Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File:                     Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier:          5OISQAxZ8EU6gRCOSynP/9tJTrBhq/rwlCtcp0IYKdM=
Subject key identifier:   23:D3:9C:5D:87:BF:33:5C:5F:B1:6F:0D:00:04:D6:5D:1A:40:BC:7B
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer:       /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial:       01962E98B261C39FC8A09A27C18D0DF64901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number:          0EDB
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: m7Q09TsVIQ3n15641NyzlHsF3HznVdmDbLO7huom6lk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:61:c3:9f:c8:a0:9a:27:c1:8d:0d:f6:49:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=23d39c5d87bf335c5fb16f0d0004d65d1a40bc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:94:fe:01:5f:a5:2a:7f:d8:17:32:a5:1d:91:
                    29:52:94:0a:da:a6:c7:df:ca:dc:fe:89:2d:80:b5:
                    ce:c9:a9:84:79:3e:47:d4:5e:6a:45:bc:8d:1d:3c:
                    23:0d:82:41:b7:95:7e:a0:88:ac:df:d1:22:1d:bd:
                    af:ab:ab:72:1b:40:85:41:22:15:a6:81:23:2a:3b:
                    de:2d:2f:27:72:a7:a0:63:9c:83:03:16:b5:ae:58:
                    69:4e:0c:a9:97:0a:25:e9:6f:17:90:28:9a:4b:fe:
                    44:36:be:55:22:05:43:ab:3b:78:8b:c9:53:ae:d4:
                    7d:cc:71:64:d5:09:8d:65:0b:c3:dd:3d:61:32:78:
                    9f:91:5d:4f:2f:ce:ae:28:ca:ed:97:b9:f6:2d:83:
                    31:2e:f1:7c:ab:bc:69:a4:a9:cf:a6:85:b1:dd:2b:
                    a3:f0:75:85:eb:52:aa:e8:cc:fa:91:a5:6e:11:2d:
                    6c:d3:d3:bc:42:f8:53:79:97:47:d3:2b:45:cb:74:
                    45:60:f8:f4:fb:42:6f:04:6f:68:f6:9c:36:75:d3:
                    8e:d5:bf:64:5f:5c:e5:f7:b6:f1:72:fc:ce:0c:27:
                    b3:2e:e7:d2:92:82:3e:51:c6:1f:a0:af:66:25:f7:
                    ed:29:76:d3:c5:32:1e:af:cb:09:dd:40:f8:03:98:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:9C:5D:87:BF:33:5C:5F:B1:6F:0D:00:04:D6:5D:1A:40:BC:7B
            X509v3 Authority Key Identifier:
                keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:63:08:9f:68:36:44:72:51:0b:9c:93:c4:98:19:48:3a:
         f3:f7:37:5f:a4:40:a3:f8:35:b1:e2:38:d7:8f:50:b2:3f:9c:
         04:1b:30:e6:6b:3b:84:78:2a:9c:1d:99:d6:06:1b:43:af:d7:
         f3:ae:b3:58:57:86:26:46:fe:09:e6:99:a8:a2:3e:87:d1:c6:
         59:9a:3d:dd:bf:1e:46:cd:4f:a5:29:4a:ac:e2:e9:12:2b:ad:
         6b:49:8e:41:93:c0:79:2a:ba:cc:93:cf:d7:36:ea:1d:84:dd:
         25:b6:d5:22:d8:83:c0:0b:97:99:39:55:ad:c6:0f:86:e7:c2:
         e4:e1:d8:a4:10:8d:c8:e9:56:52:8a:9a:08:2a:de:bc:20:ac:
         a0:92:87:2e:73:7f:e0:de:93:2b:69:04:d4:e2:1e:10:aa:c0:
         5f:27:77:33:c5:d0:c3:6c:0e:0e:be:5c:00:2c:2c:90:db:81:
         86:59:d5:3b:f7:0a:9e:bd:a5:56:31:b9:76:5e:52:42:5c:0a:
         cc:03:38:da:8a:33:62:24:c0:01:dc:17:66:bd:0e:dc:1c:fe:
         32:c2:5a:a8:1b:24:e7:5e:49:01:6e:0b:cc:e0:f3:85:b6:07:
         69:f0:85:d3:94:78:a2:85:e1:8a:1c:7f:a8:42:6e:83:9b:f4:
         e5:27:ca:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLJhw5/IoJonwY0N9kkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZGQyMmJiYWRjOWVmOTdjOWMxYTM4NjFiNmQ2YjRjNGRk
ZDg2ODcwHhcNMjUwNDEzMTAwMTIxWhcNMjUwNDE0MTAwMTIxWjAzMTEwLwYDVQQD
EygyM2QzOWM1ZDg3YmYzMzVjNWZiMTZmMGQwMDA0ZDY1ZDFhNDBiYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZT+AV+lKn/YFzKlHZEpUpQK2qbH
38rc/oktgLXOyamEeT5H1F5qRbyNHTwjDYJBt5V+oIis39EiHb2vq6tyG0CFQSIV
poEjKjveLS8ncqegY5yDAxa1rlhpTgyplwol6W8XkCiaS/5ENr5VIgVDqzt4i8lT
rtR9zHFk1QmNZQvD3T1hMnifkV1PL86uKMrtl7n2LYMxLvF8q7xppKnPpoWx3Suj
8HWF61Kq6Mz6kaVuES1s09O8QvhTeZdH0ytFy3RFYPj0+0JvBG9o9pw2ddOO1b9k
X1zl97bxcvzODCezLufSkoI+UcYfoK9mJfftKXbTxTIer8sJ3UD4A5i4SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPTnF2HvzNcX7FvDQAE1l0aQLx7MB8GA1UdIwQY
MBaAFAHdIrutye+XycGjhhtta0xN3YaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWQwaXU2M0o3NWZKd2FPR0cyMXJURTNkaG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NTdhODMtNmVkMC00MWM2LWJkZDYt
NzA3ZGIyNTI0ZTZiLzEvQWQwaXU2M0o3NWZKd2FPR0cyMXJURTNkaG9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NTdhODMtNmVkMC00MWM2LWJkZDYtNzA3ZGIyNTI0ZTZi
LzEvQWQwaXU2M0o3NWZKd2FPR0cyMXJURTNkaG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPRjCJ9o
NkRyUQuck8SYGUg68/c3X6RAo/g1seI4149Qsj+cBBsw5ms7hHgqnB2Z1gYbQ6/X
866zWFeGJkb+CeaZqKI+h9HGWZo93b8eRs1PpSlKrOLpEiuta0mOQZPAeSq6zJPP
1zbqHYTdJbbVItiDwAuXmTlVrcYPhufC5OHYpBCNyOlWUoqaCCrevCCsoJKHLnN/
4N6TK2kE1OIeEKrAXyd3M8XQw2wODr5cACwskNuBhlnVO/cKnr2lVjG5dl5SQlwK
zAM42oozYiTAAdwXZr0O3Bz+MsJaqBsk515JAW4LzODzhbYHafCF05R4ooXhihx/
qEJug5v05SfKrg==
-----END CERTIFICATE-----