Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File:                     1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier:          UgEzkbLeS41EXVHqXTa7lFR7Oi/jbzTVPMowvzLjYqA=
Subject key identifier:   0C:AF:B6:D9:20:50:AB:09:D2:76:08:44:49:11:68:37:39:14:8C:EB
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer:       /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial:       01962F74984D153D788A078DD369D33FBC7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: cHtSpGY+FX0SPNNHrVfTUooxuNjX2ObDCog1P0sXvWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:98:4d:15:3d:78:8a:07:8d:d3:69:d3:3f:bc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=0cafb6d92050ab09d27608444911683739148ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:e6:d4:37:70:dc:59:25:12:b0:ab:8e:68:
                    b7:93:64:b3:a8:02:42:ab:8b:ee:eb:ee:00:59:6b:
                    69:d5:25:cf:78:d3:bf:38:3d:9b:62:86:9d:4e:19:
                    34:25:c6:d4:fa:f6:a5:48:78:29:ef:9f:97:03:2c:
                    04:88:72:6d:cd:14:e6:d4:7d:99:90:b3:14:95:21:
                    ab:71:3d:62:b6:b4:7d:ab:b5:16:cd:0c:e8:11:39:
                    b2:4b:fe:cc:12:e1:83:f4:ea:9a:df:c2:77:e6:1f:
                    15:0a:cb:60:23:24:1b:45:18:ef:c6:6d:a3:51:31:
                    3c:de:98:21:1a:bb:46:0f:82:df:06:a2:b8:5c:dc:
                    13:8f:38:6f:e7:6f:7a:88:0f:48:6a:37:a0:ec:33:
                    09:6f:c4:21:95:0a:b9:0f:52:9a:16:d4:0e:b2:9b:
                    88:b2:45:ae:78:0c:60:b0:c9:cd:a9:11:75:5a:10:
                    21:91:a4:a5:bd:5e:bb:50:6f:71:80:d7:f4:fd:5f:
                    9c:27:bc:62:de:28:b9:b7:65:a8:e6:1c:db:74:23:
                    d4:59:8b:48:dd:63:1f:c1:f5:f6:09:cd:ca:dc:d7:
                    85:9a:d9:e4:01:b6:70:26:15:9e:05:42:16:f9:15:
                    2e:03:1c:bd:75:58:19:32:c5:eb:41:5a:40:36:c0:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AF:B6:D9:20:50:AB:09:D2:76:08:44:49:11:68:37:39:14:8C:EB
            X509v3 Authority Key Identifier:
                keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:71:43:03:59:b4:60:8a:49:af:0d:2d:84:e0:4f:a3:de:
         a0:a8:12:a9:cc:ac:6c:3b:6d:c5:21:be:6d:d8:ff:08:91:08:
         cc:a5:43:8c:68:5c:55:84:9c:b5:99:87:99:2b:29:47:cc:d6:
         d0:a9:60:ad:55:de:1c:63:61:2b:b5:46:00:bc:71:10:e1:b9:
         16:e1:8b:b5:4b:f0:a5:3f:56:a3:84:b1:c5:bc:cf:9f:bf:2a:
         4a:90:2d:4d:9c:47:bd:fe:d6:50:65:fe:6b:5f:e8:18:63:71:
         83:ba:6c:fa:96:f7:ac:32:e8:46:fa:2d:b9:5d:66:80:0f:43:
         43:09:c2:c3:ce:b4:a5:40:8e:06:7e:74:16:a4:4a:db:98:d0:
         87:08:c6:e0:56:39:8e:0d:2a:55:1e:1a:59:a6:59:4b:60:59:
         69:83:9a:79:af:ad:23:1a:35:af:08:f0:55:00:3c:6c:38:57:
         8e:ee:a2:91:a7:2b:15:25:8d:4a:7f:0d:f6:c5:46:03:d8:a6:
         ff:b9:a9:f8:7c:49:fd:95:02:4f:eb:ff:d7:8a:84:44:91:23:
         48:47:11:f8:10:35:6a:36:81:2a:dd:50:ff:ee:33:3a:c9:62:
         8f:82:93:fb:d0:f7:68:20:4b:69:fe:3a:b0:17:62:43:17:d9:
         0b:0c:3c:3d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvdJhNFT14igeN02nTP7x+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzM1NjZjOGM1YjgzYjJmM2UxNjk4Yjk3MTEyNTk0ZTgy
MTA4MTgwHhcNMjUwNDEzMTQwMTMyWhcNMjUwNDE0MTQwMTMyWjAzMTEwLwYDVQQD
EygwY2FmYjZkOTIwNTBhYjA5ZDI3NjA4NDQ0OTExNjgzNzM5MTQ4Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom7m1Ddw3FklErCrjmi3k2SzqAJC
q4vu6+4AWWtp1SXPeNO/OD2bYoadThk0JcbU+valSHgp75+XAywEiHJtzRTm1H2Z
kLMUlSGrcT1itrR9q7UWzQzoETmyS/7MEuGD9Oqa38J35h8VCstgIyQbRRjvxm2j
UTE83pghGrtGD4LfBqK4XNwTjzhv5296iA9Iajeg7DMJb8QhlQq5D1KaFtQOspuI
skWueAxgsMnNqRF1WhAhkaSlvV67UG9xgNf0/V+cJ7xi3ii5t2Wo5hzbdCPUWYtI
3WMfwfX2Cc3K3NeFmtnkAbZwJhWeBUIW+RUuAxy9dVgZMsXrQVpANsBIAQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAyvttkgUKsJ0nYIREkRaDc5FIzrMB8GA1UdIwQY
MBaAFPozVmyMW4Oy8+Fpi5cRJZToIQgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qTldiSXhiZzdMejRXbUxseEVsbE9naENCZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTMxMzQ3LWQ3OWItNDE0NC04NzQ5
LWMzMzM3OTRhN2I5Ny8xLzEtak5XYkl4Ymc3THo0V21MbHhFbGxPZ2hDQmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFjL2UzMTM0Ny1kNzliLTQxNDQtODc0OS1jMzMzNzk0YTdi
OTcvMS8xLWpOV2JJeGJnN0x6NFdtTGx4RWxsT2doQ0JnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzxx
QwNZtGCKSa8NLYTgT6PeoKgSqcysbDttxSG+bdj/CJEIzKVDjGhcVYSctZmHmSsp
R8zW0KlgrVXeHGNhK7VGALxxEOG5FuGLtUvwpT9Wo4SxxbzPn78qSpAtTZxHvf7W
UGX+a1/oGGNxg7ps+pb3rDLoRvotuV1mgA9DQwnCw860pUCOBn50FqRK25jQhwjG
4FY5jg0qVR4aWaZZS2BZaYOaea+tIxo1rwjwVQA8bDhXju6ikacrFSWNSn8N9sVG
A9im/7mp+HxJ/ZUCT+v/14qERJEjSEcR+BA1ajaBKt1Q/+4zOslij4KT+9D3aCBL
af46sBdiQxfZCww8PQ==
-----END CERTIFICATE-----