Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File:                     SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier:          KZSdbn8Y9+TeNC7d+Jy7aAjZnsDgu7ESQYfHzs3VOGw=
Subject key identifier:   8C:51:F0:31:79:F3:52:4F:94:44:93:60:77:49:17:84:4B:6D:79:80
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer:       /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial:       01962E99475EB37C3F06473FCED8306E24F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: LNwNZpl6jSTh3xeAx9fIIisKfAiYmLSgqKtNRe17HOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:47:5e:b3:7c:3f:06:47:3f:ce:d8:30:6e:24:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=8c51f03179f3524f94449360774917844b6d7980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:73:fa:1e:92:9b:2c:c2:59:e0:8a:fb:f9:
                    d7:ab:b6:29:91:b2:c6:6e:14:76:51:a4:17:18:70:
                    83:d7:2a:5c:c4:8e:f6:8b:30:3e:71:68:e8:4d:28:
                    45:fc:e5:4d:3c:27:94:82:1d:b5:fd:ba:ef:ac:d0:
                    98:4e:95:6f:ae:9a:5e:e4:49:f4:00:01:1e:ad:17:
                    7c:99:a6:19:40:51:94:7f:ea:8b:39:cf:18:8d:81:
                    be:9f:f6:4d:6b:c1:a0:2c:ac:60:c4:fe:7d:6f:6d:
                    42:f8:7a:6e:4c:05:d0:f0:7e:25:3f:26:42:34:c2:
                    4a:02:d3:e6:a6:4d:57:3f:7a:d0:9c:2a:4c:df:65:
                    93:fe:a5:f2:82:53:ec:19:11:e8:b0:7d:f4:58:6a:
                    70:51:08:e3:31:86:0d:d6:7c:eb:c8:b4:ad:88:d2:
                    36:ae:eb:1b:bb:e7:60:52:6e:14:bb:0c:ad:4d:a7:
                    c5:48:8f:49:a8:e5:5d:98:f7:cf:b1:66:00:30:24:
                    52:32:54:df:f9:7c:75:ca:4c:84:33:43:c8:7f:fa:
                    18:37:6f:fc:1b:1d:21:2c:fb:13:b9:f5:e1:85:0e:
                    79:c5:38:69:72:46:e8:dd:0d:40:2e:9b:a8:65:71:
                    48:eb:45:d1:0b:b4:cb:34:d8:7b:18:26:08:5c:fb:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:51:F0:31:79:F3:52:4F:94:44:93:60:77:49:17:84:4B:6D:79:80
            X509v3 Authority Key Identifier:
                keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:70:8f:38:45:ac:e9:e2:83:33:a6:c2:3d:11:8d:8b:21:a8:
         14:7b:ea:4d:75:24:69:eb:18:dd:6e:8b:72:6a:df:ac:e8:69:
         4f:d4:b4:e0:e5:cd:0f:16:53:90:8c:72:02:19:ba:0b:39:c9:
         27:6f:7e:91:0f:d7:8c:21:a5:18:97:70:cc:71:86:08:86:09:
         af:d9:2b:ba:5c:6f:74:dd:e7:93:1a:9b:f1:c2:16:cd:af:e8:
         a0:0f:7d:74:4c:8d:4d:33:fd:67:cd:69:34:b0:d3:e6:e9:75:
         6e:a5:63:96:c0:c0:8b:14:44:23:86:1d:26:39:91:70:3e:de:
         9b:81:b2:60:34:e1:b8:95:27:49:4f:7c:29:86:80:08:5a:03:
         79:ef:14:b1:21:38:f0:d6:52:0f:c6:77:67:4d:b7:94:ad:84:
         bf:e8:08:75:15:04:84:0a:8c:46:ba:47:42:01:41:0d:61:77:
         d0:b8:85:81:55:79:cc:3d:bb:9d:5f:78:79:86:4f:03:1f:61:
         69:5e:c4:3d:70:77:59:e2:0d:0c:5f:53:a1:86:0a:57:96:71:
         21:0b:cc:47:52:32:53:7d:fa:78:67:31:b5:fd:cf:89:43:ca:
         f6:1b:2c:13:09:a5:83:f6:c1:73:b7:b0:58:79:36:0d:2e:cf:
         7f:d2:51:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUdes3w/Bkc/ztgwbiT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NmQ1ZmIwOThjNDMzMGViN2E2NTE4ZDkwMzY0MmRhMzYx
OWIwNDcwHhcNMjUwNDEzMTAwMTU5WhcNMjUwNDE0MTAwMTU5WjAzMTEwLwYDVQQD
Eyg4YzUxZjAzMTc5ZjM1MjRmOTQ0NDkzNjA3NzQ5MTc4NDRiNmQ3OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojZz+h6SmyzCWeCK+/nXq7YpkbLG
bhR2UaQXGHCD1ypcxI72izA+cWjoTShF/OVNPCeUgh21/brvrNCYTpVvrppe5En0
AAEerRd8maYZQFGUf+qLOc8YjYG+n/ZNa8GgLKxgxP59b21C+HpuTAXQ8H4lPyZC
NMJKAtPmpk1XP3rQnCpM32WT/qXyglPsGRHosH30WGpwUQjjMYYN1nzryLStiNI2
rusbu+dgUm4UuwytTafFSI9JqOVdmPfPsWYAMCRSMlTf+Xx1ykyEM0PIf/oYN2/8
Gx0hLPsTufXhhQ55xThpckbo3Q1ALpuoZXFI60XRC7TLNNh7GCYIXPu8FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxR8DF581JPlESTYHdJF4RLbXmAMB8GA1UdIwQY
MBaAFEltX7CYxDMOt6ZRjZA2Qto2GbBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzkt
MWJmMGE4MGYwOWM0LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82YTU4ZGMtM2M0Yi00OTYxLWFiYzktMWJmMGE4MGYwOWM0
LzEvU1cxZnNKakVNdzYzcGxHTmtEWkMyallac0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHCPOEWs
6eKDM6bCPRGNiyGoFHvqTXUkaesY3W6LcmrfrOhpT9S04OXNDxZTkIxyAhm6CznJ
J29+kQ/XjCGlGJdwzHGGCIYJr9krulxvdN3nkxqb8cIWza/ooA99dEyNTTP9Z81p
NLDT5ul1bqVjlsDAixREI4YdJjmRcD7em4GyYDThuJUnSU98KYaACFoDee8UsSE4
8NZSD8Z3Z023lK2Ev+gIdRUEhAqMRrpHQgFBDWF30LiFgVV5zD27nV94eYZPAx9h
aV7EPXB3WeINDF9ToYYKV5ZxIQvMR1IyU336eGcxtf3PiUPK9hssEwmlg/bBc7ew
WHk2DS7Pf9JRRg==
-----END CERTIFICATE-----