Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File:                     9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier:          1fChFZ1DFTSqEV3FgzBV1jlFAoip/xJd3We/BMcY87s=
Subject key identifier:   DD:98:E1:2A:D9:FC:63:E6:C2:5E:17:63:95:7E:78:96:D7:BD:0C:BE
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer:       /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial:       01962DF43FB126B8CADF61CD9ED2543B0B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
                          2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: bQI0dsFFqiBAOdbxsacGwIdGgMpW2wlg4go64O8hGOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:b1:26:b8:ca:df:61:cd:9e:d2:54:3b:0b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=dd98e12ad9fc63e6c25e1763957e7896d7bd0cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:f1:9b:a6:53:ff:ec:ec:e2:87:f2:fd:bc:
                    85:77:ae:69:a4:69:70:5b:05:26:68:ef:0b:91:9e:
                    4b:07:e8:65:30:a7:78:d0:8e:1d:08:d5:69:2f:c7:
                    dc:5d:98:bc:fe:c5:fa:fc:c6:57:5b:06:44:d3:57:
                    3a:23:e7:ef:fa:c4:9d:ae:94:b1:ae:ac:e9:1c:35:
                    55:d9:0e:82:89:ad:c3:8a:39:24:f9:82:1e:cb:41:
                    19:04:70:db:6b:de:cd:7c:d5:5d:75:80:5c:18:ab:
                    8e:e3:1b:82:52:45:c8:76:f6:cd:9e:31:b7:0e:00:
                    ed:07:8a:b0:4e:e7:15:ff:25:e9:57:3f:e5:bc:84:
                    95:17:fc:66:79:8c:24:3e:22:01:20:ba:68:57:7d:
                    77:c0:73:9e:69:06:1a:e9:c7:fd:32:4a:24:26:05:
                    77:a4:9c:69:0d:a4:a6:c1:88:b0:1a:16:c9:e3:a1:
                    08:22:28:8d:14:0a:08:93:0c:83:d2:9a:ee:1c:ed:
                    6b:4a:2c:6b:1f:af:0c:4e:c7:04:d7:04:6f:5b:b9:
                    f5:2c:79:1d:8e:68:44:fc:ab:88:b1:49:9f:9c:68:
                    46:bc:86:6e:6e:bd:1d:19:79:aa:6f:28:84:69:9b:
                    c0:6f:06:0c:3a:34:f4:f8:39:f1:96:4b:fa:9c:87:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:98:E1:2A:D9:FC:63:E6:C2:5E:17:63:95:7E:78:96:D7:BD:0C:BE
            X509v3 Authority Key Identifier:
                keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:14:e4:89:71:d2:1d:2c:5f:07:c1:3e:00:1d:07:0b:84:
         dc:97:99:59:62:56:f2:9e:86:88:73:6d:2d:3a:5b:65:a4:97:
         21:29:26:40:6d:bf:90:db:89:be:dc:bd:42:5d:98:26:c9:a5:
         0d:a5:e9:eb:8d:d0:bb:1a:89:17:5d:0e:e5:f4:4b:61:cc:3e:
         0c:6e:63:03:c4:28:e8:8e:30:8c:d9:d1:bd:a6:b8:07:b3:a2:
         cc:f5:64:4c:a7:28:58:41:36:8b:82:20:37:96:34:3d:d5:99:
         16:5c:1a:5f:99:d2:f4:3a:08:0c:95:18:bf:53:5b:aa:2a:fc:
         5c:2a:46:df:f9:a8:5c:09:12:06:f9:52:cb:29:39:73:ab:71:
         83:ad:93:02:c5:ee:85:05:16:fd:d8:15:61:6c:8f:92:b7:de:
         c2:3c:26:81:6a:70:ba:1e:44:58:80:79:dd:55:c2:83:56:f6:
         38:42:10:79:04:b2:f3:e0:31:2c:1e:f2:24:ea:44:8d:bb:a9:
         15:0d:6a:8c:ae:6f:b7:97:3d:f9:e2:31:c4:50:70:ca:8c:3c:
         bf:48:f1:aa:ba:0c:0e:08:90:ee:02:16:60:27:0d:1a:1a:50:
         e8:39:e7:d7:4c:ed:c2:0d:d9:9e:10:f4:83:47:69:3b:6d:28:
         3b:ba:94:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D+xJrjK32HNntJUOwsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTE3MjJlOGJhZGRjMzU4YTE1ODc0MjY1YjQ2Njc0M2U3
MDM2NTYwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EyhkZDk4ZTEyYWQ5ZmM2M2U2YzI1ZTE3NjM5NTdlNzg5NmQ3YmQwY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgrxm6ZT/+zs4ofy/byFd65ppGlw
WwUmaO8LkZ5LB+hlMKd40I4dCNVpL8fcXZi8/sX6/MZXWwZE01c6I+fv+sSdrpSx
rqzpHDVV2Q6Cia3Dijkk+YIey0EZBHDba97NfNVddYBcGKuO4xuCUkXIdvbNnjG3
DgDtB4qwTucV/yXpVz/lvISVF/xmeYwkPiIBILpoV313wHOeaQYa6cf9MkokJgV3
pJxpDaSmwYiwGhbJ46EIIiiNFAoIkwyD0pruHO1rSixrH68MTscE1wRvW7n1LHkd
jmhE/KuIsUmfnGhGvIZubr0dGXmqbyiEaZvAbwYMOjT0+Dnxlkv6nIctqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2Y4SrZ/GPmwl4XY5V+eJbXvQy+MB8GA1UdIwQY
MBaAFPahci6Lrdw1ihWHQmW0ZnQ+cDZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2It
NmUwNzkwNjliNjViLzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2ItNmUwNzkwNjliNjVi
LzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6cU5Ilx
0h0sXwfBPgAdBwuE3JeZWWJW8p6GiHNtLTpbZaSXISkmQG2/kNuJvty9Ql2YJsml
DaXp643QuxqJF10O5fRLYcw+DG5jA8Qo6I4wjNnRvaa4B7OizPVkTKcoWEE2i4Ig
N5Y0PdWZFlwaX5nS9DoIDJUYv1Nbqir8XCpG3/moXAkSBvlSyyk5c6txg62TAsXu
hQUW/dgVYWyPkrfewjwmgWpwuh5EWIB53VXCg1b2OEIQeQSy8+AxLB7yJOpEjbup
FQ1qjK5vt5c9+eIxxFBwyow8v0jxqroMDgiQ7gIWYCcNGhpQ6Dnn10ztwg3ZnhD0
g0dpO20oO7qUNw==
-----END CERTIFICATE-----