Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft
File:                     PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft (raw, json)
Hash identifier:          Uosrg1Z53rB3CpKatwYIwaFUp7n5bHcG7xgKP41vkKE=
Subject key identifier:   23:59:B8:FC:0B:20:72:1C:31:7D:15:D8:09:AB:92:07:B1:5E:19:5B
Authority key identifier: 3C:0F:ED:6E:0D:14:2A:2F:09:C0:40:C9:9A:F1:C9:35:60:20:92:91
Certificate issuer:       /CN=3c0fed6e0d142a2f09c040c99af1c93560209291
Certificate serial:       01962F3DC128EA59268793F3EBB528F2E4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PA_tbg0UKi8JwEDJmvHJNWAgkpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft
Manifest number:          0F6D
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: PA_tbg0UKi8JwEDJmvHJNWAgkpE.crl (hash: pSHPV1YsXmHVYvhI3twAJvyQxhkD1cKPUKa1PJyhHJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c1:28:ea:59:26:87:93:f3:eb:b5:28:f2:e4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c0fed6e0d142a2f09c040c99af1c93560209291
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=2359b8fc0b20721c317d15d809ab9207b15e195b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:75:82:9a:55:50:dc:59:ee:66:fc:90:7e:
                    74:49:42:e8:59:fd:e6:4d:30:7c:21:cd:02:f8:f0:
                    2f:94:3b:f1:70:89:85:b2:f7:76:5c:c1:2e:6d:fa:
                    c2:37:ce:f5:ef:48:71:bb:b8:27:34:a9:d0:1f:51:
                    53:b7:84:70:0b:43:84:90:37:91:bc:21:b8:3c:c9:
                    a8:47:a6:1d:b3:e7:8a:53:4b:23:f3:23:3e:93:b4:
                    0d:a4:ee:6e:2b:f0:2f:53:56:47:da:b5:85:e2:ca:
                    49:71:e1:44:74:15:16:42:e5:12:68:0a:b8:7d:25:
                    b5:8c:1d:a0:23:ab:ab:a2:f3:67:0b:c4:f9:be:c7:
                    ef:6a:66:e8:8e:d8:fc:83:48:13:ff:84:24:ad:3c:
                    44:a9:1e:59:5f:34:7e:bb:09:88:74:b8:20:8a:55:
                    aa:8d:e0:06:83:7a:2b:05:65:a6:0f:fb:35:4f:ed:
                    3e:b7:fa:70:39:ca:a0:bc:ba:bf:be:3a:a4:db:5b:
                    c8:2f:40:8b:95:ac:b0:0d:e5:a2:ad:89:20:8e:36:
                    61:14:c5:57:2d:f9:98:63:5d:d5:67:3f:af:f8:7f:
                    8f:77:00:8d:47:8e:59:2d:86:58:f9:55:94:89:1a:
                    ff:38:f0:f8:f9:9a:58:42:f8:b4:03:5f:7d:96:37:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:59:B8:FC:0B:20:72:1C:31:7D:15:D8:09:AB:92:07:B1:5E:19:5B
            X509v3 Authority Key Identifier:
                keyid:3C:0F:ED:6E:0D:14:2A:2F:09:C0:40:C9:9A:F1:C9:35:60:20:92:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA_tbg0UKi8JwEDJmvHJNWAgkpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/18a5c2-25f4-45fc-bb41-9afdc345e3d3/1/PA_tbg0UKi8JwEDJmvHJNWAgkpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f1:10:fe:f4:eb:0a:67:13:18:4b:f8:e2:eb:54:1c:82:99:
         3b:57:88:0e:ee:b1:f4:fd:29:88:ad:13:c0:d7:a9:01:f5:a6:
         53:9f:5d:e9:28:0f:b2:71:8a:de:f2:16:59:5d:ba:92:de:a3:
         14:70:76:59:d2:1a:49:10:d6:61:71:6e:ca:7d:e9:65:0e:5c:
         dc:61:41:6e:41:ae:99:73:36:62:4b:06:ea:7e:26:2c:d6:d3:
         e7:22:f1:d7:71:0b:73:91:23:67:90:f2:95:93:24:b2:38:a0:
         9e:3d:4f:1a:6e:e5:b1:08:79:54:97:ed:25:9a:1a:80:ae:db:
         78:11:91:e8:92:3c:c1:6b:61:d2:4a:eb:88:bf:fc:76:52:55:
         e5:2c:75:21:32:6c:79:b7:c0:92:74:b6:43:b1:6b:79:34:1c:
         61:38:2a:50:63:c6:e7:ab:f4:6e:03:67:a7:b7:f9:61:77:3e:
         d8:6c:c2:e2:b6:be:3d:06:22:6f:a6:64:01:0f:c3:06:ee:3c:
         47:1f:3d:49:cf:7f:11:bf:a3:e1:ef:a6:ef:12:3e:8d:5b:82:
         21:a2:6a:83:bb:9f:62:c5:ab:b8:ef:dc:e1:80:13:99:24:d5:
         36:e4:25:3f:db:5a:ff:52:74:0d:a0:d6:75:53:74:45:7a:f9:
         bd:5d:e5:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcEo6lkmh5Pz67Uo8uSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMGZlZDZlMGQxNDJhMmYwOWMwNDBjOTlhZjFjOTM1NjAy
MDkyOTEwHhcNMjUwNDEzMTMwMTM4WhcNMjUwNDE0MTMwMTM4WjAzMTEwLwYDVQQD
EygyMzU5YjhmYzBiMjA3MjFjMzE3ZDE1ZDgwOWFiOTIwN2IxNWUxOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0N1gppVUNxZ7mb8kH50SULoWf3m
TTB8Ic0C+PAvlDvxcImFsvd2XMEubfrCN87170hxu7gnNKnQH1FTt4RwC0OEkDeR
vCG4PMmoR6Yds+eKU0sj8yM+k7QNpO5uK/AvU1ZH2rWF4spJceFEdBUWQuUSaAq4
fSW1jB2gI6urovNnC8T5vsfvambojtj8g0gT/4QkrTxEqR5ZXzR+uwmIdLggilWq
jeAGg3orBWWmD/s1T+0+t/pwOcqgvLq/vjqk21vIL0CLlaywDeWirYkgjjZhFMVX
LfmYY13VZz+v+H+PdwCNR45ZLYZY+VWUiRr/OPD4+ZpYQvi0A199ljdgHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNZuPwLIHIcMX0V2AmrkgexXhlbMB8GA1UdIwQY
MBaAFDwP7W4NFCovCcBAyZrxyTVgIJKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEFfdGJnMFVLaThKd0VESm12SEpOV0Fna3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xOGE1YzItMjVmNC00NWZjLWJiNDEt
OWFmZGMzNDVlM2QzLzEvUEFfdGJnMFVLaThKd0VESm12SEpOV0Fna3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xOGE1YzItMjVmNC00NWZjLWJiNDEtOWFmZGMzNDVlM2Qz
LzEvUEFfdGJnMFVLaThKd0VESm12SEpOV0Fna3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfEQ/vTr
CmcTGEv44utUHIKZO1eIDu6x9P0piK0TwNepAfWmU59d6SgPsnGK3vIWWV26kt6j
FHB2WdIaSRDWYXFuyn3pZQ5c3GFBbkGumXM2YksG6n4mLNbT5yLx13ELc5EjZ5Dy
lZMksjignj1PGm7lsQh5VJftJZoagK7beBGR6JI8wWth0krriL/8dlJV5Sx1ITJs
ebfAknS2Q7FreTQcYTgqUGPG56v0bgNnp7f5YXc+2GzC4ra+PQYib6ZkAQ/DBu48
Rx89Sc9/Eb+j4e+m7xI+jVuCIaJqg7ufYsWruO/c4YATmSTVNuQlP9ta/1J0DaDW
dVN0RXr5vV3lzw==
-----END CERTIFICATE-----