Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft
File:                     tZXiFxdovJspQknw46U1kBecUu4.mft (raw, json)
Hash identifier:          EUVXurLJZOrov9IZeMfJ0x50jo5D2gd4FFAYG2MIg1U=
Subject key identifier:   DF:FA:AB:DE:E3:31:FA:A0:ED:32:55:E5:4E:E9:F1:11:B3:DB:41:F5
Authority key identifier: B5:95:E2:17:17:68:BC:9B:29:42:49:F0:E3:A5:35:90:17:9C:52:EE
Certificate issuer:       /CN=b595e2171768bc9b294249f0e3a53590179c52ee
Certificate serial:       01962E9920C1B684AF58325FF9869717F9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tZXiFxdovJspQknw46U1kBecUu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: tZXiFxdovJspQknw46U1kBecUu4.crl (hash: dNbz2J/x2MCvp6jTdIZ6+OzBHG6PsIMLhmhq56wz+Cs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:20:c1:b6:84:af:58:32:5f:f9:86:97:17:f9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b595e2171768bc9b294249f0e3a53590179c52ee
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=dffaabdee331faa0ed3255e54ee9f111b3db41f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:6a:a8:28:ea:7f:26:8a:55:f8:ac:19:e6:
                    45:c7:49:17:b5:ed:1a:36:a3:08:a0:3f:48:be:25:
                    f6:f2:56:be:33:fc:ca:8a:dc:f4:f3:4e:4d:a0:19:
                    fc:a5:e7:d5:07:47:03:01:6c:f2:06:ed:33:ae:a8:
                    f3:d4:e0:42:47:a5:a0:4c:06:30:4b:48:e4:a0:ff:
                    72:eb:e0:fc:59:52:71:6a:fd:c0:b2:6a:1f:a2:88:
                    ff:21:b1:fd:e3:ae:b0:6d:0e:18:86:8f:5e:ef:d7:
                    a0:97:b6:0f:f3:ae:6d:4f:98:0d:11:d8:e5:84:43:
                    2a:78:c9:6c:84:97:d1:51:fc:72:6d:a6:26:51:24:
                    ea:8c:3e:65:0d:cc:2f:43:9a:9c:d5:01:1d:5c:88:
                    0b:f2:d0:ea:a3:b5:d7:0e:e6:e2:27:d8:63:cd:8e:
                    5b:43:07:f6:09:1b:f8:69:b1:a6:80:a2:e5:74:42:
                    4a:d1:cf:bd:84:16:ae:60:89:47:b3:5a:30:44:96:
                    fb:94:ad:28:4f:6a:2d:41:e1:45:a6:87:ba:54:88:
                    87:ab:58:87:81:b3:fa:ad:24:7d:19:56:91:27:1b:
                    ed:e9:c5:89:90:b5:5b:a8:0a:81:c4:f3:51:d9:97:
                    f5:5f:04:12:6a:33:96:89:44:39:23:42:2a:10:df:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FA:AB:DE:E3:31:FA:A0:ED:32:55:E5:4E:E9:F1:11:B3:DB:41:F5
            X509v3 Authority Key Identifier:
                keyid:B5:95:E2:17:17:68:BC:9B:29:42:49:F0:E3:A5:35:90:17:9C:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZXiFxdovJspQknw46U1kBecUu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:6c:02:fe:a0:78:c3:fd:ce:d9:45:7a:21:71:39:66:c5:
         af:89:24:8b:8a:f7:0f:c4:21:6a:30:84:03:7c:9c:a0:eb:99:
         9d:68:fc:48:e8:16:41:24:95:ea:33:dc:f8:e2:8e:c1:d6:30:
         10:d5:b5:dd:9d:5d:a8:0e:25:06:22:4a:ea:d0:05:5a:85:77:
         63:e2:bc:a5:c3:af:96:a6:58:fc:ac:42:8b:92:be:d7:ac:4f:
         10:ca:42:84:47:a4:5e:37:0a:04:10:14:96:9f:d5:58:e1:b3:
         d8:d2:6d:bf:5b:ef:da:2b:ea:9a:2c:1c:70:75:d6:0b:92:4a:
         39:f4:54:94:2d:87:86:91:fd:07:06:f0:86:a9:4b:f2:50:a6:
         b0:64:1d:eb:a8:93:56:16:b6:07:4f:ad:1e:87:7f:0d:ad:d4:
         5e:b5:3b:54:94:6a:38:c4:f9:e6:31:78:37:73:fd:93:b9:75:
         97:48:94:3c:3f:4f:c4:4b:93:2e:30:0d:16:a1:c8:ba:3b:2c:
         18:37:84:2b:fe:d8:f7:5c:cc:3d:8d:75:1e:c3:24:60:f1:96:
         3a:6a:8a:76:73:11:3c:63:78:ff:88:05:6a:a0:20:4d:f2:da:
         02:17:ac:3a:13:b7:91:3b:0e:ea:18:ed:ac:2d:79:e5:e4:ad:
         cc:f9:db:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumSDBtoSvWDJf+YaXF/n9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OTVlMjE3MTc2OGJjOWIyOTQyNDlmMGUzYTUzNTkwMTc5
YzUyZWUwHhcNMjUwNDEzMTAwMTQ5WhcNMjUwNDE0MTAwMTQ5WjAzMTEwLwYDVQQD
EyhkZmZhYWJkZWUzMzFmYWEwZWQzMjU1ZTU0ZWU5ZjExMWIzZGI0MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxZqqCjqfyaKVfisGeZFx0kXte0a
NqMIoD9IviX28la+M/zKitz0805NoBn8pefVB0cDAWzyBu0zrqjz1OBCR6WgTAYw
S0jkoP9y6+D8WVJxav3Asmofooj/IbH9466wbQ4Yho9e79egl7YP865tT5gNEdjl
hEMqeMlshJfRUfxybaYmUSTqjD5lDcwvQ5qc1QEdXIgL8tDqo7XXDubiJ9hjzY5b
Qwf2CRv4abGmgKLldEJK0c+9hBauYIlHs1owRJb7lK0oT2otQeFFpoe6VIiHq1iH
gbP6rSR9GVaRJxvt6cWJkLVbqAqBxPNR2Zf1XwQSajOWiUQ5I0IqEN/HFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/6q97jMfqg7TJV5U7p8RGz20H1MB8GA1UdIwQY
MBaAFLWV4hcXaLybKUJJ8OOlNZAXnFLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFpYaUZ4ZG92SnNwUWtudzQ2VTFrQmVjVXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hMzRmYjktZjY0ZS00MjkxLTkyOTEt
NjBiNGFjZTAwNGI1LzEvdFpYaUZ4ZG92SnNwUWtudzQ2VTFrQmVjVXU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hMzRmYjktZjY0ZS00MjkxLTkyOTEtNjBiNGFjZTAwNGI1
LzEvdFpYaUZ4ZG92SnNwUWtudzQ2VTFrQmVjVXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABixsAv6g
eMP9ztlFeiFxOWbFr4kki4r3D8QhajCEA3ycoOuZnWj8SOgWQSSV6jPc+OKOwdYw
ENW13Z1dqA4lBiJK6tAFWoV3Y+K8pcOvlqZY/KxCi5K+16xPEMpChEekXjcKBBAU
lp/VWOGz2NJtv1vv2ivqmiwccHXWC5JKOfRUlC2HhpH9BwbwhqlL8lCmsGQd66iT
Vha2B0+tHod/Da3UXrU7VJRqOMT55jF4N3P9k7l1l0iUPD9PxEuTLjANFqHIujss
GDeEK/7Y91zMPY11HsMkYPGWOmqKdnMRPGN4/4gFaqAgTfLaAhesOhO3kTsO6hjt
rC155eStzPnbmg==
-----END CERTIFICATE-----