Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File:                     pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier:          P2kBIPmacc8/kV7uDGdMmvK6s+7QFAKTSbPfPTx7+rM=
Subject key identifier:   B1:06:A6:5D:55:55:BE:C4:FB:EC:26:1A:CE:BA:9A:52:19:C7:A4:C1
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer:       /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial:       01962E9938C4379FCC955FD2604192FF837A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: uzZKreslG6eDwh3h0MKNshVMkRT3Wkk4Jsj28yrmS/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:38:c4:37:9f:cc:95:5f:d2:60:41:92:ff:83:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=b106a65d5555bec4fbec261aceba9a5219c7a4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:28:37:86:18:6d:60:ab:4b:17:c0:88:46:
                    74:61:82:84:48:32:a0:7f:69:02:ee:f4:ef:fd:ab:
                    27:46:12:2c:ab:4e:48:61:61:55:5f:a7:9e:95:e2:
                    2f:20:fc:0c:57:d6:89:fd:fc:b6:5a:d5:d8:d1:a5:
                    59:68:3c:4f:21:4d:0e:a0:e2:ae:8c:a5:77:63:69:
                    0c:6e:f9:3e:08:9d:b0:29:04:cd:13:bd:ab:f0:17:
                    c0:f9:30:9f:ef:f5:12:ab:8f:d2:de:03:bf:3e:75:
                    b3:99:7b:95:95:03:a7:7c:50:3b:fc:72:60:e8:ab:
                    32:ad:a6:0f:74:91:66:77:e4:35:2c:4d:86:a1:d8:
                    ce:e2:c9:7e:ec:49:2c:41:c8:28:54:5f:ba:0a:a0:
                    30:c2:23:94:cf:28:c9:46:21:fb:12:8d:8e:89:bd:
                    58:6e:8e:1d:ea:33:67:fe:1a:9a:77:cd:5f:88:d0:
                    84:db:5e:24:1b:27:de:8c:f2:c1:e7:07:4e:6d:70:
                    d6:c1:b5:b4:ca:2a:f8:0b:e6:19:ab:ae:ec:5c:5c:
                    e8:c5:34:c4:41:ba:b3:65:0c:bf:61:7a:78:54:61:
                    25:75:40:e7:c7:c7:8a:28:ae:fa:e6:81:19:be:fa:
                    cd:c8:92:93:ae:50:fc:76:9d:d9:49:5e:22:d1:91:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:06:A6:5D:55:55:BE:C4:FB:EC:26:1A:CE:BA:9A:52:19:C7:A4:C1
            X509v3 Authority Key Identifier:
                keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:3a:a8:a4:e0:a7:70:49:9f:11:ab:40:a6:cc:4c:fc:f6:
         19:af:86:99:eb:a5:41:54:c0:5c:76:18:27:52:57:0b:a1:d1:
         dd:ed:47:5c:01:1d:a6:e0:b0:89:59:8e:47:b1:14:a9:35:02:
         1b:ed:2c:9a:6e:ac:34:b9:a2:d2:80:24:48:e1:4c:f9:d0:0c:
         09:de:9e:70:0b:29:9e:c1:f6:66:b5:eb:e3:b2:b2:86:a5:42:
         00:e4:4a:57:7f:39:f0:5b:0c:19:76:c2:89:07:dc:ad:e1:4f:
         16:8a:41:34:b9:35:1a:f2:1f:87:67:ed:37:75:58:4b:ca:49:
         f5:d6:a9:54:81:6b:43:1b:90:48:9e:c5:05:d8:7a:10:73:ee:
         b0:ae:f0:a2:1d:a6:61:09:18:ff:ba:b0:e9:cf:21:2b:f9:5c:
         24:a1:b6:c2:12:a8:e6:83:e0:7a:4c:60:bc:98:09:cf:90:1f:
         d0:b1:c8:7c:71:c7:33:59:96:74:c3:86:97:fc:be:7d:9e:53:
         cc:0c:1e:f7:cd:06:6b:a7:63:9a:a3:29:51:2e:b9:84:11:61:
         03:1b:82:c0:85:bd:1c:7b:8b:78:21:0d:a9:de:d2:9a:f4:01:
         59:1e:6a:2b:5d:88:db:dd:fc:35:c1:6b:c6:b3:0d:90:7c:d6:
         03:da:77:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTjEN5/MlV/SYEGS/4N6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjRjOGFiODNiNmQ5MmE3NGViZGNkZTg4YmMyMTk1N2M1
N2YxZTgwHhcNMjUwNDEzMTAwMTU1WhcNMjUwNDE0MTAwMTU1WjAzMTEwLwYDVQQD
EyhiMTA2YTY1ZDU1NTViZWM0ZmJlYzI2MWFjZWJhOWE1MjE5YzdhNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH8oN4YYbWCrSxfAiEZ0YYKESDKg
f2kC7vTv/asnRhIsq05IYWFVX6eeleIvIPwMV9aJ/fy2WtXY0aVZaDxPIU0OoOKu
jKV3Y2kMbvk+CJ2wKQTNE72r8BfA+TCf7/USq4/S3gO/PnWzmXuVlQOnfFA7/HJg
6KsyraYPdJFmd+Q1LE2GodjO4sl+7EksQcgoVF+6CqAwwiOUzyjJRiH7Eo2Oib1Y
bo4d6jNn/hqad81fiNCE214kGyfejPLB5wdObXDWwbW0yir4C+YZq67sXFzoxTTE
QbqzZQy/YXp4VGEldUDnx8eKKK765oEZvvrNyJKTrlD8dp3ZSV4i0ZHERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEGpl1VVb7E++wmGs66mlIZx6TBMB8GA1UdIwQY
MBaAFKS0yKuDttkqdOvc3oi8IZV8V/HoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hNWY5ZjYtMzYwNy00NWQzLTk5NGIt
NTQxZTQ1MDMxNGJjLzEvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hNWY5ZjYtMzYwNy00NWQzLTk5NGItNTQxZTQ1MDMxNGJj
LzEvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd06qKTg
p3BJnxGrQKbMTPz2Ga+GmeulQVTAXHYYJ1JXC6HR3e1HXAEdpuCwiVmOR7EUqTUC
G+0smm6sNLmi0oAkSOFM+dAMCd6ecAspnsH2ZrXr47KyhqVCAORKV3858FsMGXbC
iQfcreFPFopBNLk1GvIfh2ftN3VYS8pJ9dapVIFrQxuQSJ7FBdh6EHPusK7woh2m
YQkY/7qw6c8hK/lcJKG2whKo5oPgekxgvJgJz5Af0LHIfHHHM1mWdMOGl/y+fZ5T
zAwe980Ga6djmqMpUS65hBFhAxuCwIW9HHuLeCENqd7SmvQBWR5qK12I2938NcFr
xrMNkHzWA9p3Fg==
-----END CERTIFICATE-----