Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File:                     M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier:          xawgisIyBX1zwwQkh6MmOc5UOKopHgv8PqFjDwI4m/g=
Subject key identifier:   E5:8F:83:23:A6:20:33:6B:B0:90:E9:1E:7E:43:58:9B:A2:A9:6C:FE
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer:       /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial:       01962F06579FA8093D2CC7122BC9592873E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number:          1441
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
                          2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: FR+lk8ldguAvHfCofvX6WY5Psl+P8Vp6nx4SDezguOs=)
                          3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:57:9f:a8:09:3d:2c:c7:12:2b:c9:59:28:73:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=e58f8323a620336bb090e91e7e43589ba2a96cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:54:3c:d8:a3:73:03:6a:93:bf:5b:01:b7:
                    6a:53:7c:25:a2:9c:a5:90:70:a6:a5:56:73:f7:23:
                    af:50:19:dc:c9:a3:0c:08:f8:cc:2c:0c:b8:d3:fc:
                    0c:2e:8a:a6:70:ba:44:5d:79:00:8d:ab:84:41:ba:
                    f8:3e:5a:4a:b5:86:e4:a5:e2:be:38:24:d4:5f:ca:
                    3f:ee:ef:a0:dd:e4:59:53:fd:40:c3:0d:0e:43:6b:
                    48:68:d9:73:24:ad:02:7e:ea:d7:a3:30:39:fa:e8:
                    40:58:7d:ee:a1:eb:ea:3d:43:22:86:4e:d8:b7:76:
                    b8:a4:77:73:e6:ad:34:26:0d:1d:d0:88:f8:84:db:
                    7e:4f:b7:b4:fe:fd:5e:b5:d1:d4:d0:73:30:25:cc:
                    5d:c7:30:98:c1:d1:30:70:2d:fa:4d:11:61:da:e0:
                    47:19:56:7f:73:4f:76:a3:e3:cf:f6:59:5f:cd:a2:
                    16:cc:2a:1e:77:36:9b:c2:10:40:9d:7f:0b:52:ff:
                    c5:9e:ff:ff:45:47:71:97:5d:10:86:b2:0f:d7:25:
                    94:01:4d:f6:a0:7e:bc:b4:cb:38:01:76:71:2e:bc:
                    18:1e:36:b0:76:74:61:b3:ee:a7:c6:ed:e4:bb:b9:
                    35:8d:5a:ac:dd:a8:33:ef:d5:44:d0:fb:77:ec:c5:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:83:23:A6:20:33:6B:B0:90:E9:1E:7E:43:58:9B:A2:A9:6C:FE
            X509v3 Authority Key Identifier:
                keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9d:26:82:9d:ab:30:d6:03:07:35:93:91:8d:73:af:eb:0c:
         a0:11:94:20:eb:66:93:22:5b:3a:3a:5d:6f:98:b3:06:4c:e5:
         1d:50:8f:59:7f:39:78:6a:99:6b:9d:13:36:87:4b:6f:9d:c1:
         2d:56:20:9f:c3:11:3a:38:71:84:30:0c:8d:07:f3:b5:08:6f:
         b1:a0:f0:67:40:37:e9:0b:dd:56:9e:e1:21:2c:67:09:e3:61:
         c0:48:ad:81:9f:1a:52:06:33:59:4f:e4:1d:ed:d4:81:39:04:
         95:56:70:f5:2d:52:49:90:7c:a7:2d:42:62:2b:66:b3:32:58:
         f9:79:5c:a4:67:12:bc:a5:4b:e2:3b:1d:b0:a1:52:b0:1c:92:
         e3:1f:6e:35:e8:89:b1:d5:f3:cb:53:56:b8:33:ca:6f:ee:2d:
         3d:ee:45:2f:3d:3d:28:63:af:fd:1e:7e:02:a8:2a:62:17:1f:
         78:26:01:2b:81:fd:a7:f1:1e:e7:f8:0a:68:18:12:cb:b1:d7:
         cb:13:0c:1b:92:71:ae:8d:8e:a6:ff:1b:a5:48:ba:13:2b:29:
         0d:84:2a:8c:ba:28:95:1a:af:43:f9:59:36:a7:80:4b:fe:88:
         63:dc:0d:40:7e:c1:12:ee:3d:25:bd:b7:64:e2:94:d9:1c:19:
         54:9e:e9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlefqAk9LMcSK8lZKHPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk
MzgzMmUwHhcNMjUwNDEzMTIwMTA2WhcNMjUwNDE0MTIwMTA2WjAzMTEwLwYDVQQD
EyhlNThmODMyM2E2MjAzMzZiYjA5MGU5MWU3ZTQzNTg5YmEyYTk2Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLBUPNijcwNqk79bAbdqU3wlopyl
kHCmpVZz9yOvUBncyaMMCPjMLAy40/wMLoqmcLpEXXkAjauEQbr4PlpKtYbkpeK+
OCTUX8o/7u+g3eRZU/1Aww0OQ2tIaNlzJK0CfurXozA5+uhAWH3uoevqPUMihk7Y
t3a4pHdz5q00Jg0d0Ij4hNt+T7e0/v1etdHU0HMwJcxdxzCYwdEwcC36TRFh2uBH
GVZ/c092o+PP9llfzaIWzCoedzabwhBAnX8LUv/Fnv//RUdxl10QhrIP1yWUAU32
oH68tMs4AXZxLrwYHjawdnRhs+6nxu3ku7k1jVqs3agz79VE0Pt37MVR1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWPgyOmIDNrsJDpHn5DWJuiqWz+MB8GA1UdIwQY
MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt
MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4
LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep0mgp2r
MNYDBzWTkY1zr+sMoBGUIOtmkyJbOjpdb5izBkzlHVCPWX85eGqZa50TNodLb53B
LVYgn8MROjhxhDAMjQfztQhvsaDwZ0A36QvdVp7hISxnCeNhwEitgZ8aUgYzWU/k
He3UgTkElVZw9S1SSZB8py1CYitmszJY+XlcpGcSvKVL4jsdsKFSsByS4x9uNeiJ
sdXzy1NWuDPKb+4tPe5FLz09KGOv/R5+AqgqYhcfeCYBK4H9p/Ee5/gKaBgSy7HX
yxMMG5Jxro2Opv8bpUi6EyspDYQqjLoolRqvQ/lZNqeAS/6IY9wNQH7BEu49Jb23
ZOKU2RwZVJ7pcg==
-----END CERTIFICATE-----