Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File:                     iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier:          BxowRY5qmqu/N/fJM0A3Uq7fXrbZ8glePADzkHOam8s=
Subject key identifier:   87:80:DE:5E:34:E6:49:91:88:1F:77:2F:FA:DF:5C:B1:86:AD:3B:77
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer:       /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial:       01962F3D9ADCE0C72F7A2F902B58BAA4A78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number:          013E
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
                          2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: xseB1DUm+qeV9webt6ubaJb9ShVbHWhI9F9W0nwyADI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:dc:e0:c7:2f:7a:2f:90:2b:58:ba:a4:a7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=8780de5e34e64991881f772ffadf5cb186ad3b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:33:f0:78:26:68:d9:12:fe:46:8d:19:c2:
                    c0:a6:2b:39:8a:e1:eb:f9:3b:3a:ee:a1:db:46:ae:
                    28:7b:33:eb:b0:6c:77:e9:66:99:bd:da:45:00:a2:
                    7f:bd:36:25:5f:93:9d:f2:bc:c5:e1:82:99:32:83:
                    e3:3f:a4:1a:9a:c0:f4:78:d8:2e:b3:ff:9f:87:e5:
                    14:1c:7e:e6:c2:a4:6b:b0:9a:91:0b:77:1c:d2:41:
                    d9:fb:84:14:4e:93:ad:a2:d9:1a:9b:f5:b4:cd:21:
                    82:2c:18:86:82:74:8c:a2:00:99:4a:c5:68:8e:0f:
                    d6:d6:20:98:7e:c7:6e:57:e7:6b:16:72:ae:b5:a8:
                    fd:b8:74:ed:69:cf:2e:f1:d4:6f:1b:fe:33:13:1e:
                    dd:60:7b:bf:98:7c:69:c9:e6:4a:48:e6:91:39:96:
                    4d:fe:64:60:d5:4d:02:de:89:58:6f:b6:54:66:67:
                    e8:f8:9f:c8:ba:c9:dc:d1:14:df:53:85:a9:53:ea:
                    d9:ea:e0:fd:1f:eb:09:6e:a7:b4:b9:a0:69:3d:e3:
                    b2:db:d8:d0:6c:22:50:41:f4:06:78:e2:5d:4e:11:
                    4c:b9:9e:14:ff:f8:9c:46:37:7a:90:f2:e7:9a:59:
                    9d:09:2c:12:df:92:e3:18:6d:b8:9e:11:b2:80:db:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:80:DE:5E:34:E6:49:91:88:1F:77:2F:FA:DF:5C:B1:86:AD:3B:77
            X509v3 Authority Key Identifier:
                keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:ab:9f:59:ce:44:70:9c:22:b7:3f:7c:24:98:8d:d0:e9:
         d3:3f:2e:ea:50:57:15:29:24:43:37:53:97:39:88:4d:aa:88:
         cc:5b:1e:97:fd:9b:5c:de:62:26:19:2f:ce:7f:64:cc:7a:67:
         ca:36:41:7d:72:ce:30:df:cb:93:f7:92:f4:de:3e:3c:82:45:
         e5:dc:f9:bf:73:d7:c6:40:20:86:a0:f9:d2:a5:bd:95:59:da:
         f0:1c:a9:90:cc:f5:e7:94:45:ae:71:89:5a:76:e0:91:0f:ee:
         50:20:e6:51:e6:e3:3f:15:94:a5:7c:15:1c:2c:59:9e:ae:a4:
         56:2a:b0:e1:d2:37:94:fe:70:1a:db:31:99:c8:07:8d:f2:2a:
         1b:9f:d2:56:3e:b8:18:52:84:6c:b5:94:fa:bf:98:fd:75:db:
         cf:db:15:70:5a:6c:26:04:8c:83:54:b8:dd:4a:fd:e6:71:fe:
         a4:be:3c:ce:0f:ac:79:2c:8f:79:73:40:bb:ae:1e:9e:67:46:
         bc:58:f7:f6:6a:0a:7a:db:d8:0a:88:79:42:67:b4:59:30:80:
         bf:2b:98:4b:41:44:cc:fd:f0:91:9f:04:5e:e5:f0:89:3f:26:
         6a:94:8f:e0:51:fe:dc:c7:1a:03:2f:37:50:30:30:9e:6a:60:
         b0:2d:f2:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZrc4Mcvei+QK1i6pKeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWQzZDYwZDkyMDU3ZmYwZmEwMTFmNDUwYzM2NDZlMzUy
ZGE1ZDgwHhcNMjUwNDEzMTMwMTI4WhcNMjUwNDE0MTMwMTI4WjAzMTEwLwYDVQQD
Eyg4NzgwZGU1ZTM0ZTY0OTkxODgxZjc3MmZmYWRmNWNiMTg2YWQzYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDAz8HgmaNkS/kaNGcLApis5iuHr
+Ts67qHbRq4oezPrsGx36WaZvdpFAKJ/vTYlX5Od8rzF4YKZMoPjP6QamsD0eNgu
s/+fh+UUHH7mwqRrsJqRC3cc0kHZ+4QUTpOtotkam/W0zSGCLBiGgnSMogCZSsVo
jg/W1iCYfsduV+drFnKutaj9uHTtac8u8dRvG/4zEx7dYHu/mHxpyeZKSOaROZZN
/mRg1U0C3olYb7ZUZmfo+J/Iusnc0RTfU4WpU+rZ6uD9H+sJbqe0uaBpPeOy29jQ
bCJQQfQGeOJdThFMuZ4U//icRjd6kPLnmlmdCSwS35LjGG24nhGygNsa9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeA3l405kmRiB93L/rfXLGGrTt3MB8GA1UdIwQY
MBaAFIitPWDZIFf/D6AR9FDDZG41LaXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQt
OGQxMWVhZDNhZjhjLzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQtOGQxMWVhZDNhZjhj
LzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4mrn1nO
RHCcIrc/fCSYjdDp0z8u6lBXFSkkQzdTlzmITaqIzFsel/2bXN5iJhkvzn9kzHpn
yjZBfXLOMN/Lk/eS9N4+PIJF5dz5v3PXxkAghqD50qW9lVna8BypkMz155RFrnGJ
WnbgkQ/uUCDmUebjPxWUpXwVHCxZnq6kViqw4dI3lP5wGtsxmcgHjfIqG5/SVj64
GFKEbLWU+r+Y/XXbz9sVcFpsJgSMg1S43Ur95nH+pL48zg+seSyPeXNAu64enmdG
vFj39moKetvYCoh5Qme0WTCAvyuYS0FEzP3wkZ8EXuXwiT8mapSP4FH+3McaAy83
UDAwnmpgsC3yDQ==
-----END CERTIFICATE-----