Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File:                     d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier:          D4XmhXKT7b546EpAHx2kyYSiNwTJCByK/Toeo7ZS88w=
Subject key identifier:   AD:D3:4B:70:95:98:3B:5B:B8:C2:50:AA:A5:3B:8C:6D:B1:FE:0D:78
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer:       /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial:       01962F747A0751A4FF635A8503ACF2B2BCAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number:          02C4
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: mPjJkXgh+98Cune0s36gBub0v6Di5/zOXyAxz1f18og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7a:07:51:a4:ff:63:5a:85:03:ac:f2:b2:bc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=add34b7095983b5bb8c250aaa53b8c6db1fe0d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:cf:45:1f:cc:9c:eb:ba:25:9b:f4:b9:92:
                    22:07:7e:ef:4a:9d:e2:81:a7:90:bd:ed:00:71:d7:
                    86:75:3c:cd:14:5a:2c:a7:a3:3d:9b:9a:e7:c9:28:
                    11:16:a7:6a:f8:4e:fb:50:d7:65:d3:7c:c0:21:ea:
                    ff:b9:2a:3f:7a:62:db:2b:4d:af:d7:46:ce:64:ff:
                    74:b5:8a:58:76:6a:b7:96:58:dc:bb:88:66:15:55:
                    a9:65:65:6c:d6:8a:77:4d:eb:96:d1:76:5b:02:b1:
                    65:77:4f:c9:00:9e:dc:62:85:8f:30:45:9c:bd:30:
                    8d:e5:3c:92:12:be:35:15:ed:79:bb:ac:af:f0:2a:
                    d0:b8:61:d5:eb:c8:d6:20:c1:da:cd:92:7f:e6:50:
                    08:8c:1d:1b:6b:8e:5e:cd:68:b9:d7:3b:42:c9:66:
                    d6:b4:00:f1:df:95:79:bf:44:f2:de:15:de:31:b8:
                    01:bf:1f:f6:1e:5a:54:36:8d:38:6c:8c:fd:43:e5:
                    53:33:0a:87:01:8a:79:0a:e7:58:43:f0:3a:d1:09:
                    36:13:27:70:f0:33:40:d8:b7:a9:2d:32:8f:94:99:
                    f4:1f:3e:f8:db:4e:cf:f1:4e:93:2d:63:58:70:37:
                    a0:48:fb:9d:89:8f:58:e0:d3:a3:fc:ad:b1:32:f9:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D3:4B:70:95:98:3B:5B:B8:C2:50:AA:A5:3B:8C:6D:B1:FE:0D:78
            X509v3 Authority Key Identifier:
                keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:58:08:a5:2e:df:1b:4a:3e:5f:f9:30:19:25:0d:81:77:
         73:f1:cb:d3:02:97:7e:db:29:7f:e3:79:e5:9c:df:1d:59:af:
         84:1b:90:a3:3d:0b:fd:cf:83:3c:53:94:ac:8c:aa:1c:5e:ef:
         32:e0:78:10:f1:29:56:ca:de:6a:88:78:19:db:ba:a3:14:1f:
         e4:7d:8c:07:74:af:8b:4a:c2:b9:5e:fd:aa:a1:30:12:7a:8d:
         26:45:0b:f0:13:b0:60:46:b7:50:cc:24:aa:b5:0c:c3:85:48:
         17:cf:41:95:be:8d:fa:9e:6a:9a:16:38:5b:c0:69:37:02:a9:
         64:9a:b7:1d:90:5b:5f:e9:ec:07:6d:52:08:d4:d0:ea:55:29:
         27:24:41:c6:24:b9:1a:64:b3:99:0a:76:c4:97:c3:88:d1:b1:
         15:d1:2b:e7:19:cb:0a:a9:0f:fd:a3:83:d8:1d:e9:1f:ac:93:
         ec:be:69:65:e1:cf:75:3b:1a:3b:5b:01:fe:27:80:b6:89:fa:
         73:23:96:63:40:92:d0:a9:e0:b1:77:cc:8b:dc:43:8a:d4:cb:
         84:30:83:05:c1:5c:69:af:a1:4b:91:f6:9d:f4:df:91:b1:93:
         8a:18:0b:a6:13:15:dc:b2:8c:c1:9e:94:46:f0:02:8e:6f:2e:
         82:1c:58:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHoHUaT/Y1qFA6zysryqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWM1YTZlYTkwZjVmM2QwMDdjMTBlNDQ0ZTNiOTYzYjZk
MzBjYzUwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhhZGQzNGI3MDk1OTgzYjViYjhjMjUwYWFhNTNiOGM2ZGIxZmUwZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxArPRR/MnOu6JZv0uZIiB37vSp3i
gaeQve0AcdeGdTzNFFosp6M9m5rnySgRFqdq+E77UNdl03zAIer/uSo/emLbK02v
10bOZP90tYpYdmq3lljcu4hmFVWpZWVs1op3TeuW0XZbArFld0/JAJ7cYoWPMEWc
vTCN5TySEr41Fe15u6yv8CrQuGHV68jWIMHazZJ/5lAIjB0ba45ezWi51ztCyWbW
tADx35V5v0Ty3hXeMbgBvx/2HlpUNo04bIz9Q+VTMwqHAYp5CudYQ/A60Qk2Eydw
8DNA2LepLTKPlJn0Hz74207P8U6TLWNYcDegSPudiY9Y4NOj/K2xMvldPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3TS3CVmDtbuMJQqqU7jG2x/g14MB8GA1UdIwQY
MBaAFHdcWm6pD189AHwQ5ETjuWO20wzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQt
ZTQwYTMzNDY5MWM5LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQtZTQwYTMzNDY5MWM5
LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfVYCKUu
3xtKPl/5MBklDYF3c/HL0wKXftspf+N55ZzfHVmvhBuQoz0L/c+DPFOUrIyqHF7v
MuB4EPEpVsreaoh4Gdu6oxQf5H2MB3Svi0rCuV79qqEwEnqNJkUL8BOwYEa3UMwk
qrUMw4VIF89Blb6N+p5qmhY4W8BpNwKpZJq3HZBbX+nsB21SCNTQ6lUpJyRBxiS5
GmSzmQp2xJfDiNGxFdEr5xnLCqkP/aOD2B3pH6yT7L5pZeHPdTsaO1sB/ieAton6
cyOWY0CS0KngsXfMi9xDitTLhDCDBcFcaa+hS5H2nfTfkbGTihgLphMV3LKMwZ6U
RvACjm8ughxYcQ==
-----END CERTIFICATE-----