Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File:                     I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier:          VXcsCTgCKpKVBoTcTTmSL6dumgA6mkRnHBnihMmc4Yw=
Subject key identifier:   24:A4:67:7B:C2:80:1C:1B:7B:1F:BB:A1:E7:59:44:1F:A2:51:B8:61
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer:       /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial:       01962DF43CC8445EAB5DE415C7624CCA8098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: UzgiSRYB9y5dRfksDM3vshY4M+SeldJhVj5mYlAGt4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:c8:44:5e:ab:5d:e4:15:c7:62:4c:ca:80:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=24a4677bc2801c1b7b1fbba1e759441fa251b861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:fa:c2:bf:bf:a6:76:db:aa:de:37:99:d1:
                    44:85:ce:64:6c:a8:c2:9b:0c:cc:e2:f4:69:95:af:
                    cb:f8:90:42:c4:60:ca:75:19:9a:de:9a:ed:3f:6c:
                    d5:82:22:9c:51:9e:b4:34:14:7a:cf:49:bd:fc:d9:
                    a8:fa:22:02:db:d4:cc:d2:7b:93:27:7c:be:7e:17:
                    22:cc:bd:ad:4a:4d:8b:ec:75:ff:b8:a3:c6:56:c4:
                    30:67:b0:89:f0:44:db:95:15:84:76:b7:9d:6b:ed:
                    41:65:1d:ec:8d:86:b7:a2:26:b1:7f:a5:1c:d2:0b:
                    62:f5:7f:a2:89:bd:65:91:72:91:ea:61:f6:b4:c1:
                    5b:ac:31:10:17:14:e3:a0:54:ff:41:d4:93:10:c7:
                    16:94:df:8d:3e:04:e4:de:6f:4c:d0:7c:e9:94:a5:
                    98:23:03:ac:df:51:64:7c:0e:83:10:ed:4b:ee:55:
                    64:58:ab:9c:85:ad:1b:44:e8:da:07:b7:99:70:b7:
                    fc:82:be:20:f0:d1:53:f8:da:c7:af:ff:14:23:29:
                    b0:b7:1e:3d:8d:ee:91:1c:29:5c:17:56:1a:e9:d4:
                    ec:4f:85:c8:46:07:1e:54:99:d8:5a:ef:a4:45:2d:
                    af:d6:69:4c:af:66:2d:67:a1:26:10:1c:ec:78:83:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:67:7B:C2:80:1C:1B:7B:1F:BB:A1:E7:59:44:1F:A2:51:B8:61
            X509v3 Authority Key Identifier:
                keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b3:4c:40:e1:8a:40:67:a4:22:bb:52:ee:34:94:a7:a3:5c:
         a9:1b:ae:91:c2:05:e4:7c:93:4a:72:94:7a:8e:16:de:dc:06:
         6d:76:7b:cc:7a:d1:08:8d:13:bb:c3:06:bd:47:45:48:c7:44:
         44:46:78:1b:76:4d:37:a1:f5:d6:9e:9e:e2:6d:8d:ee:d0:3b:
         f4:e8:37:40:40:59:e3:50:f7:4d:e1:e0:c5:2c:10:59:34:97:
         38:09:e4:4f:39:0d:99:6b:37:41:8e:a6:b7:6b:e7:52:f2:b6:
         b3:3a:07:04:f3:2b:bc:c4:13:3b:c9:76:ae:f4:7b:b7:6c:33:
         d3:60:dc:24:17:6f:9a:2d:7b:f1:0b:2a:03:7e:6c:f3:bb:df:
         ff:c6:85:c9:91:9f:d4:b0:0b:61:a0:aa:d9:a0:03:e8:b8:a2:
         fb:45:79:57:9d:98:50:91:ab:79:4f:bb:4b:41:50:7b:56:25:
         32:94:d9:04:cb:bd:09:6b:75:9a:bb:a3:f1:0d:71:a9:2c:de:
         e6:bb:27:1e:47:7f:f8:c6:5c:37:b5:f4:c0:07:6b:9e:47:31:
         ab:28:91:2b:04:7b:c4:37:9d:79:52:32:d7:41:ec:d0:b1:fb:
         5d:56:ff:52:58:c1:d0:ab:a3:03:6e:b2:c0:1c:68:96:66:52:
         f1:c9:3a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DzIRF6rXeQVx2JMyoCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjg5ZjU3ZDA3Mjg0OWUwY2FiMjE5NWNkMGJhZjI1NTc5
MzVlYTAwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EygyNGE0Njc3YmMyODAxYzFiN2IxZmJiYTFlNzU5NDQxZmEyNTFiODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcr6wr+/pnbbqt43mdFEhc5kbKjC
mwzM4vRpla/L+JBCxGDKdRma3prtP2zVgiKcUZ60NBR6z0m9/Nmo+iIC29TM0nuT
J3y+fhcizL2tSk2L7HX/uKPGVsQwZ7CJ8ETblRWEdreda+1BZR3sjYa3oiaxf6Uc
0gti9X+iib1lkXKR6mH2tMFbrDEQFxTjoFT/QdSTEMcWlN+NPgTk3m9M0HzplKWY
IwOs31FkfA6DEO1L7lVkWKucha0bROjaB7eZcLf8gr4g8NFT+NrHr/8UIymwtx49
je6RHClcF1Ya6dTsT4XIRgceVJnYWu+kRS2v1mlMr2YtZ6EmEBzseIM0GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSkZ3vCgBwbex+7oedZRB+iUbhhMB8GA1UdIwQY
MBaAFCP4n1fQcoSeDKshlc0LryVXk16gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTIt
MmVhNmY1ZWZiMjdmLzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTItMmVhNmY1ZWZiMjdm
LzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrNMQOGK
QGekIrtS7jSUp6NcqRuukcIF5HyTSnKUeo4W3twGbXZ7zHrRCI0Tu8MGvUdFSMdE
REZ4G3ZNN6H11p6e4m2N7tA79Og3QEBZ41D3TeHgxSwQWTSXOAnkTzkNmWs3QY6m
t2vnUvK2szoHBPMrvMQTO8l2rvR7t2wz02DcJBdvmi178QsqA35s87vf/8aFyZGf
1LALYaCq2aAD6Lii+0V5V52YUJGreU+7S0FQe1YlMpTZBMu9CWt1mruj8Q1xqSze
5rsnHkd/+MZcN7X0wAdrnkcxqyiRKwR7xDedeVIy10Hs0LH7XVb/UljB0KujA26y
wBxolmZS8ck6oA==
-----END CERTIFICATE-----