Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
File:                     i9lSvUDOCXP5EEEfWS426QE2wuo.mft (raw, json)
Hash identifier:          mi9S7IACMPAdQGGftEiof40msUanCOwk2U+DzhKKqtE=
Subject key identifier:   8A:11:08:F4:DF:F8:6B:F7:0A:CA:F5:D4:17:02:35:DD:6A:46:0B:83
Authority key identifier: 8B:D9:52:BD:40:CE:09:73:F9:10:41:1F:59:2E:36:E9:01:36:C2:EA
Certificate issuer:       /CN=8bd952bd40ce0973f910411f592e36e90136c2ea
Certificate serial:       01962DF3EB2CB724945117832347D8BA0BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9lSvUDOCXP5EEEfWS426QE2wuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft
Manifest number:          0669
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: i9lSvUDOCXP5EEEfWS426QE2wuo.crl (hash: X/Cgv0hvDCSD+eXempAnaNTOcJtGgqWD9GPpT4upQfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:eb:2c:b7:24:94:51:17:83:23:47:d8:ba:0b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd952bd40ce0973f910411f592e36e90136c2ea
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=8a1108f4dff86bf70acaf5d4170235dd6a460b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:3f:e3:f1:c6:9f:c9:cf:5c:43:03:98:3b:
                    fc:d4:e1:56:3e:ea:a1:91:39:a9:ab:72:27:21:3d:
                    3f:62:bb:3a:0c:07:a4:77:a3:3a:0a:7f:7d:b6:36:
                    74:a9:c8:8c:3a:d4:aa:7f:0f:c7:02:ff:a0:0a:fd:
                    ea:ea:40:57:1f:81:67:e6:4c:47:2c:f5:b4:8a:0d:
                    9a:b3:d7:b4:f3:b1:52:9d:74:88:f9:20:bf:67:5f:
                    eb:0c:91:b7:08:6f:32:85:93:7a:eb:82:20:e5:86:
                    72:c7:28:f7:3b:3e:d0:1c:a1:9c:69:71:40:b4:a1:
                    3b:b1:7c:76:41:1d:e8:58:d4:ac:06:68:20:d7:a3:
                    7d:75:d7:10:bc:f3:18:f1:7d:52:67:2f:9b:77:3b:
                    03:95:c2:3a:61:db:b9:b0:38:5f:04:8a:5d:d7:0e:
                    b9:d4:80:db:33:75:a0:51:8d:f3:36:78:27:a8:d7:
                    31:cd:7f:14:5d:31:b8:c2:ea:58:dd:c5:23:ff:4e:
                    8e:4d:c3:bb:ce:2b:13:e9:e3:b8:c2:2b:ec:39:e2:
                    8d:8d:60:0c:33:6c:1b:aa:22:2b:38:08:f8:78:bb:
                    bc:dd:64:47:71:25:5d:d5:4a:ee:1f:75:14:96:e2:
                    9b:21:0b:84:9a:d7:2b:14:da:6d:bf:81:26:6f:d8:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:08:F4:DF:F8:6B:F7:0A:CA:F5:D4:17:02:35:DD:6A:46:0B:83
            X509v3 Authority Key Identifier:
                keyid:8B:D9:52:BD:40:CE:09:73:F9:10:41:1F:59:2E:36:E9:01:36:C2:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9lSvUDOCXP5EEEfWS426QE2wuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/i9lSvUDOCXP5EEEfWS426QE2wuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b4:3f:33:2b:d5:60:5a:50:f4:00:94:22:de:2c:f2:72:32:
         e4:a7:b6:b2:97:c2:18:39:8b:62:96:5a:e8:36:2d:0c:0a:8b:
         49:54:45:df:bd:3c:fe:7a:56:0d:c5:2d:46:66:ca:2b:07:f6:
         55:79:7b:d9:5e:7d:9e:91:64:7a:88:18:71:c1:ae:2c:0c:e4:
         8d:2e:2d:1e:86:22:c2:46:f8:1f:f6:70:64:b5:14:e9:6c:92:
         15:e5:7f:b6:1d:00:e1:9d:38:99:37:17:cd:7c:d6:49:db:f6:
         55:a5:32:eb:5b:62:52:83:97:a2:86:38:b4:56:53:42:91:d6:
         30:cb:01:e9:a4:67:61:66:3c:f5:95:01:31:9f:f9:85:19:d2:
         80:85:ab:49:91:b8:8c:68:94:5b:4e:ea:b4:34:80:0d:61:89:
         fe:6f:a7:22:c5:7a:37:81:a4:20:51:90:ae:96:8f:6e:73:e2:
         5f:d4:59:ad:26:9d:4d:f4:4b:11:e4:51:77:21:96:c1:97:cc:
         b8:b4:8e:86:bc:b2:24:34:f8:ab:e6:41:f8:67:d0:61:25:82:
         90:54:6b:e1:ff:c9:69:c8:5d:cc:7a:5f:90:b2:e4:7e:23:36:
         ba:32:29:6c:76:c6:48:cd:af:d3:4f:58:81:16:e8:8f:12:df:
         fe:d2:55:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+sstySUUReDI0fYugutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDk1MmJkNDBjZTA5NzNmOTEwNDExZjU5MmUzNmU5MDEz
NmMyZWEwHhcNMjUwNDEzMDcwMTIyWhcNMjUwNDE0MDcwMTIyWjAzMTEwLwYDVQQD
Eyg4YTExMDhmNGRmZjg2YmY3MGFjYWY1ZDQxNzAyMzVkZDZhNDYwYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIA/4/HGn8nPXEMDmDv81OFWPuqh
kTmpq3InIT0/Yrs6DAekd6M6Cn99tjZ0qciMOtSqfw/HAv+gCv3q6kBXH4Fn5kxH
LPW0ig2as9e087FSnXSI+SC/Z1/rDJG3CG8yhZN664Ig5YZyxyj3Oz7QHKGcaXFA
tKE7sXx2QR3oWNSsBmgg16N9ddcQvPMY8X1SZy+bdzsDlcI6Ydu5sDhfBIpd1w65
1IDbM3WgUY3zNngnqNcxzX8UXTG4wupY3cUj/06OTcO7zisT6eO4wivsOeKNjWAM
M2wbqiIrOAj4eLu83WRHcSVd1UruH3UUluKbIQuEmtcrFNptv4Emb9hyYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoRCPTf+Gv3Csr11BcCNd1qRguDMB8GA1UdIwQY
MBaAFIvZUr1Azglz+RBBH1kuNukBNsLqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYt
NWMyYWJlNTM5NGU2LzEvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8zZWRiOGMtMTg1MC00ODhmLWFmZGYtNWMyYWJlNTM5NGU2
LzEvaTlsU3ZVRE9DWFA1RUVFZldTNDI2UUUyd3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbQ/MyvV
YFpQ9ACUIt4s8nIy5Ke2spfCGDmLYpZa6DYtDAqLSVRF3708/npWDcUtRmbKKwf2
VXl72V59npFkeogYccGuLAzkjS4tHoYiwkb4H/ZwZLUU6WySFeV/th0A4Z04mTcX
zXzWSdv2VaUy61tiUoOXooY4tFZTQpHWMMsB6aRnYWY89ZUBMZ/5hRnSgIWrSZG4
jGiUW07qtDSADWGJ/m+nIsV6N4GkIFGQrpaPbnPiX9RZrSadTfRLEeRRdyGWwZfM
uLSOhryyJDT4q+ZB+GfQYSWCkFRr4f/JachdzHpfkLLkfiM2ujIpbHbGSM2v009Y
gRbojxLf/tJVPw==
-----END CERTIFICATE-----