Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
File:                     Mnib05LhxcabdCDMA2gDrxJYzvk.mft (raw, json)
Hash identifier:          5/5JJb69cLWHWzJo7W56EYz8UuZo+o4EOcaQiMRRkz0=
Subject key identifier:   AC:04:AA:96:B8:55:31:FF:19:F0:AA:81:B2:81:DC:36:98:89:4A:0A
Authority key identifier: 32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9
Certificate issuer:       /CN=32789bd392e1c5c69b7420cc036803af1258cef9
Certificate serial:       01962F070097946A39986600D9D4565FFA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
Manifest number:          063C
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: Mnib05LhxcabdCDMA2gDrxJYzvk.crl (hash: ezwI/S5gzW+M8yPnYJvpt3QOkYIjRjiL+C8a38iIW8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:00:97:94:6a:39:98:66:00:d9:d4:56:5f:fa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32789bd392e1c5c69b7420cc036803af1258cef9
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=ac04aa96b85531ff19f0aa81b281dc3698894a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:bb:d2:4d:08:d6:ae:65:6c:1b:47:5f:aa:
                    cf:bc:3c:96:9a:03:0d:89:f4:df:af:e8:3e:3d:ed:
                    ee:a1:3e:af:25:c7:b1:40:d3:ca:bc:d2:ff:c4:cd:
                    ce:92:a6:a0:9a:b2:e6:da:37:ac:21:12:26:24:41:
                    fc:0f:dd:67:a9:7d:94:85:ca:a5:8f:88:19:52:bd:
                    58:c4:b2:47:64:38:06:72:7d:f2:f8:73:34:8d:f2:
                    bd:72:c2:c6:a1:ea:cb:74:88:05:b4:28:28:17:2b:
                    37:ae:59:fe:b7:c8:ee:46:10:57:d2:13:c4:4b:17:
                    a4:13:71:ca:39:5b:2c:79:d2:29:a7:7b:b3:a0:f5:
                    cc:e7:3d:13:d6:3e:3a:ea:43:85:55:fc:03:be:b9:
                    19:ad:f7:04:77:b0:1b:6a:9c:3b:8a:8e:e4:e4:db:
                    cc:f5:70:50:d9:59:e3:37:45:9a:4d:fe:99:a0:3e:
                    72:18:27:bd:60:6f:ff:cb:98:6c:e4:15:08:73:86:
                    da:6d:1c:e8:d4:a7:90:ed:cc:8f:8d:d4:1b:ec:f1:
                    b5:29:80:2b:39:e7:d8:67:f4:7f:91:3d:e7:8f:c0:
                    24:0b:e9:08:ef:82:dc:45:d6:b4:04:ff:85:8d:30:
                    d6:b4:ac:2c:fe:e2:00:99:d2:25:5b:83:79:03:41:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:04:AA:96:B8:55:31:FF:19:F0:AA:81:B2:81:DC:36:98:89:4A:0A
            X509v3 Authority Key Identifier:
                keyid:32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:55:30:17:01:50:60:4c:6b:66:e5:6d:fc:40:1e:f8:b5:
         2a:10:b7:21:37:a2:cd:71:58:4e:92:0b:ac:0c:8c:4a:23:7e:
         c4:c2:63:c4:08:e8:26:52:6f:66:2e:29:3f:97:eb:7a:1c:4f:
         8d:87:2f:6f:d0:97:99:8f:91:7a:b6:34:d7:39:f1:4d:99:ac:
         1d:79:4b:9c:33:7e:73:ae:05:a0:ec:af:2a:22:50:cf:b4:66:
         6a:68:cb:da:32:8d:99:d2:73:43:7c:32:02:43:57:ed:89:66:
         96:da:7b:fb:b9:8c:ff:26:d5:e7:eb:69:84:3b:1a:9a:dc:2b:
         1d:e4:fd:db:11:46:e6:0f:21:2b:52:23:4e:87:5f:47:ef:72:
         8f:02:d6:ff:f4:1d:80:4c:5e:af:13:7a:b9:a0:f7:bc:8c:97:
         40:70:3d:86:72:ab:80:85:c0:58:27:05:af:49:62:d3:d1:20:
         bd:3e:4f:17:9f:d3:7c:e2:49:99:bb:01:b9:df:02:89:b3:c5:
         92:e6:d8:21:08:89:f0:a2:c2:ab:f6:8b:61:43:22:44:28:5d:
         b9:84:a2:ad:c2:ab:04:f3:13:af:70:cd:5a:19:57:34:a4:e7:
         d5:a8:cf:04:18:a0:b3:36:fa:e6:cc:f5:a9:17:af:53:6f:75:
         a4:28:44:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwCXlGo5mGYA2dRWX/o+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzg5YmQzOTJlMWM1YzY5Yjc0MjBjYzAzNjgwM2FmMTI1
OGNlZjkwHhcNMjUwNDEzMTIwMTUwWhcNMjUwNDE0MTIwMTUwWjAzMTEwLwYDVQQD
EyhhYzA0YWE5NmI4NTUzMWZmMTlmMGFhODFiMjgxZGMzNjk4ODk0YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hy70k0I1q5lbBtHX6rPvDyWmgMN
ifTfr+g+Pe3uoT6vJcexQNPKvNL/xM3OkqagmrLm2jesIRImJEH8D91nqX2Uhcql
j4gZUr1YxLJHZDgGcn3y+HM0jfK9csLGoerLdIgFtCgoFys3rln+t8juRhBX0hPE
SxekE3HKOVssedIpp3uzoPXM5z0T1j466kOFVfwDvrkZrfcEd7Abapw7io7k5NvM
9XBQ2VnjN0WaTf6ZoD5yGCe9YG//y5hs5BUIc4babRzo1KeQ7cyPjdQb7PG1KYAr
OefYZ/R/kT3nj8AkC+kI74LcRda0BP+FjTDWtKws/uIAmdIlW4N5A0FAdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwEqpa4VTH/GfCqgbKB3DaYiUoKMB8GA1UdIwQY
MBaAFDJ4m9OS4cXGm3QgzANoA68SWM75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5pYjA1TGh4Y2FiZENETUEyZ0RyeEpZenZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYzE3ZDYtM2ZkNC00YmExLWJlNGMt
Mzg2NmQ0NDEyODkzLzEvTW5pYjA1TGh4Y2FiZENETUEyZ0RyeEpZenZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYzE3ZDYtM2ZkNC00YmExLWJlNGMtMzg2NmQ0NDEyODkz
LzEvTW5pYjA1TGh4Y2FiZENETUEyZ0RyeEpZenZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALhVMBcB
UGBMa2blbfxAHvi1KhC3ITeizXFYTpILrAyMSiN+xMJjxAjoJlJvZi4pP5frehxP
jYcvb9CXmY+RerY01znxTZmsHXlLnDN+c64FoOyvKiJQz7RmamjL2jKNmdJzQ3wy
AkNX7Ylmltp7+7mM/ybV5+tphDsamtwrHeT92xFG5g8hK1IjTodfR+9yjwLW//Qd
gExerxN6uaD3vIyXQHA9hnKrgIXAWCcFr0li09EgvT5PF5/TfOJJmbsBud8CibPF
kubYIQiJ8KLCq/aLYUMiRChduYSircKrBPMTr3DNWhlXNKTn1ajPBBigszb65sz1
qRevU291pChEAQ==
-----END CERTIFICATE-----