Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File:                     W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier:          O5sapg0H1zw4BdRIaJH66K+aiQ5NSs9ennS6sDsW6eo=
Subject key identifier:   7B:89:43:80:F0:9D:26:6F:4A:3F:0D:A3:DE:0D:1C:BF:AA:3C:47:F7
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer:       /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial:       01962E98F6B217B117E996BAAD64395B3561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: ryET57nc0NHMoTaSdkovMTxg2nByxV3qRSdo/26pfn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f6:b2:17:b1:17:e9:96:ba:ad:64:39:5b:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=7b894380f09d266f4a3f0da3de0d1cbfaa3c47f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:22:b2:81:97:49:53:d0:af:01:8b:a2:85:
                    4d:a6:fd:8a:2c:31:2d:fe:c7:93:0c:62:db:bc:10:
                    13:e8:f4:2f:9c:e3:b6:f9:31:ce:99:eb:a5:a3:07:
                    f9:f2:36:07:fa:fb:e6:49:68:9e:21:64:3f:b7:d8:
                    d2:59:90:a8:86:56:d0:c3:14:be:f3:2e:66:27:ff:
                    96:a4:5a:e6:a4:00:20:99:0e:86:da:d0:e8:8f:86:
                    b8:c3:d6:71:c6:7e:46:f1:e9:0d:f3:52:97:8d:54:
                    d7:9c:bb:37:da:8e:32:03:e1:86:75:bb:a9:33:95:
                    a7:09:b9:25:52:cc:f0:78:fe:2a:69:64:cf:d9:96:
                    d6:f9:39:3d:66:9f:27:ab:1c:e3:5a:4e:28:2e:95:
                    6d:bc:8b:ee:63:66:f8:e3:ad:3a:bc:20:2d:48:55:
                    f0:fc:10:50:f6:1b:d5:a4:05:a2:7c:9d:dd:a4:d3:
                    f6:8e:e4:f6:54:7a:2c:be:df:e4:6a:1f:41:ee:e6:
                    09:e6:00:ee:c6:48:dd:0e:bc:38:83:ad:5c:80:d3:
                    6c:61:02:9f:78:ba:67:19:a4:4f:24:02:0d:1b:f1:
                    fb:e9:74:a8:2b:3a:d8:03:82:72:c5:76:94:b7:17:
                    e8:4d:0f:ec:22:78:dd:20:f8:35:ad:63:7a:a2:f9:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:89:43:80:F0:9D:26:6F:4A:3F:0D:A3:DE:0D:1C:BF:AA:3C:47:F7
            X509v3 Authority Key Identifier:
                keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:df:ec:ca:b1:c6:c3:56:8a:18:e6:05:9b:f4:8e:bf:cf:
         7a:35:f8:e2:2e:2f:7c:72:65:ea:13:f3:8d:9e:9c:fd:14:1b:
         5a:a5:bb:a5:92:34:86:84:7a:4d:fb:37:d3:c8:68:5a:e1:05:
         bb:70:80:75:3c:6a:9e:4e:5b:98:a7:31:eb:45:b0:a9:9b:9e:
         1f:86:78:3e:3e:a6:d3:0a:fd:3e:c7:71:75:f7:87:fe:8d:1b:
         69:23:ae:70:29:be:91:de:c3:8e:da:75:28:d6:c1:3b:aa:10:
         2f:a0:7c:36:59:9e:1a:cc:95:d0:cd:b9:7b:87:6b:70:b7:11:
         69:ac:10:99:52:b7:ff:b3:90:6b:1c:f8:2a:60:4a:0f:a7:60:
         40:5f:23:c3:41:3e:ca:e1:7d:ea:87:48:c3:36:b1:b5:3c:d9:
         4a:91:6b:0d:59:af:bf:14:ed:03:9e:87:f6:95:f7:f6:fe:0d:
         4b:98:83:52:f2:31:69:fd:dd:68:1b:ed:4f:6c:13:07:f3:a5:
         f2:2e:7a:98:7c:b5:80:a4:b6:bb:0d:18:ab:c2:58:32:ac:53:
         6a:9b:12:03:da:2d:6b:4c:a0:d6:fb:c5:df:be:3e:82:d2:60:
         f9:98:6f:da:71:89:37:a3:b2:83:33:18:94:d7:3b:5a:09:a4:
         f8:49:91:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPayF7EX6Za6rWQ5WzVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYmQ2OWQ5OTg0ODRjMTM5ZmFjMTI2NWE2NDU3NDVmMzMz
M2NmMWQwHhcNMjUwNDEzMTAwMTM4WhcNMjUwNDE0MTAwMTM4WjAzMTEwLwYDVQQD
Eyg3Yjg5NDM4MGYwOWQyNjZmNGEzZjBkYTNkZTBkMWNiZmFhM2M0N2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFcisoGXSVPQrwGLooVNpv2KLDEt
/seTDGLbvBAT6PQvnOO2+THOmeulowf58jYH+vvmSWieIWQ/t9jSWZCohlbQwxS+
8y5mJ/+WpFrmpAAgmQ6G2tDoj4a4w9Zxxn5G8ekN81KXjVTXnLs32o4yA+GGdbup
M5WnCbklUszweP4qaWTP2ZbW+Tk9Zp8nqxzjWk4oLpVtvIvuY2b44606vCAtSFXw
/BBQ9hvVpAWifJ3dpNP2juT2VHosvt/kah9B7uYJ5gDuxkjdDrw4g61cgNNsYQKf
eLpnGaRPJAING/H76XSoKzrYA4JyxXaUtxfoTQ/sInjdIPg1rWN6ovkW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuJQ4DwnSZvSj8No94NHL+qPEf3MB8GA1UdIwQY
MBaAFFu9admYSEwTn6wSZaZFdF8zM88dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAt
Y2ZhOTczODRiYzlhLzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAtY2ZhOTczODRiYzlh
LzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBnf7Mqx
xsNWihjmBZv0jr/PejX44i4vfHJl6hPzjZ6c/RQbWqW7pZI0hoR6Tfs308hoWuEF
u3CAdTxqnk5bmKcx60WwqZueH4Z4Pj6m0wr9PsdxdfeH/o0baSOucCm+kd7Djtp1
KNbBO6oQL6B8NlmeGsyV0M25e4drcLcRaawQmVK3/7OQaxz4KmBKD6dgQF8jw0E+
yuF96odIwzaxtTzZSpFrDVmvvxTtA56H9pX39v4NS5iDUvIxaf3daBvtT2wTB/Ol
8i56mHy1gKS2uw0Yq8JYMqxTapsSA9ota0yg1vvF374+gtJg+Zhv2nGJN6OygzMY
lNc7Wgmk+EmRyw==
-----END CERTIFICATE-----