Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft
File:                     IujBtA7lecGDeWRV9Aklc9mVodI.mft (raw, json)
Hash identifier:          5lh9m4o7vjUmHU9Zyl+zPXIi4pp2hAnkMHZEWLOxPbg=
Subject key identifier:   F0:40:EE:86:00:AA:E4:81:7D:B2:09:AC:81:38:56:E5:BE:13:47:43
Authority key identifier: 22:E8:C1:B4:0E:E5:79:C1:83:79:64:55:F4:09:25:73:D9:95:A1:D2
Certificate issuer:       /CN=22e8c1b40ee579c183796455f4092573d995a1d2
Certificate serial:       01962E98AB5C5B1220DD3B51D7EFAF12ABBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IujBtA7lecGDeWRV9Aklc9mVodI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft
Manifest number:          094C
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: IujBtA7lecGDeWRV9Aklc9mVodI.crl (hash: BA1oIW0FQDqTvG89Rhg6gc3WHSwXqT4HPl5kZ81vYds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ab:5c:5b:12:20:dd:3b:51:d7:ef:af:12:ab:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e8c1b40ee579c183796455f4092573d995a1d2
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=f040ee8600aae4817db209ac813856e5be134743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:7b:aa:a6:8f:d6:ca:de:a4:d0:df:7d:17:
                    3a:71:b1:1b:ee:7c:48:98:10:ff:a9:7d:d2:d5:ee:
                    ce:48:84:e9:90:8d:46:7e:d6:8d:02:c9:27:d6:54:
                    3b:c6:89:a4:e3:66:27:36:f7:c0:7d:62:f9:cc:e1:
                    8d:44:31:9f:ab:71:09:40:ce:b3:8e:6a:be:6d:83:
                    a5:35:58:9e:d2:7e:c0:0a:f8:e9:2c:28:fe:d7:62:
                    7f:bd:4a:3a:b0:24:ed:fa:0d:70:60:8d:85:4c:29:
                    e8:d3:77:f3:13:30:a5:0e:cd:4a:41:0c:0f:6a:fe:
                    6b:73:25:b4:bf:91:fa:c6:dc:e3:96:e0:75:3e:2e:
                    3d:45:81:b7:72:0d:6e:22:eb:6b:b4:bd:d7:ac:d9:
                    fb:c8:32:37:43:8c:1b:8b:15:5d:8b:0b:fb:03:b0:
                    5a:11:a2:11:fe:c1:1a:8c:3b:58:e8:90:af:63:9f:
                    e8:c3:c8:7c:3e:21:49:5e:a8:47:e7:07:0a:c0:5a:
                    2f:bb:64:5e:4e:4f:f0:c9:b8:12:5e:69:64:f8:a2:
                    47:0b:89:f5:be:ad:59:ac:a4:48:3b:bd:fb:50:1c:
                    c7:56:a9:9a:a4:72:97:06:54:07:3a:2c:af:7b:98:
                    20:d9:9d:03:eb:93:57:63:2b:66:04:85:95:df:49:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:40:EE:86:00:AA:E4:81:7D:B2:09:AC:81:38:56:E5:BE:13:47:43
            X509v3 Authority Key Identifier:
                keyid:22:E8:C1:B4:0E:E5:79:C1:83:79:64:55:F4:09:25:73:D9:95:A1:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IujBtA7lecGDeWRV9Aklc9mVodI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/929d07-7e3b-4c9a-af91-e212fd43897a/1/IujBtA7lecGDeWRV9Aklc9mVodI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:11:af:c2:c2:55:73:56:df:06:37:b4:9c:97:47:88:fc:
         42:ac:8b:7c:a7:00:b1:fc:76:49:a3:6d:45:b3:e1:51:27:65:
         ec:15:15:da:d5:50:2b:96:56:22:3e:2b:ff:a1:41:79:71:9d:
         85:04:89:07:8c:fa:fa:7a:4e:20:ad:1b:7a:7d:23:40:ac:10:
         f8:5a:f7:57:ad:a6:50:aa:5f:ed:4f:0f:22:f2:52:29:93:72:
         69:ed:76:0e:92:a7:7b:ac:9f:2c:34:1c:45:97:cf:b4:99:91:
         c6:74:56:9e:57:9a:95:4f:69:8d:bc:32:9b:54:e1:e3:7d:1a:
         6e:79:bc:8f:56:58:e8:d8:46:89:a9:df:3e:14:ee:0d:6c:86:
         fc:f0:e1:07:e9:25:45:e5:b7:ab:fa:9b:91:fa:da:2e:e3:c3:
         fa:51:be:00:50:dd:5e:52:c8:18:88:5a:17:06:e9:30:c9:c1:
         09:b0:80:a4:98:14:e6:0c:35:e7:24:19:80:01:27:af:00:93:
         e3:aa:c6:13:c1:03:9e:2b:bf:b8:22:25:b1:e7:5e:5a:86:07:
         29:06:d2:fa:cf:18:34:f4:ae:ac:4f:9c:fe:98:7d:75:38:e8:
         46:69:a8:34:0f:43:d4:3f:90:c7:4d:5e:23:11:88:9d:4d:16:
         3a:00:fe:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKtcWxIg3TtR1++vEqu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZThjMWI0MGVlNTc5YzE4Mzc5NjQ1NWY0MDkyNTczZDk5
NWExZDIwHhcNMjUwNDEzMTAwMTE5WhcNMjUwNDE0MTAwMTE5WjAzMTEwLwYDVQQD
EyhmMDQwZWU4NjAwYWFlNDgxN2RiMjA5YWM4MTM4NTZlNWJlMTM0NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRN7qqaP1srepNDffRc6cbEb7nxI
mBD/qX3S1e7OSITpkI1GftaNAskn1lQ7xomk42YnNvfAfWL5zOGNRDGfq3EJQM6z
jmq+bYOlNVie0n7ACvjpLCj+12J/vUo6sCTt+g1wYI2FTCno03fzEzClDs1KQQwP
av5rcyW0v5H6xtzjluB1Pi49RYG3cg1uIutrtL3XrNn7yDI3Q4wbixVdiwv7A7Ba
EaIR/sEajDtY6JCvY5/ow8h8PiFJXqhH5wcKwFovu2ReTk/wybgSXmlk+KJHC4n1
vq1ZrKRIO737UBzHVqmapHKXBlQHOiyve5gg2Z0D65NXYytmBIWV30k52wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBA7oYAquSBfbIJrIE4VuW+E0dDMB8GA1UdIwQY
MBaAFCLowbQO5XnBg3lkVfQJJXPZlaHSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVqQnRBN2xlY0dEZVdSVjlBa2xjOW1Wb2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MjlkMDctN2UzYi00YzlhLWFmOTEt
ZTIxMmZkNDM4OTdhLzEvSXVqQnRBN2xlY0dEZVdSVjlBa2xjOW1Wb2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MjlkMDctN2UzYi00YzlhLWFmOTEtZTIxMmZkNDM4OTdh
LzEvSXVqQnRBN2xlY0dEZVdSVjlBa2xjOW1Wb2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1ERr8LC
VXNW3wY3tJyXR4j8QqyLfKcAsfx2SaNtRbPhUSdl7BUV2tVQK5ZWIj4r/6FBeXGd
hQSJB4z6+npOIK0ben0jQKwQ+Fr3V62mUKpf7U8PIvJSKZNyae12DpKne6yfLDQc
RZfPtJmRxnRWnlealU9pjbwym1Th430abnm8j1ZY6NhGianfPhTuDWyG/PDhB+kl
ReW3q/qbkfraLuPD+lG+AFDdXlLIGIhaFwbpMMnBCbCApJgU5gw15yQZgAEnrwCT
46rGE8EDniu/uCIlsedeWoYHKQbS+s8YNPSurE+c/ph9dTjoRmmoNA9D1D+Qx01e
IxGInU0WOgD+Vg==
-----END CERTIFICATE-----