Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
File:                     001KO3R_ynAQOxfz29xQRcrOMt8.mft (raw, json)
Hash identifier:          S3CcJcKhNInUjipdo7tpDLMKP9CfHCR2gxkpSpZ1KDY=
Subject key identifier:   D8:A8:A0:B9:20:E7:B7:9D:43:40:7C:86:DF:63:0F:0E:FD:ED:15:04
Authority key identifier: D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
Certificate issuer:       /CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Certificate serial:       01962E2B398D5FF5AF92025EA9E787642A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: 001KO3R_ynAQOxfz29xQRcrOMt8.crl (hash: YanVj2QGwVmYg26RW41Hf4Tao1JaL/Oi3B4+DueFt60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:8d:5f:f5:af:92:02:5e:a9:e7:87:64:2a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=d8a8a0b920e7b79d43407c86df630f0efded1504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:8c:9a:53:45:e9:70:e1:c5:50:89:d7:33:
                    65:29:df:b7:53:e2:a3:59:24:64:87:64:0d:87:9e:
                    a4:af:6e:dc:f1:ec:c2:24:93:ee:5b:93:ae:0e:52:
                    c3:f8:46:d5:64:e0:d5:c3:09:5b:99:5d:16:6b:11:
                    d3:68:d0:99:24:59:49:ad:ef:6f:24:1f:be:75:69:
                    6a:0a:db:d6:2a:0b:b7:f1:45:c9:71:81:05:e2:aa:
                    e8:71:6a:3a:ec:1a:37:26:a1:8b:3c:7e:ea:25:82:
                    cb:f9:a0:33:36:e9:5e:de:06:ca:49:18:78:6d:8c:
                    ff:f1:c0:75:5f:7c:bb:36:fd:f0:4d:38:17:99:5c:
                    ab:9d:ae:f3:81:d6:1f:ea:c8:6d:bc:ad:08:95:c3:
                    7b:28:ec:e1:5c:5d:32:11:0a:3d:8f:58:f9:38:5f:
                    77:7d:1c:39:e7:f3:af:73:41:6e:f8:70:5e:b6:ca:
                    e4:7a:bf:3d:d1:26:6a:2f:2f:a1:fd:4f:89:51:e7:
                    20:91:09:7e:5f:36:33:a7:26:38:49:1a:36:e0:fa:
                    62:05:73:60:87:9c:d8:74:0e:dc:e1:f1:fb:31:ec:
                    2f:ee:50:44:a3:15:ac:5e:4d:4d:52:62:2b:0b:57:
                    62:df:8e:1d:12:f0:45:b9:fe:48:c9:71:de:60:9e:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A8:A0:B9:20:E7:B7:9D:43:40:7C:86:DF:63:0F:0E:FD:ED:15:04
            X509v3 Authority Key Identifier:
                keyid:D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:de:36:b2:20:97:02:d9:15:68:d6:e6:71:12:2d:f2:5b:48:
         18:74:18:93:af:7b:26:60:e0:3f:34:65:c1:3c:95:dc:46:91:
         97:0d:a3:1f:e2:5d:de:e1:be:78:f0:f5:72:2d:d6:0a:7f:c2:
         22:2e:61:4c:51:54:23:67:f1:62:ca:f3:f1:48:fd:f8:e1:fc:
         9c:39:50:2c:3f:00:20:77:cd:91:01:48:89:17:9d:ab:fb:69:
         7e:00:a8:98:03:63:24:ce:d2:58:57:ac:f3:d8:3a:f2:61:b2:
         76:77:1c:3f:f8:e6:77:70:2f:4b:37:01:81:4e:a8:c0:d5:f7:
         8d:78:9c:69:32:b1:e8:0a:d6:af:9f:28:19:98:98:50:23:75:
         8b:18:52:41:09:81:0b:8c:ca:df:9d:ff:c3:c1:14:82:15:e6:
         35:93:c5:37:ca:92:ba:db:d3:2b:6c:b4:aa:74:83:64:4e:6a:
         29:ae:5b:2f:cf:18:c1:30:fe:20:8a:f1:04:2d:f1:81:df:5c:
         ff:77:f8:da:3f:7c:a7:bf:d3:de:f3:00:a7:e3:c8:b5:4d:10:
         e6:ba:1c:ae:7a:30:e9:0e:26:de:d7:de:d2:20:fa:c9:93:34:
         58:9c:7d:f0:8d:33:b8:c7:c9:ff:55:ca:0e:54:3d:98:54:64:
         ad:71:df:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzmNX/WvkgJeqeeHZCpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGQ0YTNiNzQ3ZmNhNzAxMDNiMTdmM2RiZGM1MDQ1Y2Fj
ZTMyZGYwHhcNMjUwNDEzMDgwMTQ2WhcNMjUwNDE0MDgwMTQ2WjAzMTEwLwYDVQQD
EyhkOGE4YTBiOTIwZTdiNzlkNDM0MDdjODZkZjYzMGYwZWZkZWQxNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1uMmlNF6XDhxVCJ1zNlKd+3U+Kj
WSRkh2QNh56kr27c8ezCJJPuW5OuDlLD+EbVZODVwwlbmV0WaxHTaNCZJFlJre9v
JB++dWlqCtvWKgu38UXJcYEF4qrocWo67Bo3JqGLPH7qJYLL+aAzNule3gbKSRh4
bYz/8cB1X3y7Nv3wTTgXmVyrna7zgdYf6shtvK0IlcN7KOzhXF0yEQo9j1j5OF93
fRw55/Ovc0Fu+HBetsrker890SZqLy+h/U+JUecgkQl+XzYzpyY4SRo24PpiBXNg
h5zYdA7c4fH7Mewv7lBEoxWsXk1NUmIrC1di344dEvBFuf5IyXHeYJ4CWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiooLkg57edQ0B8ht9jDw797RUEMB8GA1UdIwQY
MBaAFNNNSjt0f8pwEDsX89vcUEXKzjLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDIt
NDM3OTM0YzU4NDUzLzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDItNDM3OTM0YzU4NDUz
LzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad42siCX
AtkVaNbmcRIt8ltIGHQYk697JmDgPzRlwTyV3EaRlw2jH+Jd3uG+ePD1ci3WCn/C
Ii5hTFFUI2fxYsrz8Uj9+OH8nDlQLD8AIHfNkQFIiRedq/tpfgComANjJM7SWFes
89g68mGydnccP/jmd3AvSzcBgU6owNX3jXicaTKx6ArWr58oGZiYUCN1ixhSQQmB
C4zK353/w8EUghXmNZPFN8qSutvTK2y0qnSDZE5qKa5bL88YwTD+IIrxBC3xgd9c
/3f42j98p7/T3vMAp+PItU0Q5rocrnow6Q4m3tfe0iD6yZM0WJx98I0zuMfJ/1XK
DlQ9mFRkrXHfiw==
-----END CERTIFICATE-----