Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File:                     0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier:          iMxWIk7GJsqZFX81yzTpsnChXQxuPuOaK9TEV+1NST4=
Subject key identifier:   32:67:02:46:D3:CA:41:9D:B1:92:E1:A2:4D:0F:16:AA:91:CC:66:C4
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer:       /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial:       01962F06563E4E53CD8DF3824F5268957F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: wKj6oLTT207+PRr5u/C5FiBzRjnD8rAxEeNciWawy2A=)
                          2: ydYjDF75mH7bfqoCwNzPOqna2dk.roa (hash: sywFQUytXwSuvYG2++Bqw/RDZKafPOlycszuwNNtgdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:56:3e:4e:53:cd:8d:f3:82:4f:52:68:95:7f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=32670246d3ca419db192e1a24d0f16aa91cc66c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:fb:7b:8c:a7:09:23:ee:c0:e0:85:dc:ce:
                    4d:1e:02:4e:7f:cd:38:fa:e6:ca:e7:2a:1b:86:be:
                    3f:32:a6:40:34:84:18:90:e8:bc:7c:b5:d6:d1:04:
                    dd:c1:0d:90:f2:68:18:0a:0d:8e:de:a2:23:0c:6c:
                    0b:9d:1c:db:e5:2a:b5:c9:ff:e6:e1:2b:68:49:2e:
                    d4:c5:ed:2e:7d:bb:01:8b:9c:3a:d1:a6:db:15:bd:
                    74:f1:8e:c7:63:9c:68:60:b7:25:40:f2:70:14:b9:
                    16:a8:73:5c:84:b5:e4:27:e8:63:fb:e7:cc:22:11:
                    12:0a:14:a8:7f:73:50:23:ae:ac:62:26:fa:42:17:
                    de:b2:61:0c:02:43:16:2e:ff:eb:2e:ec:b3:ce:af:
                    e9:b1:be:f2:76:da:df:8b:75:41:d4:22:ec:07:f6:
                    fb:a6:2a:e7:93:9f:0b:47:e5:93:25:70:ee:b0:6d:
                    c4:a4:fb:3e:e3:3c:77:1b:70:c5:47:ff:8a:b5:f8:
                    0c:5c:b9:80:ba:61:31:b2:3e:64:55:4c:b4:0a:06:
                    e9:42:5a:45:27:1b:23:0d:28:c7:17:06:dd:6f:a6:
                    09:6b:bc:fa:f7:1f:71:35:31:4c:e5:aa:c0:35:7f:
                    97:82:d9:25:3e:dd:da:83:ba:ed:b6:cb:85:bc:ba:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:67:02:46:D3:CA:41:9D:B1:92:E1:A2:4D:0F:16:AA:91:CC:66:C4
            X509v3 Authority Key Identifier:
                keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:70:bf:30:14:68:84:25:f6:9b:f5:78:a0:5e:ec:b9:b3:29:
         fc:04:27:31:e6:35:4f:d4:25:71:ac:67:e1:1d:ae:69:be:7e:
         d3:0d:37:9f:04:a8:07:75:2c:b9:58:e1:af:1b:52:92:a8:87:
         41:50:cb:df:85:02:ef:1a:cd:24:cb:b9:55:14:48:87:5e:56:
         d2:97:6b:88:ec:2e:ca:88:09:cc:eb:3c:4b:f7:44:65:09:9e:
         24:74:8b:3b:76:72:f8:19:47:6d:e1:16:53:29:1c:00:3d:40:
         9f:10:30:f7:d3:ca:9f:72:b4:97:b7:6b:cd:b2:f6:30:03:55:
         88:68:16:cf:40:d9:56:e6:6d:0d:3a:79:db:73:38:25:19:d8:
         49:ca:ed:82:d4:21:29:2c:53:06:e6:f0:b4:d1:cb:92:3e:59:
         c3:68:95:fb:62:a5:a8:fe:6b:8e:a6:91:82:66:4c:3f:cd:35:
         d6:d8:0e:f2:27:e9:a9:5e:c9:48:c6:99:9d:6a:43:95:6d:77:
         2d:01:cd:a9:2b:22:ff:89:b9:f0:01:39:61:d8:b6:7a:11:e5:
         87:83:60:10:a5:6a:18:72:4f:7c:5e:2e:73:5a:48:7f:15:00:
         b7:e0:3e:93:f9:fe:1a:25:20:d0:3e:0b:90:4f:fc:c7:cc:d0:
         3d:c6:11:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlY+TlPNjfOCT1JolX9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjNiOGQ0NjIxMzQ2NjdlYzZhOWQxZTE1NGU1YzdmMDU5
NjY2MmMwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
EygzMjY3MDI0NmQzY2E0MTlkYjE5MmUxYTI0ZDBmMTZhYTkxY2M2NmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8P7e4ynCSPuwOCF3M5NHgJOf804
+ubK5yobhr4/MqZANIQYkOi8fLXW0QTdwQ2Q8mgYCg2O3qIjDGwLnRzb5Sq1yf/m
4StoSS7Uxe0ufbsBi5w60abbFb108Y7HY5xoYLclQPJwFLkWqHNchLXkJ+hj++fM
IhESChSof3NQI66sYib6QhfesmEMAkMWLv/rLuyzzq/psb7ydtrfi3VB1CLsB/b7
pirnk58LR+WTJXDusG3EpPs+4zx3G3DFR/+KtfgMXLmAumExsj5kVUy0CgbpQlpF
JxsjDSjHFwbdb6YJa7z69x9xNTFM5arANX+XgtklPt3ag7rttsuFvLpm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJnAkbTykGdsZLhok0PFqqRzGbEMB8GA1UdIwQY
MBaAFNEjuNRiE0Zn7GqdHhVOXH8FlmYsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNPNDFHSVRSbWZzYXAwZUZVNWNmd1dXWml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZDkwM2YtMTgzMS00ZDAzLWFhYjQt
ODFhZjdjNjU3ZTA1LzEvMFNPNDFHSVRSbWZzYXAwZUZVNWNmd1dXWml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZDkwM2YtMTgzMS00ZDAzLWFhYjQtODFhZjdjNjU3ZTA1
LzEvMFNPNDFHSVRSbWZzYXAwZUZVNWNmd1dXWml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHC/MBRo
hCX2m/V4oF7subMp/AQnMeY1T9Qlcaxn4R2uab5+0w03nwSoB3UsuVjhrxtSkqiH
QVDL34UC7xrNJMu5VRRIh15W0pdriOwuyogJzOs8S/dEZQmeJHSLO3Zy+BlHbeEW
UykcAD1AnxAw99PKn3K0l7drzbL2MANViGgWz0DZVuZtDTp523M4JRnYScrtgtQh
KSxTBubwtNHLkj5Zw2iV+2KlqP5rjqaRgmZMP8011tgO8ifpqV7JSMaZnWpDlW13
LQHNqSsi/4m58AE5Ydi2ehHlh4NgEKVqGHJPfF4uc1pIfxUAt+A+k/n+GiUg0D4L
kE/8x8zQPcYRQg==
-----END CERTIFICATE-----