Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File:                     JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier:          ybGMRlYg02/WdHu8OzGQjLZHnjB4gaiHRt2v6FNF98Q=
Subject key identifier:   09:FB:41:C1:DB:BD:A8:C5:46:CF:61:9A:18:45:B9:D2:FF:AD:2D:C5
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer:       /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial:       01962F3DD755434B1618CB3004EF3D2DD16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number:          0C95
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: SGjwgF8eE9pnZ+zN4VTFeDuV35bvRlSnmHIy8aAaFwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d7:55:43:4b:16:18:cb:30:04:ef:3d:2d:d1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=09fb41c1dbbda8c546cf619a1845b9d2ffad2dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:77:9a:f7:f2:b3:43:95:5b:99:28:1f:c4:
                    a1:0b:a4:dc:c5:02:5a:63:7f:f8:9a:d0:e6:27:84:
                    ec:00:ba:e5:2d:94:98:20:9a:11:c4:69:df:93:b4:
                    7d:2b:95:69:b2:2c:df:79:7c:30:87:9f:0d:26:95:
                    11:54:0d:63:36:92:75:d1:bf:9f:85:25:2c:ff:ff:
                    ab:ed:c7:f0:68:fd:98:a1:8c:c9:dd:fc:08:84:66:
                    58:ac:30:56:f0:8d:73:5d:1e:eb:f3:d6:eb:4e:ed:
                    74:b7:80:20:49:af:6b:b5:c7:9b:5e:40:c8:30:13:
                    5c:3c:b0:03:bf:f1:0a:40:5b:94:8b:77:75:77:2b:
                    c7:9b:8c:31:80:5d:cb:5a:9e:d5:df:16:19:1c:93:
                    c5:7d:0e:f4:e6:c6:56:81:bd:94:bc:c6:ae:69:cf:
                    db:d1:69:a5:4d:5c:43:79:8d:a4:7d:89:ab:fd:f3:
                    51:05:e4:01:69:b3:cf:46:6f:2c:80:f6:38:26:df:
                    87:52:c9:c4:54:14:60:06:b5:73:66:1a:e6:76:7c:
                    38:8d:d3:e3:81:4f:71:e5:eb:a0:4c:a0:56:a8:27:
                    5a:ca:36:ff:54:7f:db:52:18:c7:1c:cd:30:16:ec:
                    55:3e:53:15:7d:73:5c:c6:07:ea:76:f1:7c:73:f3:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:41:C1:DB:BD:A8:C5:46:CF:61:9A:18:45:B9:D2:FF:AD:2D:C5
            X509v3 Authority Key Identifier:
                keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:35:ce:1e:5b:f8:fb:8b:b2:78:f3:f7:5c:04:bf:64:83:
         4a:8f:af:01:1c:3b:45:5b:0a:a7:4d:08:45:ac:33:31:52:b8:
         e5:7b:d2:45:9a:45:42:81:1e:9e:53:02:b9:68:df:30:2f:ae:
         6b:9e:ba:ac:11:6e:0b:46:3f:bc:75:3d:30:11:c5:bd:9c:b6:
         e6:d3:3c:47:67:f6:ab:39:91:0d:b1:66:57:bf:e0:21:32:7c:
         2a:fb:e8:8f:0c:5e:f9:0a:9d:c9:a1:68:85:ff:e7:21:80:95:
         f4:f9:78:c7:40:e7:c3:a5:e6:d3:04:ff:d7:f1:14:1a:4e:d0:
         23:12:d0:b6:16:47:2d:bf:f3:ee:90:07:ec:73:92:ef:a0:b8:
         13:c2:2f:74:1e:0b:6e:15:65:38:68:ec:0e:e3:40:b7:de:87:
         dc:8a:83:ec:09:52:42:8b:68:d2:f9:f2:fa:d9:e9:cc:79:fb:
         f4:a7:dd:46:63:23:7b:85:82:af:d5:b5:a5:c2:4d:71:da:8b:
         a3:e3:75:eb:ae:08:c3:61:29:a0:9a:8c:b4:41:ee:59:8e:91:
         0d:74:30:03:08:73:16:de:e1:e5:42:3e:a9:36:1d:00:84:26:
         d9:ac:9f:d9:2e:f5:a5:a4:d1:18:b0:b9:f1:6a:0e:82:31:bc:
         69:a8:cb:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPddVQ0sWGMswBO89LdFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjJhYjNjNWRiMTQ1N2JiMmY1MTk1ZTIzOGZlNGJkYzhm
MjE1ZWIwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
EygwOWZiNDFjMWRiYmRhOGM1NDZjZjYxOWExODQ1YjlkMmZmYWQyZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUF3mvfys0OVW5koH8ShC6TcxQJa
Y3/4mtDmJ4TsALrlLZSYIJoRxGnfk7R9K5VpsizfeXwwh58NJpURVA1jNpJ10b+f
hSUs//+r7cfwaP2YoYzJ3fwIhGZYrDBW8I1zXR7r89brTu10t4AgSa9rtcebXkDI
MBNcPLADv/EKQFuUi3d1dyvHm4wxgF3LWp7V3xYZHJPFfQ705sZWgb2UvMauac/b
0WmlTVxDeY2kfYmr/fNRBeQBabPPRm8sgPY4Jt+HUsnEVBRgBrVzZhrmdnw4jdPj
gU9x5eugTKBWqCdayjb/VH/bUhjHHM0wFuxVPlMVfXNcxgfqdvF8c/POhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn7QcHbvajFRs9hmhhFudL/rS3FMB8GA1UdIwQY
MBaAFCZiqzxdsUV7svUZXiOP5L3I8hXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2Qt
NGVhNzMwODNhZWM2LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2QtNGVhNzMwODNhZWM2
LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxs1zh5b
+PuLsnjz91wEv2SDSo+vARw7RVsKp00IRawzMVK45XvSRZpFQoEenlMCuWjfMC+u
a566rBFuC0Y/vHU9MBHFvZy25tM8R2f2qzmRDbFmV7/gITJ8Kvvojwxe+QqdyaFo
hf/nIYCV9Pl4x0Dnw6Xm0wT/1/EUGk7QIxLQthZHLb/z7pAH7HOS76C4E8IvdB4L
bhVlOGjsDuNAt96H3IqD7AlSQoto0vny+tnpzHn79KfdRmMje4WCr9W1pcJNcdqL
o+N1664Iw2EpoJqMtEHuWY6RDXQwAwhzFt7h5UI+qTYdAIQm2ayf2S71paTRGLC5
8WoOgjG8aajLhw==
-----END CERTIFICATE-----