Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File:                     2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier:          LDC02hJnh2pyV7nyvQ8kKOcktmUZhHPS+xNBNYpw/c0=
Subject key identifier:   DD:DB:92:17:AB:5E:69:91:92:9A:39:38:F1:57:69:C2:88:DA:DC:E3
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer:       /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial:       01962F06511CE102670AE1F97286CD59C0EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: vr6nWpV2nFUoVhMfdNtNLzFn2hvcHY4KbtjgkRcY9hA=)
                          2: hbj2DwbTO4-tmysNHMyxl2vxyPM.roa (hash: W6g4GPDJbcaX24i4+eflWzczpsq5sBQlzCM+vJ6ScIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:1c:e1:02:67:0a:e1:f9:72:86:cd:59:c0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=dddb9217ab5e6991929a3938f15769c288dadce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9f:0e:9b:2d:70:14:af:c6:3e:da:30:26:36:
                    06:7d:6d:ed:0a:42:cb:b0:1b:75:67:f4:22:fa:8c:
                    2b:89:57:71:fc:8f:bf:07:f9:11:dc:b7:3c:9e:89:
                    d9:50:6d:6e:aa:0a:d8:96:fe:b3:98:5a:ea:b7:43:
                    eb:19:10:8e:b7:c8:42:7d:6e:94:1c:80:35:a0:8a:
                    b4:f3:da:da:97:e0:f9:e5:c2:45:df:a9:ed:a3:9c:
                    e6:f8:75:90:0b:35:7e:5f:5e:4c:a1:33:5a:cb:7d:
                    1c:af:08:7b:f8:01:4a:45:7c:19:79:c0:f5:b7:69:
                    2a:22:35:ed:86:60:d5:16:f7:0a:50:86:8b:58:24:
                    1d:da:0f:80:b6:28:39:65:58:19:0c:d2:6d:b2:df:
                    73:10:7f:81:17:c1:0c:6d:c8:ea:94:01:74:54:6e:
                    2e:e3:3a:d9:6d:a9:27:39:12:30:b3:f6:26:0d:72:
                    79:b3:bd:8e:05:7f:cb:e0:a6:1b:ba:f9:d2:24:74:
                    0f:d6:f8:b3:6f:c3:29:b6:94:d9:71:8e:eb:03:8f:
                    30:4e:e3:29:06:01:25:f6:bc:66:08:b1:77:8e:aa:
                    d9:e3:f2:da:ed:70:5b:50:ae:0c:e9:5e:36:30:2e:
                    9f:e5:75:1a:af:db:ff:eb:9c:15:06:9c:b6:b8:4e:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DB:92:17:AB:5E:69:91:92:9A:39:38:F1:57:69:C2:88:DA:DC:E3
            X509v3 Authority Key Identifier:
                keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:32:bc:1c:20:e4:3a:ab:55:e4:c2:9e:87:83:58:26:59:d8:
         2e:6e:11:6d:c0:72:33:b5:35:ee:7a:93:77:32:d5:e4:06:52:
         19:18:7b:59:33:8e:dc:ec:81:4c:c4:f5:e7:a3:c0:58:46:89:
         23:fe:24:31:d8:6f:19:92:13:26:44:f3:24:d3:d1:e6:4f:3d:
         88:ea:07:b9:33:d8:ee:fe:e7:dc:5b:a3:f0:74:55:c2:51:32:
         b1:b8:6e:dc:49:d4:46:0b:33:eb:2a:25:b0:fc:5e:e6:f3:dc:
         b2:47:99:ee:0b:39:19:da:32:f3:1e:69:71:86:d7:35:29:99:
         24:5b:58:a3:a7:69:77:c0:d1:ac:e3:ac:98:67:31:26:1a:7d:
         bf:49:48:90:0c:f6:36:8c:4c:0f:fd:6b:f0:b4:8c:25:c8:57:
         b0:53:b0:b1:ab:33:0b:70:37:dc:5a:b5:d2:7a:84:20:fa:4f:
         ba:dd:fa:27:90:86:3a:1a:fb:dd:a0:df:6a:83:66:25:ca:87:
         a8:20:67:e3:40:aa:ba:af:a6:ed:3b:99:92:bf:5c:e3:58:8d:
         73:2d:81:ae:78:1f:67:6f:19:da:07:5b:74:e8:f8:a1:b8:d9:
         54:72:3c:5f:8a:22:e0:03:0d:d1:21:ff:56:bf:68:6d:32:96:
         6d:65:a3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlEc4QJnCuH5cobNWcDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmQ3NWM2ZDU0Nzc1MDY0MjI0MWIwNzQ5Y2ZhMDUyYzhj
MTdmMzQwHhcNMjUwNDEzMTIwMTA0WhcNMjUwNDE0MTIwMTA0WjAzMTEwLwYDVQQD
EyhkZGRiOTIxN2FiNWU2OTkxOTI5YTM5MzhmMTU3NjljMjg4ZGFkY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7p8Omy1wFK/GPtowJjYGfW3tCkLL
sBt1Z/Qi+owriVdx/I+/B/kR3Lc8nonZUG1uqgrYlv6zmFrqt0PrGRCOt8hCfW6U
HIA1oIq089ral+D55cJF36nto5zm+HWQCzV+X15MoTNay30crwh7+AFKRXwZecD1
t2kqIjXthmDVFvcKUIaLWCQd2g+Atig5ZVgZDNJtst9zEH+BF8EMbcjqlAF0VG4u
4zrZbaknORIws/YmDXJ5s72OBX/L4KYbuvnSJHQP1vizb8MptpTZcY7rA48wTuMp
BgEl9rxmCLF3jqrZ4/La7XBbUK4M6V42MC6f5XUar9v/65wVBpy2uE6ZIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3bkherXmmRkpo5OPFXacKI2tzjMB8GA1UdIwQY
MBaAFNstdcbVR3UGQiQbB0nPoFLIwX80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgt
YTkwMWUwMzRhZmU1LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYzQwYTktOGIzZi00M2Q2LWEwNzgtYTkwMWUwMzRhZmU1
LzEvMnkxMXh0VkhkUVpDSkJzSFNjLWdVc2pCZnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzK8HCDk
OqtV5MKeh4NYJlnYLm4RbcByM7U17nqTdzLV5AZSGRh7WTOO3OyBTMT156PAWEaJ
I/4kMdhvGZITJkTzJNPR5k89iOoHuTPY7v7n3Fuj8HRVwlEysbhu3EnURgsz6yol
sPxe5vPcskeZ7gs5Gdoy8x5pcYbXNSmZJFtYo6dpd8DRrOOsmGcxJhp9v0lIkAz2
NoxMD/1r8LSMJchXsFOwsaszC3A33Fq10nqEIPpPut36J5CGOhr73aDfaoNmJcqH
qCBn40Cquq+m7TuZkr9c41iNcy2BrngfZ28Z2gdbdOj4objZVHI8X4oi4AMN0SH/
Vr9obTKWbWWjFw==
-----END CERTIFICATE-----