Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          OmWmLrCqrbZq7JHK1u9uaTjkgHGA2NNyTtcC0jgFliI=
Subject key identifier:   9B:64:44:2B:24:76:32:06:D0:10:B3:BC:C0:30:36:17:CD:29:DC:35
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       01962E98A70C211336CA70978C35BC3DC391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          0624
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: MIwi7D5IIGcVzfG5LQBlyOAKdcEF3rzmPOud72gJiOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a7:0c:21:13:36:ca:70:97:8c:35:bc:3d:c3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=9b64442b24763206d010b3bcc0303617cd29dc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:6d:34:b0:b2:ee:9f:7a:ee:80:14:2a:13:
                    63:b2:50:d8:9a:3d:fb:6c:68:ce:da:f5:cb:73:0b:
                    5f:5c:cb:5f:84:23:7e:38:ef:62:c3:d3:22:14:9b:
                    6d:57:2a:01:61:9d:19:ae:e7:7a:bd:02:1a:10:bb:
                    99:9e:e5:6e:a6:41:4c:21:4c:c9:4f:7c:54:5e:d2:
                    6b:e4:1f:c8:12:21:79:cc:a4:9f:cb:da:43:03:5a:
                    6a:01:b5:8d:7e:03:36:b7:8e:9a:d9:0a:41:c3:83:
                    19:af:06:d1:86:ed:e4:3b:16:02:32:04:5c:35:e5:
                    0c:9e:2a:15:5b:33:cf:3c:38:f0:a7:19:ef:81:8b:
                    80:09:64:8b:dd:79:1a:f1:14:b8:08:30:c7:4a:66:
                    8b:a6:2a:08:02:3f:3c:9d:3c:aa:ae:d6:95:79:69:
                    0e:5c:a7:9b:01:f9:17:02:e2:ce:a1:6e:0f:58:db:
                    d8:4c:52:3b:09:d4:04:e7:53:7d:e2:73:b7:0f:2d:
                    92:4f:f8:30:19:dd:59:71:11:29:48:1a:d6:9e:26:
                    91:29:4b:66:94:3b:13:e3:a4:e0:d2:45:bd:bf:39:
                    0e:50:98:d8:ac:db:9e:82:83:a6:b7:2e:6d:ea:d6:
                    7a:0f:51:f6:b2:d9:a0:8f:83:ac:ef:c2:28:be:74:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:64:44:2B:24:76:32:06:D0:10:B3:BC:C0:30:36:17:CD:29:DC:35
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:09:8b:45:54:eb:d8:83:9f:6e:3f:10:36:71:0a:d0:a8:0a:
         0f:39:18:d6:f9:72:32:5a:a6:62:90:5d:8d:d3:84:02:b4:b7:
         a5:28:cc:0e:37:de:a1:ab:1c:f7:2e:51:17:6a:b4:35:95:55:
         c7:bd:95:16:21:0c:90:47:06:ea:1e:61:b9:18:56:1f:81:ba:
         89:2a:9c:0b:ec:4d:90:48:72:91:74:e5:04:3e:a4:87:4b:9e:
         87:11:da:13:82:e0:dc:32:c7:b6:ed:6e:f0:42:94:f9:d1:f2:
         dd:22:0b:84:96:21:61:17:9b:d3:b4:31:10:f7:32:bb:9e:5e:
         ee:fa:03:c6:f0:f5:b5:41:d6:ef:3e:4c:d3:72:e9:6f:1a:35:
         75:5f:67:ec:28:a3:a3:bd:f7:a4:8f:aa:bb:51:5f:56:8e:83:
         cf:9c:82:19:f0:c8:c2:04:af:61:7f:64:9d:f4:92:57:3c:d7:
         a4:53:36:08:fb:a2:69:b5:52:8a:58:0e:3f:f9:b0:a4:49:0d:
         c9:44:55:1a:04:4e:01:ae:42:1c:7a:17:99:ec:e9:92:21:04:
         47:ee:67:23:23:33:24:22:2d:d7:b3:74:2d:77:2d:36:f1:ad:
         d8:09:97:4a:85:0e:3b:d6:67:45:2f:2e:aa:b3:57:c8:25:41:
         1a:b4:ea:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKcMIRM2ynCXjDW8PcORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj
OWFkNzEwHhcNMjUwNDEzMTAwMTE4WhcNMjUwNDE0MTAwMTE4WjAzMTEwLwYDVQQD
Eyg5YjY0NDQyYjI0NzYzMjA2ZDAxMGIzYmNjMDMwMzYxN2NkMjlkYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm41tNLCy7p967oAUKhNjslDYmj37
bGjO2vXLcwtfXMtfhCN+OO9iw9MiFJttVyoBYZ0Zrud6vQIaELuZnuVupkFMIUzJ
T3xUXtJr5B/IEiF5zKSfy9pDA1pqAbWNfgM2t46a2QpBw4MZrwbRhu3kOxYCMgRc
NeUMnioVWzPPPDjwpxnvgYuACWSL3Xka8RS4CDDHSmaLpioIAj88nTyqrtaVeWkO
XKebAfkXAuLOoW4PWNvYTFI7CdQE51N94nO3Dy2ST/gwGd1ZcREpSBrWniaRKUtm
lDsT46Tg0kW9vzkOUJjYrNuegoOmty5t6tZ6D1H2stmgj4Os78IovnQ2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtkRCskdjIG0BCzvMAwNhfNKdw1MB8GA1UdIwQY
MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt
YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3
LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQmLRVTr
2IOfbj8QNnEK0KgKDzkY1vlyMlqmYpBdjdOEArS3pSjMDjfeoasc9y5RF2q0NZVV
x72VFiEMkEcG6h5huRhWH4G6iSqcC+xNkEhykXTlBD6kh0uehxHaE4Lg3DLHtu1u
8EKU+dHy3SILhJYhYReb07QxEPcyu55e7voDxvD1tUHW7z5M03Lpbxo1dV9n7Cij
o733pI+qu1FfVo6Dz5yCGfDIwgSvYX9knfSSVzzXpFM2CPuiabVSilgOP/mwpEkN
yURVGgROAa5CHHoXmezpkiEER+5nIyMzJCIt17N0LXctNvGt2AmXSoUOO9ZnRS8u
qrNXyCVBGrTqsA==
-----END CERTIFICATE-----