Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File:                     O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier:          Exf9YEUAA2e6HGFBbJXvqiDmpHwoNHCsH80M/8e5iSA=
Subject key identifier:   59:EA:6E:1E:01:7D:96:95:6D:C8:79:C3:A3:BB:E2:F0:B0:68:3F:31
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer:       /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial:       01962F3D7663D1FDE644A854566DF823366A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number:          0D91
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: gVnxXU2OMfKEJ2WyloMcyEGM+hQGsAz4SJc16GqW4ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:63:d1:fd:e6:44:a8:54:56:6d:f8:23:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=59ea6e1e017d96956dc879c3a3bbe2f0b0683f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:f9:8f:44:57:bb:b5:b7:32:de:d8:8c:83:
                    8d:c9:ac:5f:d7:47:43:23:4e:88:5e:ff:0a:77:6a:
                    b3:b7:fb:30:5e:90:f7:33:03:3f:74:8f:c3:3a:d7:
                    01:77:08:de:0b:01:d5:bc:87:c6:3e:5b:e2:b7:8b:
                    8a:f8:f6:22:45:95:8e:45:1a:f3:3b:37:e9:7b:f1:
                    f8:68:85:02:92:f4:e2:97:65:92:e2:83:d4:1f:0b:
                    f4:f7:4e:fb:e1:13:7c:d4:fd:73:7f:0b:94:92:e2:
                    48:22:8f:68:2b:f2:bc:51:96:bd:74:a7:f7:f6:5e:
                    1c:f9:5f:a8:be:c2:b4:35:65:9a:c9:b9:79:06:fa:
                    e0:4a:4a:d0:82:58:4b:8e:5e:28:ed:d5:28:b8:f8:
                    8d:1e:63:de:cd:e9:20:c5:18:8c:a3:fa:e7:d4:7f:
                    03:fc:be:6e:f2:73:bc:3f:77:bd:99:d6:02:f8:54:
                    7c:b7:b0:22:7b:cf:a1:2c:38:8a:c9:c9:73:f8:77:
                    7c:45:85:32:02:3f:e5:91:da:6e:2d:a8:21:15:c9:
                    0f:8d:f2:f2:51:90:5a:94:bc:4e:30:dc:f9:e4:7b:
                    3c:16:7c:79:aa:c0:e2:6e:b9:c7:ce:76:bd:21:fe:
                    fa:ce:3a:34:c0:ac:76:fe:83:74:43:fd:38:cc:2f:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EA:6E:1E:01:7D:96:95:6D:C8:79:C3:A3:BB:E2:F0:B0:68:3F:31
            X509v3 Authority Key Identifier:
                keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:c6:ad:b1:66:e8:c8:e5:01:19:51:0c:07:33:e9:4e:86:
         b8:c3:46:04:78:2b:62:06:a4:38:43:17:47:fa:1b:e9:6f:a7:
         be:55:1a:80:ae:fd:ba:f9:f9:21:11:fc:1d:ab:f1:69:ac:75:
         42:99:59:3a:20:49:55:b1:d1:d0:20:26:60:bf:7d:de:9a:3e:
         a2:19:f3:eb:de:00:53:85:f8:3c:46:e2:53:3b:05:c1:55:85:
         0d:b2:40:57:28:e0:aa:05:c4:84:b9:95:28:eb:7a:32:4c:5d:
         5c:07:09:b0:f6:83:f4:6a:5d:45:57:44:e2:d1:b7:38:cd:9b:
         c6:cb:89:0a:07:80:20:da:de:1e:51:7c:52:c9:c0:f4:da:67:
         d2:aa:f2:b1:cd:cb:b7:12:aa:c7:20:33:fe:f1:03:c7:bc:c5:
         a0:9b:6c:4e:57:45:ba:d4:a9:8c:c1:46:50:62:45:1f:a6:ea:
         3c:fb:55:d8:bd:24:2e:3c:6d:aa:91:cf:8b:c8:13:8d:46:4c:
         4e:86:5f:0c:86:80:6d:5c:81:2c:90:11:0e:96:af:ca:a3:b8:
         cf:84:f4:d3:c4:55:15:38:f5:e3:44:fa:6e:7c:1c:78:f5:11:
         35:01:54:b1:88:2f:b1:3b:a6:31:b6:3a:73:16:f1:95:3c:1f:
         98:bd:78:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXZj0f3mRKhUVm34IzZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTVlN2ZlYjkwNzEzNzI5OWY1NzkyYzM2Mzk1ZWZiYTli
MzRiNjIwHhcNMjUwNDEzMTMwMTE5WhcNMjUwNDE0MTMwMTE5WjAzMTEwLwYDVQQD
Eyg1OWVhNmUxZTAxN2Q5Njk1NmRjODc5YzNhM2JiZTJmMGIwNjgzZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOz5j0RXu7W3Mt7YjIONyaxf10dD
I06IXv8Kd2qzt/swXpD3MwM/dI/DOtcBdwjeCwHVvIfGPlvit4uK+PYiRZWORRrz
Ozfpe/H4aIUCkvTil2WS4oPUHwv090774RN81P1zfwuUkuJIIo9oK/K8UZa9dKf3
9l4c+V+ovsK0NWWaybl5BvrgSkrQglhLjl4o7dUouPiNHmPezekgxRiMo/rn1H8D
/L5u8nO8P3e9mdYC+FR8t7Aie8+hLDiKyclz+Hd8RYUyAj/lkdpuLaghFckPjfLy
UZBalLxOMNz55Hs8Fnx5qsDibrnHzna9If76zjo0wKx2/oN0Q/04zC8LmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnqbh4BfZaVbch5w6O74vCwaD8xMB8GA1UdIwQY
MBaAFDtV5/65BxNymfV5LDY5Xvups0tiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Yjc2OGMtMGUwYS00YWQzLTkxMDAt
YTQ0MWUyNGJlMDM2LzEvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Yjc2OGMtMGUwYS00YWQzLTkxMDAtYTQ0MWUyNGJlMDM2
LzEvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1jGrbFm
6MjlARlRDAcz6U6GuMNGBHgrYgakOEMXR/ob6W+nvlUagK79uvn5IRH8Havxaax1
QplZOiBJVbHR0CAmYL993po+ohnz694AU4X4PEbiUzsFwVWFDbJAVyjgqgXEhLmV
KOt6MkxdXAcJsPaD9GpdRVdE4tG3OM2bxsuJCgeAINreHlF8UsnA9Npn0qrysc3L
txKqxyAz/vEDx7zFoJtsTldFutSpjMFGUGJFH6bqPPtV2L0kLjxtqpHPi8gTjUZM
ToZfDIaAbVyBLJARDpavyqO4z4T008RVFTj140T6bnwcePURNQFUsYgvsTumMbY6
cxbxlTwfmL14Dg==
-----END CERTIFICATE-----