Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          yhSnFTPCmyBZ2F5Z6Lk+se/Xb5TWBqMPlUznV38NDL0=
Subject key identifier:   79:2E:DC:9F:65:92:E2:4A:68:BB:71:8F:DD:1F:C8:54:89:15:4A:40
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       01962E993D9BCBF8B9B94DC7BD1150F3E452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          04A1
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: PFf+uVWKISo8BC6QaLtiK+CmKY9QavCFUifAkFO3gSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3d:9b:cb:f8:b9:b9:4d:c7:bd:11:50:f3:e4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=792edc9f6592e24a68bb718fdd1fc85489154a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:f3:ea:2c:5d:f3:69:8c:f7:7f:43:8d:98:
                    17:c7:f4:fa:eb:1d:19:85:08:13:54:02:61:b3:86:
                    92:ce:28:7a:c1:98:86:20:45:cb:64:4c:b5:fd:c5:
                    cb:fa:02:6d:42:ca:99:89:d8:87:0a:90:3b:08:12:
                    2a:16:1f:7e:8f:43:0a:26:7a:fe:a4:93:9c:4e:86:
                    8e:ac:af:c6:8a:91:48:29:52:96:10:75:0a:f3:57:
                    b9:f2:95:62:e7:da:db:59:7a:9f:99:8b:c2:b0:f1:
                    c4:33:a6:b5:1e:7b:34:72:80:5d:b7:4c:bf:e7:79:
                    3c:74:33:5a:c2:ce:b0:9d:c6:59:c3:32:2d:d2:15:
                    f4:c8:f6:f0:5f:cd:1f:f3:dd:b0:2f:c7:d8:76:c2:
                    c4:dc:ad:7f:4c:86:e6:1c:83:3d:ff:f0:b3:9e:40:
                    a7:19:09:79:4b:b9:47:65:fa:26:13:04:0f:b5:64:
                    3d:60:ef:2d:5d:88:8d:dd:4b:a9:a0:70:30:df:45:
                    61:21:04:f8:86:c7:1f:71:8e:79:1f:1f:b7:8e:cf:
                    a9:2d:dc:06:cc:c3:a0:b2:02:38:f4:4b:70:88:f4:
                    ea:ae:1f:c3:8b:78:dd:b0:67:51:36:f3:76:30:42:
                    29:c0:b6:85:1b:74:d8:b6:df:36:e3:a7:0e:78:e1:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:DC:9F:65:92:E2:4A:68:BB:71:8F:DD:1F:C8:54:89:15:4A:40
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:40:b0:c5:43:c7:a5:3d:8c:0c:cd:b7:30:ad:cb:93:08:cd:
         7a:d9:bf:cb:97:ad:05:ac:bd:a0:57:82:46:a1:0f:40:02:6b:
         3d:b5:12:a7:1b:a0:b9:ee:34:8d:f4:2a:59:1d:cb:1b:63:f0:
         6f:77:0b:1d:68:86:4a:d3:2f:b6:6e:f9:14:ac:89:cf:7c:ea:
         b2:bd:ca:1f:7a:3d:78:86:d3:e8:8c:3b:09:e8:db:bf:b4:0d:
         2f:3b:40:6b:66:19:7a:72:68:e6:26:ec:3b:a5:59:eb:90:a7:
         ab:3e:4e:21:c0:0e:68:a8:96:d6:8c:80:18:c8:a6:78:e8:21:
         5b:56:d7:6d:57:65:93:dc:9d:b0:e5:ea:af:7f:e7:06:04:48:
         80:58:eb:10:de:fb:55:00:b0:25:d0:5a:bb:29:bd:2e:13:e3:
         63:14:a0:3b:23:cc:94:b6:97:4f:b5:29:e1:41:50:ea:13:a6:
         a0:e8:62:9d:82:c2:69:3a:8e:b2:2d:34:62:27:7b:1c:bf:07:
         36:1c:36:d0:ab:d3:54:08:77:14:72:7c:a0:ed:e0:86:db:e2:
         13:f4:c9:ce:cc:50:bc:6f:aa:4a:ae:09:dc:4e:f6:29:16:52:
         9c:06:27:73:3e:f1:80:1a:a2:4d:49:a6:0a:af:8e:e3:d9:49:
         7b:04:4f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumT2by/i5uU3HvRFQ8+RSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWVmMjA5M2RhMTVlZWM5MGVmYjgzN2I5NTAxNjQ2Njlm
NjE5OGIwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
Eyg3OTJlZGM5ZjY1OTJlMjRhNjhiYjcxOGZkZDFmYzg1NDg5MTU0YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGLz6ixd82mM939DjZgXx/T66x0Z
hQgTVAJhs4aSzih6wZiGIEXLZEy1/cXL+gJtQsqZidiHCpA7CBIqFh9+j0MKJnr+
pJOcToaOrK/GipFIKVKWEHUK81e58pVi59rbWXqfmYvCsPHEM6a1Hns0coBdt0y/
53k8dDNaws6wncZZwzIt0hX0yPbwX80f892wL8fYdsLE3K1/TIbmHIM9//CznkCn
GQl5S7lHZfomEwQPtWQ9YO8tXYiN3UupoHAw30VhIQT4hscfcY55Hx+3js+pLdwG
zMOgsgI49EtwiPTqrh/Di3jdsGdRNvN2MEIpwLaFG3TYtt8246cOeOFKRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHku3J9lkuJKaLtxj90fyFSJFUpAMB8GA1UdIwQY
MBaAFNCe8gk9oV7skO+4N7lQFkZp9hmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgt
NmIyZTY4ZGRlMWUzLzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgtNmIyZTY4ZGRlMWUz
LzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkCwxUPH
pT2MDM23MK3LkwjNetm/y5etBay9oFeCRqEPQAJrPbUSpxugue40jfQqWR3LG2Pw
b3cLHWiGStMvtm75FKyJz3zqsr3KH3o9eIbT6Iw7Cejbv7QNLztAa2YZenJo5ibs
O6VZ65Cnqz5OIcAOaKiW1oyAGMimeOghW1bXbVdlk9ydsOXqr3/nBgRIgFjrEN77
VQCwJdBauym9LhPjYxSgOyPMlLaXT7Up4UFQ6hOmoOhinYLCaTqOsi00Yid7HL8H
Nhw20KvTVAh3FHJ8oO3ghtviE/TJzsxQvG+qSq4J3E72KRZSnAYncz7xgBqiTUmm
Cq+O49lJewRPeA==
-----END CERTIFICATE-----