Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File:                     MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier:          UYWsqEErihoko7sMsKUd0YfhnMIvwiiknrMUxbOnCeo=
Subject key identifier:   6B:D7:1A:29:FF:6B:AB:5A:36:C7:0B:3F:7A:24:A1:73:29:02:E1:88
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer:       /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial:       01962E999DB7C66122EC7DB8B73DFA780789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number:          06E5
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: nTrWBeHp6qKijKuUFIJ54gWXiFiYsAs+gW0rDwUu12c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9d:b7:c6:61:22:ec:7d:b8:b7:3d:fa:78:07:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=6bd71a29ff6bab5a36c70b3f7a24a1732902e188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:67:8c:91:6a:4c:21:e7:a6:b9:40:e8:a4:
                    48:38:c3:12:af:53:06:f0:16:5c:95:c5:e3:2e:0b:
                    4f:6f:06:2f:e4:62:42:50:24:ea:12:d2:75:da:e3:
                    38:f9:2e:b8:51:42:d8:e0:9c:10:11:ad:07:85:e1:
                    b8:d7:30:f6:13:80:23:67:70:37:e2:24:7e:78:40:
                    b5:73:5e:44:46:4e:6a:b2:41:5e:cd:11:f9:bd:c1:
                    1c:87:57:5d:7e:49:ce:5b:f0:95:ba:a3:37:a8:dc:
                    2e:f3:21:17:55:4c:7f:b7:c7:02:40:c7:98:81:38:
                    9b:e3:fd:fd:d4:f7:5f:fe:bb:35:47:75:5c:11:51:
                    91:9c:1a:45:46:e6:50:7d:de:4a:03:d9:98:34:6b:
                    1a:7f:7a:36:b8:7c:04:56:ba:0c:ac:fa:db:dc:39:
                    c4:d7:b9:da:0e:19:b9:ef:6a:a7:20:f5:29:db:1a:
                    a2:ab:da:73:93:ea:32:ce:47:ef:74:ee:d8:db:0c:
                    3e:35:a9:b9:52:84:76:b0:51:9f:77:90:cf:1e:2c:
                    03:66:2b:46:1f:b0:3e:58:d0:69:f0:a8:77:c3:28:
                    be:2e:b4:1b:e7:2f:e7:ad:65:dc:d8:c3:4b:23:0e:
                    28:2d:06:00:28:5a:30:2f:d7:8a:54:ca:58:eb:bb:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D7:1A:29:FF:6B:AB:5A:36:C7:0B:3F:7A:24:A1:73:29:02:E1:88
            X509v3 Authority Key Identifier:
                keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:16:95:f3:bd:d4:ff:de:d1:65:9c:b6:de:a5:47:0a:ee:44:
         12:11:8d:c3:14:df:5b:c5:0c:54:d9:b7:8b:df:d6:1b:9a:ad:
         95:c0:bc:8e:4e:56:18:ec:35:70:28:e7:f7:6a:06:f2:18:e7:
         a7:e1:73:e3:7f:0d:b1:32:01:02:d1:2a:af:a5:f1:87:22:08:
         0f:c0:50:31:1d:e3:ec:55:3a:16:25:33:0f:9f:37:e4:bf:43:
         e8:8d:8e:fc:10:41:6a:99:50:c8:3e:be:ac:c8:52:60:23:6b:
         19:4e:5e:39:00:24:1e:70:9c:98:96:7d:41:d2:59:9c:ee:b2:
         4f:79:b9:5c:05:50:5c:f8:8f:56:08:9f:bb:8d:95:f7:3d:11:
         3d:dd:9f:e9:1b:19:68:68:2f:50:72:82:3b:a7:26:67:ce:7c:
         02:5e:ab:0a:ec:1e:37:c6:fb:63:87:4e:ed:e7:10:67:95:36:
         60:54:f1:3a:41:f9:e4:2c:fa:26:b1:e0:cb:6b:ac:9b:98:46:
         95:93:4f:6a:a1:fe:98:ae:ea:0a:39:36:01:1f:12:93:5c:4e:
         e3:87:71:dd:ee:d4:f6:ff:24:bf:89:de:e8:4a:d7:e8:c8:b6:
         0a:7f:a2:68:5c:82:c3:18:6e:6a:8d:ca:82:8f:c2:06:8a:6f:
         66:b8:d8:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZ23xmEi7H24tz36eAeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj
Y2I5MjUwHhcNMjUwNDEzMTAwMjIxWhcNMjUwNDE0MTAwMjIxWjAzMTEwLwYDVQQD
Eyg2YmQ3MWEyOWZmNmJhYjVhMzZjNzBiM2Y3YTI0YTE3MzI5MDJlMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApthnjJFqTCHnprlA6KRIOMMSr1MG
8BZclcXjLgtPbwYv5GJCUCTqEtJ12uM4+S64UULY4JwQEa0HheG41zD2E4AjZ3A3
4iR+eEC1c15ERk5qskFezRH5vcEch1ddfknOW/CVuqM3qNwu8yEXVUx/t8cCQMeY
gTib4/391Pdf/rs1R3VcEVGRnBpFRuZQfd5KA9mYNGsaf3o2uHwEVroMrPrb3DnE
17naDhm572qnIPUp2xqiq9pzk+oyzkfvdO7Y2ww+Nam5UoR2sFGfd5DPHiwDZitG
H7A+WNBp8Kh3wyi+LrQb5y/nrWXc2MNLIw4oLQYAKFowL9eKVMpY67saxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvXGin/a6taNscLP3okoXMpAuGIMB8GA1UdIwQY
MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct
YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw
LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRaV873U
/97RZZy23qVHCu5EEhGNwxTfW8UMVNm3i9/WG5qtlcC8jk5WGOw1cCjn92oG8hjn
p+Fz438NsTIBAtEqr6XxhyIID8BQMR3j7FU6FiUzD5835L9D6I2O/BBBaplQyD6+
rMhSYCNrGU5eOQAkHnCcmJZ9QdJZnO6yT3m5XAVQXPiPVgifu42V9z0RPd2f6RsZ
aGgvUHKCO6cmZ858Al6rCuweN8b7Y4dO7ecQZ5U2YFTxOkH55Cz6JrHgy2usm5hG
lZNPaqH+mK7qCjk2AR8Sk1xO44dx3e7U9v8kv4ne6ErX6Mi2Cn+iaFyCwxhuao3K
go/CBopvZrjYaQ==
-----END CERTIFICATE-----