Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File:                     dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier:          eLc0ngG16IdtBzZL6y+KxTJ3L86qrYYgGndhxNSJ8lU=
Subject key identifier:   5B:60:7D:98:E5:EF:59:8E:43:67:61:86:7E:81:1D:0A:46:48:DA:84
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer:       /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial:       01962E99B4FADAA23BD6FCE8E116340CDE00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: IpEz3yTuQzuoiGa/r0A2vH0kQ6/uFxgeynAE6XTtkNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b4:fa:da:a2:3b:d6:fc:e8:e1:16:34:0c:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=5b607d98e5ef598e436761867e811d0a4648da84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:52:98:dc:1f:5e:24:8f:3d:a4:ba:4f:ef:
                    ad:e9:72:c4:7b:0f:67:9f:4e:0b:b5:fe:09:9c:fe:
                    2d:2e:60:09:16:14:c6:5c:6e:a0:6d:48:4f:22:a7:
                    15:f2:9b:27:d7:75:e4:07:5e:dd:c6:75:b2:ce:9c:
                    6d:60:0d:65:cf:7b:77:c5:2b:38:e3:48:d9:2c:d9:
                    86:4d:7f:10:67:ae:10:20:26:1d:56:5e:8e:6e:48:
                    74:6f:d3:79:97:5b:4a:b2:63:56:f1:ef:9a:6d:84:
                    95:ca:79:0b:ff:0f:cc:64:21:6b:93:ed:ce:e7:70:
                    fc:e3:bf:18:be:81:0b:d4:ae:3e:8a:2d:98:41:91:
                    f3:eb:28:f8:73:24:0d:59:63:59:9f:50:2a:f9:35:
                    77:71:15:41:15:4a:41:29:b5:e1:98:9d:fa:49:e7:
                    2a:c3:ac:05:f0:38:f7:8b:69:8a:01:55:53:43:e4:
                    9c:9e:ca:ad:ba:96:90:71:ac:49:9e:f7:2f:b8:39:
                    04:72:db:9d:55:84:68:1c:17:6b:e2:8b:8b:2b:07:
                    9f:46:2e:e4:e5:bc:5f:21:04:6f:2c:ac:24:41:a4:
                    16:e7:50:bd:59:30:e6:0e:b7:a0:e5:b9:e2:4a:af:
                    59:a5:c3:d0:23:67:1e:94:74:17:ae:b1:26:3c:e5:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:7D:98:E5:EF:59:8E:43:67:61:86:7E:81:1D:0A:46:48:DA:84
            X509v3 Authority Key Identifier:
                keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:87:51:f8:38:f6:df:36:4a:89:f0:9e:c4:7b:e7:7d:93:a1:
         26:49:9e:35:2f:7e:cc:fc:d9:b6:95:89:42:2a:cd:0d:17:a7:
         dd:55:6e:e2:73:5b:15:b9:fa:0c:d9:b2:75:06:c2:6e:c5:96:
         41:81:fd:ad:3d:31:fc:cf:c8:31:b2:a6:b0:a0:ed:e8:77:95:
         79:b4:51:d4:ae:a8:da:5b:29:5b:ad:0d:3b:52:78:c6:62:83:
         34:09:a1:d5:f7:5f:ab:9f:85:98:d6:dd:1c:6d:c7:17:d3:db:
         6c:e3:c6:c3:0e:cb:be:37:71:d0:58:39:47:87:ca:15:07:86:
         3e:93:23:d8:f1:1b:f5:db:84:1a:61:f5:30:e6:83:e0:15:ac:
         09:4a:1b:13:10:bf:ba:ee:76:5e:07:80:8d:3d:7f:71:55:54:
         94:9f:59:62:b7:e4:d9:99:06:97:58:63:ec:32:1f:b6:22:2e:
         e1:8d:3b:49:ec:5d:42:4c:e0:a9:8f:79:b6:aa:12:d9:da:ca:
         b3:6a:1f:3f:bb:60:b1:57:c4:e2:d1:8e:67:51:c5:65:bf:c2:
         bd:dc:25:b7:a2:82:a1:d3:9c:90:d6:d1:16:b7:b8:29:4e:92:
         79:8f:be:08:3e:a9:e8:8c:73:53:d7:15:ee:98:a5:f9:18:75:
         ae:89:0a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbT62qI71vzo4RY0DN4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjYxMTYyNzFhZDJkMTExOTYwYTJkOTYxYWE5YzE2MmY5
NTgwYTYwHhcNMjUwNDEzMTAwMjI3WhcNMjUwNDE0MTAwMjI3WjAzMTEwLwYDVQQD
Eyg1YjYwN2Q5OGU1ZWY1OThlNDM2NzYxODY3ZTgxMWQwYTQ2NDhkYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuNSmNwfXiSPPaS6T++t6XLEew9n
n04Ltf4JnP4tLmAJFhTGXG6gbUhPIqcV8psn13XkB17dxnWyzpxtYA1lz3t3xSs4
40jZLNmGTX8QZ64QICYdVl6Obkh0b9N5l1tKsmNW8e+abYSVynkL/w/MZCFrk+3O
53D8478YvoEL1K4+ii2YQZHz6yj4cyQNWWNZn1Aq+TV3cRVBFUpBKbXhmJ36Secq
w6wF8Dj3i2mKAVVTQ+ScnsqtupaQcaxJnvcvuDkEctudVYRoHBdr4ouLKwefRi7k
5bxfIQRvLKwkQaQW51C9WTDmDreg5bniSq9ZpcPQI2celHQXrrEmPOUK3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtgfZjl71mOQ2dhhn6BHQpGSNqEMB8GA1UdIwQY
MBaAFHT2EWJxrS0RGWCi2WGqnBYvlYCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYt
NWEwNWI5MWIyYjhjLzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYtNWEwNWI5MWIyYjhj
LzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYdR+Dj2
3zZKifCexHvnfZOhJkmeNS9+zPzZtpWJQirNDRen3VVu4nNbFbn6DNmydQbCbsWW
QYH9rT0x/M/IMbKmsKDt6HeVebRR1K6o2lspW60NO1J4xmKDNAmh1fdfq5+FmNbd
HG3HF9PbbOPGww7Lvjdx0Fg5R4fKFQeGPpMj2PEb9duEGmH1MOaD4BWsCUobExC/
uu52XgeAjT1/cVVUlJ9ZYrfk2ZkGl1hj7DIftiIu4Y07SexdQkzgqY95tqoS2drK
s2ofP7tgsVfE4tGOZ1HFZb/Cvdwlt6KCodOckNbRFre4KU6SeY++CD6p6IxzU9cV
7pil+Rh1rokK8Q==
-----END CERTIFICATE-----