:2e:fe:c7:cb:63:65:a7:84:ad:bb:b6:f8:
                    5f:da:f1:58:75:d2:8a:e4:f1:7f:fd:b7:49:78:15:
                    5d:5b:58:23:f6:96:83:81:e9:83:4e:dc:f1:35:c2:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:D1:7C:F9:2E:61:84:12:2B:89:35:4B:3D:AE:55:83:47:8A:47
            X509v3 Authority Key Identifier:
                keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:0a:07:d0:9a:f6:b9:fe:06:bd:d0:3a:71:b6:87:43:c7:
         81:bd:21:41:01:95:27:13:6f:3b:f2:c1:73:5b:8e:3a:5b:5e:
         70:af:d1:22:6c:45:19:fa:f5:32:f2:af:32:d5:32:09:45:3a:
         44:44:37:04:a0:6c:5f:be:a5:af:9e:2a:c8:6a:7e:4b:cc:2a:
         f5:fc:53:3a:93:30:97:3c:54:da:0c:0b:a1:a3:57:bc:88:7a:
         2d:58:3c:3f:9e:15:77:4f:18:8a:68:b5:ef:31:f5:2c:3f:ce:
         4f:34:58:a4:2b:19:b4:46:89:70:44:3f:39:98:c0:25:1a:75:
         b7:dd:c1:d7:db:9a:c3:91:86:93:a0:04:49:02:28:a0:58:81:
         09:48:5b:e1:cc:85:2a:fe:a9:41:e1:5d:ad:c4:5d:24:54:7f:
         c1:e2:02:4a:34:ee:f4:b2:20:cc:c1:37:c9:cb:e1:d6:f1:57:
         76:c6:d4:40:fc:7f:89:cb:88:f4:9c:b9:29:99:76:b9:d3:57:
         5b:16:ce:bb:26:c4:75:50:5f:ac:bb:a5:2f:a5:fd:fc:dc:ec:
         f6:7e:2b:b1:4c:92:3e:d5:3e:14:c6:a4:23:91:4b:fc:8f:3d:
         87:46:83:b8:70:ae:c2:5c:f2:11:00:9a:b6:26:42:3f:b0:3c:
         24:69:36:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CZePzdbFx3Xx8/0I0BuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YWY0ZTJjMzQ3ODBmM2Q5ZjUxZTgwYTUzYmFjM2JlNmYz
MjU5NDMwHhcNMjUwNDEzMDcwMTM3WhcNMjUwNDE0MDcwMTM3WjAzMTEwLwYDVQQD
EyhhMWUyZDE3Y2Y5MmU2MTg0MTIyYjg5MzU0YjNkYWU1NTgzNDc4YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3iOsHv0m59StbUi+UP0/hM6sA01
FBQYiqPLfZU3koqlU9SOLJo7hA+5sturI0M0UbuXIQduFvWTCfLmv2jNqJlo2/3R
1yVqexCedVh4oTf3dwf1ErmLfqwSf9Gx6TfqOO/R9nExnNjcxdfu87m3sGyGxA5l
IdxccTVwiI8I4oHdAQEIkhwYdEj9AzUUDAsgDNf3CvF4nJjWfgofL5jgIS8ai0Gd
WozROvhPiGjOp47k6OpaiO92ktOqPFYNjhMNlNG7YIQcrqKR1dlmDvWbLH+b6FQu
/sfLY2WnhK27tvhf2vFYddKK5PF//bdJeBVdW1gj9paDgemDTtzxNcIivQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHi0Xz5LmGEEiuJNUs9rlWDR4pHMB8GA1UdIwQY
MBaAFHWvTiw0eA89n1HoClO6w75vMllDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEt
NzUzMzBkNGNlODZlLzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEtNzUzMzBkNGNlODZl
LzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtAKB9Ca
9rn+Br3QOnG2h0PHgb0hQQGVJxNvO/LBc1uOOltecK/RImxFGfr1MvKvMtUyCUU6
REQ3BKBsX76lr54qyGp+S8wq9fxTOpMwlzxU2gwLoaNXvIh6LVg8P54Vd08Yimi1
7zH1LD/OTzRYpCsZtEaJcEQ/OZjAJRp1t93B19uaw5GGk6AESQIooFiBCUhb4cyF
Kv6pQeFdrcRdJFR/weICSjTu9LIgzME3ycvh1vFXdsbUQPx/icuI9Jy5KZl2udNX
WxbOuybEdVBfrLulL6X9/Nzs9n4rsUySPtU+FMakI5FL/I89h0aDuHCuwlzyEQCa
tiZCP7A8JGk2jQ==
-----END CERTIFICATE-----