Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          y2styJqcV33uZq1Yb/Kpkend6BX53fEK2izB0NyGb04=
Subject key identifier:   B2:76:99:36:10:0B:AE:80:5F:BE:38:42:C2:F8:96:52:DD:D8:C1:5F
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       01962E9893626C60C1FC63B60946656BAB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
                          2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: 6pZrdIrZfMCzDxbionLe2t8SUOgsFvU4dacI0UBnvK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:62:6c:60:c1:fc:63:b6:09:46:65:6b:ab:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=b2769936100bae805fbe3842c2f89652ddd8c15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:74:25:bb:8d:3a:60:42:6c:78:e4:e5:77:
                    da:1f:cd:82:83:25:49:1e:5e:43:1a:49:d5:2b:cc:
                    0e:32:12:99:d2:77:eb:1b:b0:79:d2:c8:38:1c:d2:
                    15:94:9c:bf:5f:3e:5d:30:2c:65:56:b7:a1:81:41:
                    e4:15:79:40:c4:c8:b2:d0:da:d9:d7:58:06:b6:b9:
                    0b:2a:82:da:78:21:10:48:74:e7:ec:b7:b3:3d:d7:
                    a9:37:3d:fb:05:e8:0c:fe:c8:c7:a8:08:ef:33:fc:
                    89:ae:78:26:10:22:0c:72:1e:5e:bd:49:5b:1d:b2:
                    ef:b6:1f:04:a3:3c:b8:5c:eb:85:a0:68:27:55:1f:
                    f2:a4:5d:a6:23:e7:c8:49:dc:2f:3a:98:2e:44:67:
                    a7:2f:c1:c3:34:0f:87:39:fd:1a:bb:bd:05:39:12:
                    b6:6a:91:3a:d5:ab:fb:4b:00:a9:9b:3a:19:a9:10:
                    44:95:ab:7d:53:af:00:50:e2:4d:85:31:67:7b:6d:
                    6a:5f:6c:47:92:8a:2d:03:97:ff:fb:64:65:89:30:
                    eb:54:52:bf:a2:aa:85:ba:17:23:ae:9d:26:e1:1b:
                    8d:c3:53:4a:d7:ed:dc:89:4b:bb:28:20:1f:cd:59:
                    e8:c3:e3:e1:ee:95:40:2f:56:61:f0:ce:50:51:ee:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:99:36:10:0B:AE:80:5F:BE:38:42:C2:F8:96:52:DD:D8:C1:5F
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:70:ba:85:a5:ab:02:89:7f:2b:e7:76:8e:89:b9:70:af:
         26:bc:9b:ee:6d:e4:60:54:df:e7:52:61:04:3b:fa:51:d1:0e:
         b2:55:f2:16:f9:75:87:d6:10:1d:ad:95:b4:8f:32:fb:95:71:
         db:c8:c5:9a:25:74:b6:33:d7:27:ca:23:14:16:4d:ed:99:08:
         c7:fe:b0:7d:7b:7e:8e:49:c7:bb:c5:a0:5e:58:55:04:5d:2a:
         88:0a:ba:74:16:d0:74:63:bc:04:2a:6b:76:8c:58:65:6d:db:
         46:c8:8a:ca:a5:99:41:56:ac:d3:74:ec:9f:ad:4c:92:1b:aa:
         53:34:4a:07:14:e6:d5:07:1c:28:6d:83:25:0e:50:03:1f:32:
         c1:38:06:b3:8f:2b:a5:b3:0a:73:1b:c0:39:28:62:cd:23:45:
         66:ef:e1:69:29:34:90:be:17:18:04:09:ad:bd:0b:46:e7:1c:
         d0:68:73:3f:6e:15:c8:e2:78:e7:59:26:65:a3:55:d7:7c:84:
         fd:f0:50:b3:20:a6:53:65:00:73:fc:49:48:09:e0:0f:25:88:
         b7:b7:49:7f:e7:12:1b:60:16:85:0d:92:af:42:e3:f2:16:09:
         ce:84:83:95:c7:7a:ac:6e:71:4e:f3:94:d8:8e:7f:95:02:1b:
         8f:87:75:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJNibGDB/GO2CUZla6tJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl
NWUwZTgwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
EyhiMjc2OTkzNjEwMGJhZTgwNWZiZTM4NDJjMmY4OTY1MmRkZDhjMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArul0JbuNOmBCbHjk5XfaH82CgyVJ
Hl5DGknVK8wOMhKZ0nfrG7B50sg4HNIVlJy/Xz5dMCxlVrehgUHkFXlAxMiy0NrZ
11gGtrkLKoLaeCEQSHTn7LezPdepNz37BegM/sjHqAjvM/yJrngmECIMch5evUlb
HbLvth8Eozy4XOuFoGgnVR/ypF2mI+fISdwvOpguRGenL8HDNA+HOf0au70FORK2
apE61av7SwCpmzoZqRBElat9U68AUOJNhTFne21qX2xHkootA5f/+2RliTDrVFK/
oqqFuhcjrp0m4RuNw1NK1+3ciUu7KCAfzVnow+Ph7pVAL1Zh8M5QUe7obwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ2mTYQC66AX744QsL4llLd2MFfMB8GA1UdIwQY
MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt
ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1
LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB51wuoWl
qwKJfyvndo6JuXCvJryb7m3kYFTf51JhBDv6UdEOslXyFvl1h9YQHa2VtI8y+5Vx
28jFmiV0tjPXJ8ojFBZN7ZkIx/6wfXt+jknHu8WgXlhVBF0qiAq6dBbQdGO8BCpr
doxYZW3bRsiKyqWZQVas03Tsn61MkhuqUzRKBxTm1QccKG2DJQ5QAx8ywTgGs48r
pbMKcxvAOShizSNFZu/haSk0kL4XGAQJrb0LRucc0GhzP24VyOJ451kmZaNV13yE
/fBQsyCmU2UAc/xJSAngDyWIt7dJf+cSG2AWhQ2Sr0Lj8hYJzoSDlcd6rG5xTvOU
2I5/lQIbj4d1bw==
-----END CERTIFICATE-----