Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File:                     wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier:          pyNX5C3E+1OAV7Gz2AkhPfW09MUaKGdu8ZEVoK0woOg=
Subject key identifier:   01:C4:8E:DD:DD:44:13:CA:81:3E:D9:A5:BA:EF:FF:93:69:3D:7D:B5
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer:       /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial:       01962F3D79410221F0AA6069A2879F995BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number:          123A
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: f11e38dv6EqovlyhA5TNVX5UzztzgPTjfedJnD90A+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:79:41:02:21:f0:aa:60:69:a2:87:9f:99:5b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=01c48edddd4413ca813ed9a5baefff93693d7db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:15:b7:90:49:1d:71:dd:a9:df:b6:ab:e2:
                    35:b2:34:35:9d:79:ba:9e:f0:ac:f4:12:8d:02:70:
                    40:87:e9:f5:f6:e0:ae:71:90:fc:20:44:00:1c:fb:
                    ad:2c:82:fb:b7:aa:d1:7d:c4:54:2a:57:b7:20:91:
                    9e:35:44:3c:40:22:a3:a1:d4:79:53:5b:5d:80:71:
                    c3:72:ae:27:4c:32:98:e4:d1:ff:f9:d8:0d:d6:80:
                    b6:b3:db:98:5d:98:73:4d:5d:2f:02:9f:64:0b:d8:
                    83:24:05:47:92:0c:7f:70:56:ac:9f:0a:e6:ae:fb:
                    36:fe:e5:46:58:8b:c2:15:b8:9e:be:bb:8b:ea:0c:
                    71:fd:30:65:e5:0b:b6:14:3f:97:b1:05:dd:b4:be:
                    4a:1e:6c:28:c5:93:38:9f:7b:da:00:a1:22:a4:a4:
                    46:21:bd:d5:ee:8b:40:42:fe:6a:03:eb:e3:f4:92:
                    81:d0:29:21:bf:a2:ea:2a:9f:cf:7b:52:12:4b:10:
                    e7:bb:e8:46:ec:5d:f4:24:6a:94:02:75:7b:8d:b5:
                    4f:78:30:ac:1d:35:65:48:c9:88:72:f7:8f:04:be:
                    69:23:81:ae:6a:9a:a8:85:b3:4a:cc:d3:88:c7:0d:
                    85:e3:44:a2:c5:e4:89:91:5c:bd:5b:88:0c:62:a1:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C4:8E:DD:DD:44:13:CA:81:3E:D9:A5:BA:EF:FF:93:69:3D:7D:B5
            X509v3 Authority Key Identifier:
                keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:16:8f:9b:b4:a8:91:02:29:33:d2:c1:16:76:76:10:e7:6b:
         e4:7d:9e:a0:de:53:fe:95:1d:1f:b4:16:81:32:26:b0:0d:d3:
         37:62:28:d4:d7:e9:7f:46:c8:13:4c:ff:39:40:3c:b2:ab:e8:
         6e:ef:12:20:68:f0:59:be:ae:bd:e6:b4:69:29:ba:19:b0:08:
         71:c4:30:88:d6:5d:6f:97:1a:38:32:77:7b:2c:f4:6d:fe:83:
         67:2a:b9:cd:99:ef:3e:92:94:02:ae:67:65:97:54:c4:e0:cc:
         aa:df:d1:95:c3:4c:33:fe:0f:df:6b:36:d9:58:56:a7:57:58:
         fc:82:54:3c:b4:c9:db:a8:75:f5:28:33:f8:e7:c8:7d:fa:46:
         5b:2c:c6:1e:ad:57:9e:61:0d:12:d7:70:3e:7f:1d:63:d8:42:
         bb:79:58:75:13:9b:2c:0d:eb:01:9a:e4:4c:8b:4a:1f:43:d8:
         5a:39:af:d6:85:e8:c7:53:c1:cf:bd:12:be:97:59:3f:10:65:
         25:7f:2b:de:dd:d6:69:16:f0:9f:fa:ed:2b:01:61:d5:cb:00:
         73:eb:ab:e6:15:c0:8c:9d:1a:08:c1:6b:7c:77:11:58:1e:1f:
         e9:a8:69:ab:a1:13:a4:1f:ea:72:e5:a8:05:3b:74:34:ec:99:
         e1:9d:7d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXlBAiHwqmBpooefmVvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWUzOThmOWFhZGQwNjM4YmZmZWEyNGMxYzc5ZWI4ODMy
Zjc4NzUwHhcNMjUwNDEzMTMwMTE5WhcNMjUwNDE0MTMwMTE5WjAzMTEwLwYDVQQD
EygwMWM0OGVkZGRkNDQxM2NhODEzZWQ5YTViYWVmZmY5MzY5M2Q3ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8EVt5BJHXHdqd+2q+I1sjQ1nXm6
nvCs9BKNAnBAh+n19uCucZD8IEQAHPutLIL7t6rRfcRUKle3IJGeNUQ8QCKjodR5
U1tdgHHDcq4nTDKY5NH/+dgN1oC2s9uYXZhzTV0vAp9kC9iDJAVHkgx/cFasnwrm
rvs2/uVGWIvCFbievruL6gxx/TBl5Qu2FD+XsQXdtL5KHmwoxZM4n3vaAKEipKRG
Ib3V7otAQv5qA+vj9JKB0Ckhv6LqKp/Pe1ISSxDnu+hG7F30JGqUAnV7jbVPeDCs
HTVlSMmIcvePBL5pI4GuapqohbNKzNOIxw2F40SixeSJkVy9W4gMYqEFRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHEjt3dRBPKgT7Zpbrv/5NpPX21MB8GA1UdIwQY
MBaAFMGuOY+ardBji//qJMHHnriDL3h1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzct
OWQ1ZTYzNGFhZjlmLzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzctOWQ1ZTYzNGFhZjlm
LzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBaPm7So
kQIpM9LBFnZ2EOdr5H2eoN5T/pUdH7QWgTImsA3TN2Io1Nfpf0bIE0z/OUA8sqvo
bu8SIGjwWb6uvea0aSm6GbAIccQwiNZdb5caODJ3eyz0bf6DZyq5zZnvPpKUAq5n
ZZdUxODMqt/RlcNMM/4P32s22VhWp1dY/IJUPLTJ26h19Sgz+OfIffpGWyzGHq1X
nmENEtdwPn8dY9hCu3lYdRObLA3rAZrkTItKH0PYWjmv1oXox1PBz70SvpdZPxBl
JX8r3t3WaRbwn/rtKwFh1csAc+ur5hXAjJ0aCMFrfHcRWB4f6ahpq6ETpB/qcuWo
BTt0NOyZ4Z19Pw==
-----END CERTIFICATE-----