Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
File:                     H65TutIFt6PYV3Frsky_DVW_D2w.mft (raw, json)
Hash identifier:          gAoxKcGmRSqxJPi0JN4CF+k8CcgHO5kYzhySfvfCtJY=
Subject key identifier:   6D:4B:C8:A3:98:F7:00:AD:B3:B1:7D:D3:1C:3B:6C:47:33:E4:E9:C1
Authority key identifier: 1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C
Certificate issuer:       /CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
Certificate serial:       01962E99319F4377515AC526566854133F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
Manifest number:          089F
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: H65TutIFt6PYV3Frsky_DVW_D2w.crl (hash: alFg6iE2MChFgSXs2im9xAmLuhJTH/+xzPW5yd+NRcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:31:9f:43:77:51:5a:c5:26:56:68:54:13:3f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=6d4bc8a398f700adb3b17dd31c3b6c4733e4e9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:1b:b4:82:95:fe:8b:b1:0c:28:b3:a8:09:
                    25:25:5d:e7:34:38:2d:59:83:b7:ec:ee:c5:ff:2c:
                    3c:06:49:1b:91:8e:64:6f:7b:e1:2e:af:25:eb:34:
                    34:cf:4f:92:7c:53:18:b0:51:e9:74:f8:81:52:9b:
                    a2:80:11:ef:2c:52:a1:c9:75:d7:84:95:73:a5:d6:
                    62:b7:f4:a9:86:1a:29:34:02:8e:1b:a4:05:0a:d5:
                    05:88:83:b3:9f:9d:16:4d:21:1d:89:7e:09:c8:08:
                    dd:61:99:c7:f5:3e:66:61:87:a8:75:d2:5d:4c:fd:
                    05:52:bd:ae:83:82:06:6c:7a:b8:11:1a:42:ed:4e:
                    a7:9b:33:df:34:22:45:74:8d:e1:b2:a5:e2:07:6c:
                    55:e8:0a:5b:48:a7:a6:50:b9:4d:16:0f:2a:26:fc:
                    94:90:24:fd:7e:99:83:c1:d2:86:e4:31:f7:57:db:
                    46:37:c6:b7:84:2f:e9:cb:ea:be:9e:2a:12:15:83:
                    0a:22:76:d8:3a:69:e3:6e:2b:a1:06:ff:ff:b2:29:
                    32:dd:27:fb:79:38:10:1a:da:32:67:50:47:e0:30:
                    da:d0:ac:3b:e7:3c:3a:10:d5:9a:2c:75:65:a9:57:
                    bc:b1:4a:da:28:d6:a1:63:1f:9d:37:98:c5:3f:b1:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4B:C8:A3:98:F7:00:AD:B3:B1:7D:D3:1C:3B:6C:47:33:E4:E9:C1
            X509v3 Authority Key Identifier:
                keyid:1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:89:f6:de:6b:52:c2:7f:e8:d1:63:bb:29:08:c8:f4:dc:
         fa:3b:00:76:ce:aa:62:16:96:59:6a:89:c2:db:4a:18:94:3f:
         35:68:a2:f9:3e:76:e2:8e:2d:9f:44:b6:12:13:57:1b:4c:96:
         9e:bc:c4:72:05:7d:e6:cc:75:ff:57:d3:98:36:90:c2:36:8f:
         53:55:02:da:98:1e:24:82:9f:72:c4:c7:21:45:da:58:00:3c:
         08:d3:73:cc:02:82:83:00:a6:71:76:87:fe:9d:2a:57:00:5d:
         f6:bd:1d:b7:e3:ca:09:03:95:99:8f:73:0d:0d:ff:f7:14:fb:
         27:ff:a9:1c:ee:41:0b:78:c6:6e:e3:26:e2:64:96:c5:41:72:
         e7:f8:4c:43:c8:e8:ba:fa:b7:b3:a5:0d:ed:19:bc:6c:d9:45:
         09:22:8e:d3:67:e0:ba:4d:9d:63:33:3c:15:60:fa:de:47:5c:
         c4:5a:14:51:e5:c4:81:41:eb:f6:d4:75:4d:d1:0b:1d:97:36:
         55:50:dd:8a:51:fc:22:9f:fb:b5:d4:2c:72:44:02:54:ea:5e:
         a8:76:52:b7:ba:65:79:8c:a6:f1:97:97:d8:fb:64:6d:61:02:
         ae:ff:c8:ef:fa:57:4f:b9:9d:65:82:85:31:da:8d:db:e5:4d:
         9b:d2:9b:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTGfQ3dRWsUmVmhUEz94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWU1M2JhZDIwNWI3YTNkODU3NzE2YmIyNGNiZjBkNTVi
ZjBmNmMwHhcNMjUwNDEzMTAwMTUzWhcNMjUwNDE0MTAwMTUzWjAzMTEwLwYDVQQD
Eyg2ZDRiYzhhMzk4ZjcwMGFkYjNiMTdkZDMxYzNiNmM0NzMzZTRlOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lcbtIKV/ouxDCizqAklJV3nNDgt
WYO37O7F/yw8BkkbkY5kb3vhLq8l6zQ0z0+SfFMYsFHpdPiBUpuigBHvLFKhyXXX
hJVzpdZit/SphhopNAKOG6QFCtUFiIOzn50WTSEdiX4JyAjdYZnH9T5mYYeoddJd
TP0FUr2ug4IGbHq4ERpC7U6nmzPfNCJFdI3hsqXiB2xV6ApbSKemULlNFg8qJvyU
kCT9fpmDwdKG5DH3V9tGN8a3hC/py+q+nioSFYMKInbYOmnjbiuhBv//siky3Sf7
eTgQGtoyZ1BH4DDa0Kw75zw6ENWaLHVlqVe8sUraKNahYx+dN5jFP7GTBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1LyKOY9wCts7F90xw7bEcz5OnBMB8GA1UdIwQY
MBaAFB+uU7rSBbej2Fdxa7JMvw1Vvw9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84NmM3ODktNzRmZi00NDU2LWI3NWEt
M2FjNGFkMjllNDZlLzEvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84NmM3ODktNzRmZi00NDU2LWI3NWEtM2FjNGFkMjllNDZl
LzEvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjaJ9t5r
UsJ/6NFjuykIyPTc+jsAds6qYhaWWWqJwttKGJQ/NWii+T524o4tn0S2EhNXG0yW
nrzEcgV95sx1/1fTmDaQwjaPU1UC2pgeJIKfcsTHIUXaWAA8CNNzzAKCgwCmcXaH
/p0qVwBd9r0dt+PKCQOVmY9zDQ3/9xT7J/+pHO5BC3jGbuMm4mSWxUFy5/hMQ8jo
uvq3s6UN7Rm8bNlFCSKO02fguk2dYzM8FWD63kdcxFoUUeXEgUHr9tR1TdELHZc2
VVDdilH8Ip/7tdQsckQCVOpeqHZSt7pleYym8ZeX2PtkbWECrv/I7/pXT7mdZYKF
MdqN2+VNm9KbOw==
-----END CERTIFICATE-----