Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
File:                     Dwtr5Xhb-hruttYyBayhdrcqIxI.mft (raw, json)
Hash identifier:          8rEN9lIoQb242IfGEr08+dlo3KLZMAfwoD8lLsMLbL0=
Subject key identifier:   2A:49:4A:4F:D2:4F:A3:77:B6:AF:AD:EF:7C:78:EC:1F:C1:F9:08:DE
Authority key identifier: 0F:0B:6B:E5:78:5B:FA:1A:EE:B6:D6:32:05:AC:A1:76:B7:2A:23:12
Certificate issuer:       /CN=0f0b6be5785bfa1aeeb6d63205aca176b72a2312
Certificate serial:       01962E987AD5DA362890DA35CE96E3A9ED4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
Manifest number:          09C6
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: Dwtr5Xhb-hruttYyBayhdrcqIxI.crl (hash: 8NZ7YZp05vaa4dGvX1BH6vgScaIxxk7gOHfTBHJgwZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7a:d5:da:36:28:90:da:35:ce:96:e3:a9:ed:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0b6be5785bfa1aeeb6d63205aca176b72a2312
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=2a494a4fd24fa377b6afadef7c78ec1fc1f908de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:cc:9e:ae:4a:cb:15:a8:e5:52:cc:7a:e1:
                    bc:ef:8d:55:d3:8b:d5:71:bd:9d:7c:66:06:ba:cb:
                    27:e5:fb:cd:1d:50:fb:0d:47:ee:f8:a4:de:6b:d9:
                    4e:c8:67:cd:f0:c6:03:5e:9a:55:53:fb:ac:75:95:
                    f7:77:09:d9:ca:19:de:58:2f:15:a3:cf:ef:16:5a:
                    cf:ed:3b:34:2a:e4:41:91:82:6d:96:04:4d:ac:c7:
                    17:a2:af:2c:da:c8:15:ff:9a:a6:c9:00:47:21:b5:
                    5c:73:03:78:a3:10:3b:dc:6c:9a:7c:e7:26:aa:a9:
                    36:73:14:c6:52:e3:03:40:aa:a4:32:5d:2f:b6:34:
                    03:a6:7c:3c:75:e8:a8:24:5b:cc:4b:42:19:8b:27:
                    0a:9d:63:78:d0:51:db:6c:68:19:0d:64:2a:a4:8d:
                    21:dc:ac:92:7b:2b:67:0c:48:14:b3:55:68:25:ef:
                    8d:a3:8e:c8:8e:cf:47:17:50:68:f4:72:13:55:00:
                    7f:70:15:ea:cb:1c:cd:44:64:e3:57:7a:0d:60:26:
                    82:5d:c9:82:b7:f6:4c:d6:78:0b:f3:bc:61:7e:27:
                    b4:7a:01:22:d2:d0:65:f8:6c:b9:c5:96:53:f8:b1:
                    7a:29:0f:f9:13:16:05:20:8e:1c:98:4b:f5:9a:12:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:49:4A:4F:D2:4F:A3:77:B6:AF:AD:EF:7C:78:EC:1F:C1:F9:08:DE
            X509v3 Authority Key Identifier:
                keyid:0F:0B:6B:E5:78:5B:FA:1A:EE:B6:D6:32:05:AC:A1:76:B7:2A:23:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:94:ca:b6:63:07:7d:e8:b7:52:26:c8:fa:97:b8:f5:78:
         d6:40:11:8b:a1:3d:8a:21:45:10:0b:8c:e0:81:78:00:5b:f9:
         ef:15:cc:5c:95:37:af:0b:7f:4f:b9:94:6c:bb:8c:fc:2c:9b:
         b3:5b:33:9b:8a:a0:e4:d0:73:85:c2:09:12:5a:8e:9c:f0:43:
         9f:84:e0:83:b7:40:31:78:d5:a2:6a:54:1a:b3:00:b0:44:8b:
         02:94:b8:f8:77:8a:ab:f7:8d:b5:02:3c:6e:2e:90:93:6b:4c:
         b7:1c:8e:06:4d:64:54:97:fe:e3:59:a3:de:e8:13:89:d0:5b:
         57:ce:8f:4d:e3:53:f3:cc:42:9f:17:4f:a9:93:cc:db:d1:d1:
         2d:56:59:0e:c5:66:c4:5d:93:60:43:3d:25:fe:ea:7c:da:99:
         d7:f9:55:20:ea:2f:cc:3c:10:a8:ad:c2:e5:51:89:70:ae:d3:
         e1:eb:69:05:3f:85:52:ae:b7:d6:e2:57:31:6f:b4:73:61:d9:
         25:d1:2b:a0:f9:45:6c:a6:fe:c6:8c:dc:2d:d7:a2:f4:81:d4:
         8d:ab:d0:92:f7:01:e7:0d:f5:70:17:c0:80:10:f8:b2:66:ea:
         e0:1a:c1:9f:ae:cd:cf:ae:78:6e:d9:b6:74:fb:31:e8:0b:c3:
         f5:cc:71:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHrV2jYokNo1zpbjqe1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGI2YmU1Nzg1YmZhMWFlZWI2ZDYzMjA1YWNhMTc2Yjcy
YTIzMTIwHhcNMjUwNDEzMTAwMTA2WhcNMjUwNDE0MTAwMTA2WjAzMTEwLwYDVQQD
EygyYTQ5NGE0ZmQyNGZhMzc3YjZhZmFkZWY3Yzc4ZWMxZmMxZjkwOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCjMnq5KyxWo5VLMeuG8741V04vV
cb2dfGYGussn5fvNHVD7DUfu+KTea9lOyGfN8MYDXppVU/usdZX3dwnZyhneWC8V
o8/vFlrP7Ts0KuRBkYJtlgRNrMcXoq8s2sgV/5qmyQBHIbVccwN4oxA73GyafOcm
qqk2cxTGUuMDQKqkMl0vtjQDpnw8deioJFvMS0IZiycKnWN40FHbbGgZDWQqpI0h
3KySeytnDEgUs1VoJe+No47Ijs9HF1Bo9HITVQB/cBXqyxzNRGTjV3oNYCaCXcmC
t/ZM1ngL87xhfie0egEi0tBl+Gy5xZZT+LF6KQ/5ExYFII4cmEv1mhLMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpJSk/ST6N3tq+t73x47B/B+QjeMB8GA1UdIwQY
MBaAFA8La+V4W/oa7rbWMgWsoXa3KiMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHd0cjVYaGItaHJ1dHRZeUJheWhkcmNxSXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMDctODM3Yi00MDRhLTgzNzQt
YmFhYTlkZjUxN2U3LzEvRHd0cjVYaGItaHJ1dHRZeUJheWhkcmNxSXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMDctODM3Yi00MDRhLTgzNzQtYmFhYTlkZjUxN2U3
LzEvRHd0cjVYaGItaHJ1dHRZeUJheWhkcmNxSXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4OUyrZj
B33ot1ImyPqXuPV41kARi6E9iiFFEAuM4IF4AFv57xXMXJU3rwt/T7mUbLuM/Cyb
s1szm4qg5NBzhcIJElqOnPBDn4Tgg7dAMXjVompUGrMAsESLApS4+HeKq/eNtQI8
bi6Qk2tMtxyOBk1kVJf+41mj3ugTidBbV86PTeNT88xCnxdPqZPM29HRLVZZDsVm
xF2TYEM9Jf7qfNqZ1/lVIOovzDwQqK3C5VGJcK7T4etpBT+FUq631uJXMW+0c2HZ
JdEroPlFbKb+xozcLdei9IHUjavQkvcB5w31cBfAgBD4smbq4BrBn67Nz654btm2
dPsx6AvD9cxxYA==
-----END CERTIFICATE-----