Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File:                     kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier:          2mXcRIVNfpl4YfDDl0ZOyFdXgfPIvdhYPrN8x00Bn+E=
Subject key identifier:   B1:A5:46:81:A9:24:44:57:21:1F:7F:93:AC:54:6F:94:88:80:96:0A
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer:       /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial:       01962E99407685399BE4BDE3CA59750B5A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: K2yRFL9237zoST2Z/cpjWYbZkx5QB0RMmQnsPTlg1a8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:76:85:39:9b:e4:bd:e3:ca:59:75:0b:5a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=b1a54681a9244457211f7f93ac546f948880960a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:fc:b3:f1:66:66:6c:43:64:16:79:f7:1b:
                    46:9c:cf:26:b6:9f:b7:53:7a:e2:50:54:f3:bb:70:
                    81:ae:e1:18:77:3c:c6:c3:62:e6:8b:9a:ec:fe:27:
                    92:e4:cd:08:4c:0c:e3:94:87:b3:7d:f0:51:90:f3:
                    6d:04:be:db:02:1e:2d:52:32:20:30:73:de:a0:9e:
                    17:14:01:da:5e:9e:2f:d6:dc:e4:28:b8:4a:be:0d:
                    38:e4:b4:8d:17:16:b0:8f:16:13:31:ba:8c:23:0d:
                    69:58:c3:91:7b:bc:32:8e:5a:8e:86:70:56:5b:79:
                    dc:e2:45:0b:11:e7:05:c7:5b:0e:f5:d2:b3:db:a9:
                    c1:92:62:35:8d:87:16:75:cf:a1:2a:d0:4c:7e:13:
                    e6:6f:73:83:35:fa:96:43:ac:a5:ac:94:49:3e:27:
                    93:ba:de:d8:e3:1e:4f:28:c5:24:d3:1a:81:6d:c0:
                    0f:12:51:40:64:36:49:00:ba:fa:4d:6f:b0:8c:88:
                    d6:f5:d5:37:59:1a:a5:97:75:19:60:f2:22:0c:47:
                    60:a5:05:0b:db:fb:ee:42:99:d2:8e:d2:8c:12:0c:
                    eb:a8:dc:26:d8:20:75:0f:53:87:70:a4:5d:da:af:
                    18:60:fc:cb:c0:29:d1:22:c4:4a:23:53:da:1e:ba:
                    1c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:46:81:A9:24:44:57:21:1F:7F:93:AC:54:6F:94:88:80:96:0A
            X509v3 Authority Key Identifier:
                keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:a0:e2:c9:a4:e7:e8:68:97:00:50:8e:95:a9:54:20:eb:
         6d:91:d3:08:54:55:1a:46:b3:75:db:7d:7f:84:28:8e:f2:82:
         f7:3a:f2:c6:1f:fb:c2:a8:ad:53:e9:65:f6:57:b1:cb:8c:86:
         2c:ee:a6:94:09:58:9f:19:43:1f:23:0e:2c:bc:0c:63:ec:06:
         03:e2:54:ec:f5:d7:33:37:36:ae:ca:a9:ea:ec:b6:83:5d:18:
         67:c2:c4:5f:f2:4f:f1:6f:e2:50:23:4c:9a:89:fd:7d:0e:61:
         ba:be:9c:44:a6:1a:78:ad:48:01:68:bb:ab:ee:c0:37:87:cb:
         8b:4d:3f:04:df:5c:b6:a4:60:0c:a6:8d:d0:ec:78:9f:63:a4:
         44:33:0e:74:ce:bb:48:28:9f:8c:ec:73:2a:31:f3:e3:54:f0:
         3c:7c:27:c4:4b:7f:fb:6e:54:cd:f9:51:5f:50:44:24:fc:58:
         c5:a1:2b:8b:f7:5d:34:2f:fb:a6:6a:f6:a9:72:cf:c1:d5:5f:
         86:20:a0:e3:69:f2:2a:03:b7:5d:3a:9b:38:fb:ae:d0:ff:db:
         9d:08:94:2c:61:29:86:6d:af:26:33:b9:42:14:8d:ab:8e:eb:
         bd:2f:21:ed:d8:c7:99:c3:5c:2a:ea:49:71:f5:58:6e:b7:65:
         14:f9:a7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUB2hTmb5L3jyll1C1pcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl
MjMwNjMwHhcNMjUwNDEzMTAwMTU3WhcNMjUwNDE0MTAwMTU3WjAzMTEwLwYDVQQD
EyhiMWE1NDY4MWE5MjQ0NDU3MjExZjdmOTNhYzU0NmY5NDg4ODA5NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/b8s/FmZmxDZBZ59xtGnM8mtp+3
U3riUFTzu3CBruEYdzzGw2Lmi5rs/ieS5M0ITAzjlIezffBRkPNtBL7bAh4tUjIg
MHPeoJ4XFAHaXp4v1tzkKLhKvg045LSNFxawjxYTMbqMIw1pWMORe7wyjlqOhnBW
W3nc4kULEecFx1sO9dKz26nBkmI1jYcWdc+hKtBMfhPmb3ODNfqWQ6ylrJRJPieT
ut7Y4x5PKMUk0xqBbcAPElFAZDZJALr6TW+wjIjW9dU3WRqll3UZYPIiDEdgpQUL
2/vuQpnSjtKMEgzrqNwm2CB1D1OHcKRd2q8YYPzLwCnRIsRKI1PaHroc4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGlRoGpJERXIR9/k6xUb5SIgJYKMB8GA1UdIwQY
MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt
YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk
LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsSg4smk
5+holwBQjpWpVCDrbZHTCFRVGkazddt9f4QojvKC9zryxh/7wqitU+ll9lexy4yG
LO6mlAlYnxlDHyMOLLwMY+wGA+JU7PXXMzc2rsqp6uy2g10YZ8LEX/JP8W/iUCNM
mon9fQ5hur6cRKYaeK1IAWi7q+7AN4fLi00/BN9ctqRgDKaN0Ox4n2OkRDMOdM67
SCifjOxzKjHz41TwPHwnxEt/+25UzflRX1BEJPxYxaEri/ddNC/7pmr2qXLPwdVf
hiCg42nyKgO3XTqbOPuu0P/bnQiULGEphm2vJjO5QhSNq47rvS8h7djHmcNcKupJ
cfVYbrdlFPmntQ==
-----END CERTIFICATE-----