Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File:                     Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier:          6+yIFWB30ySukdlzESPLGtMj/DWHkhSD6yNOotlUEHQ=
Subject key identifier:   65:F3:B6:D5:0A:67:61:CD:55:DB:7C:CF:2E:8A:A4:9B:21:A5:3C:4A
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer:       /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial:       01962E995D18D19A6C5350F357AF50D25EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number:          0C61
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: u7xRO30/mlVKhYdxAXJJBp6ORB7a5D9TlDGC/rC1aGU=)
                          2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:18:d1:9a:6c:53:50:f3:57:af:50:d2:5e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=65f3b6d50a6761cd55db7ccf2e8aa49b21a53c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:53:fb:88:26:97:80:a6:44:a6:fc:d1:dd:34:
                    dc:92:21:39:9b:6a:43:f6:5a:53:a7:e8:8b:fc:cf:
                    45:c2:3b:fc:04:d2:f4:06:e6:99:b9:c2:a7:d9:4d:
                    04:73:85:25:87:b4:32:55:13:68:fb:d7:75:84:70:
                    1d:70:a5:61:71:97:5d:1b:0d:34:52:a6:b7:b4:f5:
                    09:e0:12:d2:f7:9a:35:2f:7e:f1:b3:df:3a:f4:24:
                    3a:2d:1e:12:48:10:ab:25:f2:90:a3:32:24:ed:18:
                    d9:23:bc:00:99:16:29:7b:ad:1f:a5:ce:e9:5d:ff:
                    3b:ec:1d:b4:39:fa:15:f5:4f:36:be:53:1c:6e:25:
                    e6:b1:93:0c:28:ed:2f:95:9b:82:65:e3:ca:4d:f2:
                    03:22:ff:ad:6d:49:45:d7:bd:37:65:a1:fa:ec:c8:
                    c2:c6:86:9f:a2:03:15:35:eb:30:be:94:80:a8:31:
                    19:cc:34:10:26:0a:18:c0:08:94:63:5a:27:2e:30:
                    6b:2c:46:a4:a2:ca:a3:ee:68:c9:7c:db:7d:a1:04:
                    87:e3:37:86:7c:0f:6b:b7:d5:96:ff:e3:99:ae:b9:
                    7f:ff:84:96:a1:56:d4:76:cb:52:a8:04:ae:2b:bc:
                    ff:aa:a7:2c:63:6e:09:04:fe:14:bc:1b:d0:af:98:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:B6:D5:0A:67:61:CD:55:DB:7C:CF:2E:8A:A4:9B:21:A5:3C:4A
            X509v3 Authority Key Identifier:
                keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7a:d9:0d:be:17:b0:f5:7a:e0:7b:67:8d:62:10:a1:44:44:
         43:5f:b6:7a:96:f0:05:b6:00:a9:07:4a:e2:99:11:6f:1e:4f:
         ee:92:56:cb:0e:3a:99:01:21:11:d8:27:26:ee:bc:3a:ba:db:
         35:eb:a2:af:d2:96:f5:a3:92:cb:40:1d:62:2d:bf:2f:b2:c1:
         8e:d6:1d:b3:d0:b0:bc:a2:9a:ad:00:c3:11:51:f3:cb:66:22:
         1b:3a:42:6e:8b:8e:a2:14:68:dc:6b:8f:7d:77:6f:8c:9d:b6:
         72:93:db:da:9e:c2:da:2f:2a:20:1e:99:1b:3a:69:9e:6a:e7:
         fa:e4:75:38:f9:03:93:ee:dd:86:32:b4:82:b8:06:36:f1:23:
         f7:d1:36:17:9f:e5:26:3e:9a:b6:57:a7:4b:69:31:a9:bf:5f:
         98:fb:97:dc:5e:e7:6b:26:7d:15:39:1e:21:3d:55:49:3b:e4:
         f1:18:ac:0b:8d:dc:88:a0:e9:05:08:15:1b:c1:19:48:be:6e:
         cf:9d:47:c2:10:21:8c:b2:de:c2:a5:b1:b8:34:03:b3:32:55:
         73:38:d2:a0:ea:40:e3:04:6e:a6:81:59:87:84:1e:fc:8a:33:
         a7:50:5e:fe:64:df:4a:2c:c8:07:3d:24:43:2f:3a:6b:12:90:
         75:83:5e:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumV0Y0ZpsU1DzV69Q0l72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx
NjYwMDgwHhcNMjUwNDEzMTAwMjA0WhcNMjUwNDE0MTAwMjA0WjAzMTEwLwYDVQQD
Eyg2NWYzYjZkNTBhNjc2MWNkNTVkYjdjY2YyZThhYTQ5YjIxYTUzYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lP7iCaXgKZEpvzR3TTckiE5m2pD
9lpTp+iL/M9Fwjv8BNL0BuaZucKn2U0Ec4Ulh7QyVRNo+9d1hHAdcKVhcZddGw00
Uqa3tPUJ4BLS95o1L37xs9869CQ6LR4SSBCrJfKQozIk7RjZI7wAmRYpe60fpc7p
Xf877B20OfoV9U82vlMcbiXmsZMMKO0vlZuCZePKTfIDIv+tbUlF1703ZaH67MjC
xoafogMVNeswvpSAqDEZzDQQJgoYwAiUY1onLjBrLEakosqj7mjJfNt9oQSH4zeG
fA9rt9WW/+OZrrl//4SWoVbUdstSqASuK7z/qqcsY24JBP4UvBvQr5imJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXzttUKZ2HNVdt8zy6KpJshpTxKMB8GA1UdIwQY
MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt
NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh
LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3rZDb4X
sPV64HtnjWIQoUREQ1+2epbwBbYAqQdK4pkRbx5P7pJWyw46mQEhEdgnJu68Orrb
Neuir9KW9aOSy0AdYi2/L7LBjtYds9CwvKKarQDDEVHzy2YiGzpCbouOohRo3GuP
fXdvjJ22cpPb2p7C2i8qIB6ZGzppnmrn+uR1OPkDk+7dhjK0grgGNvEj99E2F5/l
Jj6atlenS2kxqb9fmPuX3F7nayZ9FTkeIT1VSTvk8RisC43ciKDpBQgVG8EZSL5u
z51HwhAhjLLewqWxuDQDszJVczjSoOpA4wRupoFZh4Qe/Iozp1Be/mTfSizIBz0k
Qy86axKQdYNe/Q==
-----END CERTIFICATE-----