Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File:                     b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier:          kEPEBWqBQU7XJqftsphIOGQ56dgFEZW/+5wO6wkfuD8=
Subject key identifier:   7B:6F:99:27:2C:9A:9B:46:99:BC:DB:4C:2A:9D:3C:AA:EE:F5:7B:1C
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer:       /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial:       01962DF3A83185D10C51DD2F28A77543FC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number:          117B
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: DAreAYWsgLe5TG2UZYUchMLwkk1BUGj3Z5UejCbbchY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:31:85:d1:0c:51:dd:2f:28:a7:75:43:fc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=7b6f99272c9a9b4699bcdb4c2a9d3caaeef57b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:a1:e6:6e:30:2b:68:79:5e:b5:6c:f2:a5:
                    25:48:e9:78:6d:90:4e:62:94:e1:82:97:5c:36:1a:
                    c4:6c:e6:2f:a8:70:b4:f3:79:4a:0a:b0:dc:26:0f:
                    c8:7c:ce:11:3a:51:6c:fa:b5:69:62:49:22:4a:eb:
                    36:42:f2:70:e0:32:d5:11:59:6d:f1:3b:5d:bf:bc:
                    95:ac:37:6a:78:b5:ed:09:dd:96:c1:f5:12:d1:69:
                    0b:bb:d9:5f:5e:b9:c1:9f:b6:b2:ed:e0:0d:b4:f4:
                    48:60:12:cb:af:d0:d8:25:99:75:3e:72:c0:04:90:
                    8b:34:ee:97:52:71:66:c1:1f:e8:d1:83:f1:ab:37:
                    63:67:a6:35:58:b0:84:16:fc:e6:73:88:9f:0f:38:
                    31:8c:41:f5:03:76:b3:1f:76:b4:f2:88:d7:c8:d1:
                    50:74:24:7a:1e:43:0e:2e:fc:79:5c:9b:19:ab:b1:
                    b8:9c:37:90:cd:a0:0d:cb:bf:c9:c1:d5:4e:ff:2b:
                    d8:ac:9a:c2:4b:76:94:5a:b5:df:6e:f6:03:4a:a0:
                    1a:db:83:45:40:6f:da:08:66:53:b7:f0:28:c4:67:
                    0c:83:1c:c5:f7:0f:05:da:db:03:23:e8:9b:70:37:
                    a5:98:65:3e:aa:75:90:26:ee:c6:0e:f9:74:91:d1:
                    48:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:99:27:2C:9A:9B:46:99:BC:DB:4C:2A:9D:3C:AA:EE:F5:7B:1C
            X509v3 Authority Key Identifier:
                keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9f:18:4d:f1:4a:b8:00:60:ba:64:70:95:e4:78:7c:7c:8b:
         42:08:b8:09:4a:a9:64:b2:fd:11:74:9e:da:98:35:76:bf:ec:
         c9:9c:5f:c2:7d:9b:b8:3d:ce:e6:5b:3b:f1:e8:46:5b:9e:5a:
         a0:4b:91:e1:8c:bb:d5:28:98:f4:80:c7:4b:b8:eb:9b:eb:d5:
         37:94:c6:84:f9:4c:8c:b8:1b:90:89:66:5b:21:0a:b7:e3:90:
         05:0e:13:6d:6c:2d:bf:c3:93:ac:43:14:e0:98:c1:4f:4d:f3:
         48:62:11:e4:c4:2b:53:29:b1:bb:13:85:52:9a:89:2b:84:ac:
         6f:fb:f9:12:86:d6:eb:4b:f1:91:8e:8c:37:fd:8c:ca:09:1e:
         bd:21:ee:60:21:08:36:d7:39:37:22:e6:ef:78:2f:dc:6d:57:
         1e:07:9f:38:a2:6c:07:bf:96:f2:c1:4a:32:18:e6:88:ba:20:
         1f:52:24:1e:4e:dc:da:3f:57:38:75:dd:18:21:b7:47:ec:54:
         14:20:b3:c8:8f:2f:d9:31:0a:e8:b9:94:63:22:0a:6c:da:42:
         18:da:37:67:a1:bb:6d:3a:1a:29:ea:74:63:ce:8d:24:be:4a:
         e0:5e:6f:94:1e:35:f2:53:bb:b2:e5:19:24:bc:6f:36:e3:68:
         c3:ac:4e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86gxhdEMUd0vKKd1Q/xjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmFjNzhhZWExYmNmNDM4YTYxZWY5MTUwMjQ0OGY2MDk2
NDFkMmQwHhcNMjUwNDEzMDcwMTA1WhcNMjUwNDE0MDcwMTA1WjAzMTEwLwYDVQQD
Eyg3YjZmOTkyNzJjOWE5YjQ2OTliY2RiNGMyYTlkM2NhYWVlZjU3YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY2h5m4wK2h5XrVs8qUlSOl4bZBO
YpThgpdcNhrEbOYvqHC083lKCrDcJg/IfM4ROlFs+rVpYkkiSus2QvJw4DLVEVlt
8Ttdv7yVrDdqeLXtCd2WwfUS0WkLu9lfXrnBn7ay7eANtPRIYBLLr9DYJZl1PnLA
BJCLNO6XUnFmwR/o0YPxqzdjZ6Y1WLCEFvzmc4ifDzgxjEH1A3azH3a08ojXyNFQ
dCR6HkMOLvx5XJsZq7G4nDeQzaANy7/JwdVO/yvYrJrCS3aUWrXfbvYDSqAa24NF
QG/aCGZTt/AoxGcMgxzF9w8F2tsDI+ibcDelmGU+qnWQJu7GDvl0kdFIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtvmScsmptGmbzbTCqdPKru9XscMB8GA1UdIwQY
MBaAFG/6x4rqG89DimHvkVAkSPYJZB0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAt
MGMzNDM1MTNhZGUzLzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAtMGMzNDM1MTNhZGUz
LzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ8YTfFK
uABgumRwleR4fHyLQgi4CUqpZLL9EXSe2pg1dr/syZxfwn2buD3O5ls78ehGW55a
oEuR4Yy71SiY9IDHS7jrm+vVN5TGhPlMjLgbkIlmWyEKt+OQBQ4TbWwtv8OTrEMU
4JjBT03zSGIR5MQrUymxuxOFUpqJK4Ssb/v5EobW60vxkY6MN/2MygkevSHuYCEI
Ntc5NyLm73gv3G1XHgefOKJsB7+W8sFKMhjmiLogH1IkHk7c2j9XOHXdGCG3R+xU
FCCzyI8v2TEK6LmUYyIKbNpCGNo3Z6G7bToaKep0Y86NJL5K4F5vlB418lO7suUZ
JLxvNuNow6xOpw==
-----END CERTIFICATE-----