Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          vC3Qq6SWqpqbWj6meg1heL3p65ImyJIJyxl0Oorwx7M=
Subject key identifier:   44:FE:E9:BF:34:85:AC:00:22:83:A2:E6:04:E9:0E:E5:A4:A4:FA:7A
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       01962E9947C225059AD8FCA91FB6452B5CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          0BAA
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: CxBXtFYUDjig2b2jDHy0ZiaRzSkgShJ9su3OvQn0F50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:47:c2:25:05:9a:d8:fc:a9:1f:b6:45:2b:5c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=44fee9bf3485ac002283a2e604e90ee5a4a4fa7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c2:02:0a:e6:2d:e6:76:b6:08:a6:73:a5:77:
                    12:61:8d:2e:3c:7a:ec:94:f5:07:de:c0:bd:f6:0a:
                    df:66:0c:fc:9c:d6:7b:05:21:05:ef:2e:80:6c:d2:
                    5b:20:3a:fa:ab:eb:5d:96:87:6b:76:36:eb:08:b3:
                    5a:59:88:9b:30:41:fd:b1:ba:8e:6b:e2:f0:ad:93:
                    68:43:38:b9:bc:0d:b4:09:4b:5a:61:6f:99:3f:cb:
                    64:4f:62:fb:26:86:91:ac:e0:34:47:34:a3:5a:46:
                    65:9a:2e:88:db:ab:b2:1e:24:13:74:6b:2a:88:7d:
                    fd:78:c6:54:f3:fd:f0:d0:71:de:bc:64:3b:d2:fa:
                    1f:66:8e:62:d1:2c:11:68:4e:55:73:6e:4e:15:a0:
                    8a:97:e1:fa:b5:83:82:c8:41:38:4e:1b:eb:d5:8c:
                    69:8a:dc:af:92:f1:a0:f0:a9:8b:14:81:c2:b8:a5:
                    40:13:f2:12:46:89:d7:4f:de:80:ba:e9:4a:30:e3:
                    b5:88:75:ab:37:5e:35:ad:24:2e:b2:76:0b:17:b7:
                    6b:34:a0:7a:82:25:74:78:16:58:b0:f6:50:1e:11:
                    da:67:b1:b9:6a:fc:55:be:58:f5:9f:b5:87:cc:fe:
                    c8:dc:61:d7:7f:f8:d6:bc:a7:81:ab:25:dd:fc:ce:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FE:E9:BF:34:85:AC:00:22:83:A2:E6:04:E9:0E:E5:A4:A4:FA:7A
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:24:c5:a9:9d:fa:dd:c6:ac:7b:1c:7c:b8:9e:22:c3:95:3c:
         0e:aa:3b:aa:87:4c:c0:48:c1:4d:e6:3d:9c:64:00:c3:c0:ab:
         1c:af:70:d7:cd:69:66:c4:01:b8:5b:32:e9:cf:93:33:5f:6d:
         df:3a:4a:17:a2:40:bd:5f:9f:59:e1:cf:ae:ff:d9:6a:be:5f:
         5d:ad:9b:85:48:98:aa:0b:dd:17:b9:02:07:9d:9d:2a:ff:58:
         5a:b8:e0:74:08:f8:25:21:13:0c:71:01:a6:9f:66:36:7c:b6:
         ac:12:f9:b9:97:eb:a3:6c:2b:b3:3e:dd:4d:75:4b:87:6f:95:
         97:a7:94:37:6f:5f:ff:2c:91:74:dc:78:bb:8c:99:6c:dc:e7:
         82:59:b7:11:e5:2f:4e:18:a3:09:ad:5a:11:08:28:d1:ca:56:
         3e:62:1e:c7:09:86:9e:83:e6:b1:77:70:27:f6:f2:88:d5:d5:
         16:77:6a:a5:38:60:80:fb:36:d7:93:de:0c:37:49:ce:af:60:
         eb:f0:d0:03:3e:4d:c6:bc:cd:45:c9:de:ad:bd:17:5e:5b:1b:
         ed:b1:93:c4:7d:d1:a3:dd:c2:80:c8:64:13:9d:2d:a3:4e:a0:
         37:ab:80:78:ca:2a:5c:06:35:c4:ae:91:12:75:38:6b:0b:f5:
         f2:1c:59:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUfCJQWa2PypH7ZFK1z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MmVlODI0MjJiNzg0OTkxMjI5NjM2MTQwNDY0OWE3ZmZl
Yzk4ZTUwHhcNMjUwNDEzMTAwMTU5WhcNMjUwNDE0MTAwMTU5WjAzMTEwLwYDVQQD
Eyg0NGZlZTliZjM0ODVhYzAwMjI4M2EyZTYwNGU5MGVlNWE0YTRmYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MICCuYt5na2CKZzpXcSYY0uPHrs
lPUH3sC99grfZgz8nNZ7BSEF7y6AbNJbIDr6q+tdlodrdjbrCLNaWYibMEH9sbqO
a+LwrZNoQzi5vA20CUtaYW+ZP8tkT2L7JoaRrOA0RzSjWkZlmi6I26uyHiQTdGsq
iH39eMZU8/3w0HHevGQ70vofZo5i0SwRaE5Vc25OFaCKl+H6tYOCyEE4Thvr1Yxp
ityvkvGg8KmLFIHCuKVAE/ISRonXT96AuulKMOO1iHWrN141rSQusnYLF7drNKB6
giV0eBZYsPZQHhHaZ7G5avxVvlj1n7WHzP7I3GHXf/jWvKeBqyXd/M6OZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET+6b80hawAIoOi5gTpDuWkpPp6MB8GA1UdIwQY
MBaAFOYu6CQit4SZEiljYUBGSaf/7JjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUt
ZmZiMWJlYzMyNzIxLzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUtZmZiMWJlYzMyNzIx
LzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyTFqZ36
3casexx8uJ4iw5U8Dqo7qodMwEjBTeY9nGQAw8CrHK9w181pZsQBuFsy6c+TM19t
3zpKF6JAvV+fWeHPrv/Zar5fXa2bhUiYqgvdF7kCB52dKv9YWrjgdAj4JSETDHEB
pp9mNny2rBL5uZfro2wrsz7dTXVLh2+Vl6eUN29f/yyRdNx4u4yZbNznglm3EeUv
ThijCa1aEQgo0cpWPmIexwmGnoPmsXdwJ/byiNXVFndqpThggPs215PeDDdJzq9g
6/DQAz5NxrzNRcnerb0XXlsb7bGTxH3Ro93CgMhkE50to06gN6uAeMoqXAY1xK6R
EnU4awv18hxZdQ==
-----END CERTIFICATE-----