Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.mft
File:                     FYi9izG5XpysnzgSjZW4UvA9V4Q.mft (raw, json)
Hash identifier:          GpQ0PYf4VcvdHtudr6odDz0ZyP64iO1IWUKonDWq0pk=
Subject key identifier:   E9:61:C0:A1:C7:C4:28:C9:3D:8D:86:29:D7:73:CD:C1:48:7B:30:88
Authority key identifier: 15:88:BD:8B:31:B9:5E:9C:AC:9F:38:12:8D:95:B8:52:F0:3D:57:84
Certificate issuer:       /CN=1588bd8b31b95e9cac9f38128d95b852f03d5784
Certificate serial:       01962E98739DB7F169AD1C884CF4C7A596B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYi9izG5XpysnzgSjZW4UvA9V4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: FYi9izG5XpysnzgSjZW4UvA9V4Q.crl (hash: Co5/Jy1CN70YqVg492PNBFOuH6Ne8BhPNS+SMW/cAlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:9d:b7:f1:69:ad:1c:88:4c:f4:c7:a5:96:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1588bd8b31b95e9cac9f38128d95b852f03d5784
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=e961c0a1c7c428c93d8d8629d773cdc1487b3088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:80:e4:aa:02:8b:62:fa:e8:71:d1:80:06:
                    1f:76:09:87:8c:8b:20:9f:66:3a:44:02:c3:50:41:
                    f0:5c:2a:6b:13:35:11:92:2f:01:b3:ff:1e:ab:47:
                    cc:45:63:9b:31:1c:8c:d8:81:b2:1d:02:ff:21:85:
                    ed:b0:c6:de:60:1f:70:15:d8:37:ab:90:82:26:06:
                    db:cf:c1:dd:69:7e:60:d1:30:9a:e9:47:ab:94:3c:
                    92:77:b0:6b:9f:7c:79:f5:e4:43:97:15:89:df:bc:
                    fd:ec:c4:e7:c8:85:f8:68:89:4a:e8:1a:03:8c:cc:
                    be:7e:0e:a2:3e:74:c5:1d:39:97:ca:06:fc:ef:f2:
                    51:6e:2b:03:79:37:f3:6f:16:db:e5:de:b3:8c:c0:
                    69:f5:68:6a:e3:e9:2f:d6:17:d2:2b:fd:1f:73:28:
                    b0:27:51:ea:b1:c5:ac:40:63:50:ce:4d:c7:8c:c7:
                    eb:48:56:90:9d:1d:7c:28:dc:18:5b:ee:2b:04:ba:
                    81:08:d0:ca:4c:15:9b:69:62:4d:61:55:bf:7f:25:
                    51:5e:d7:f9:3b:5a:23:2f:37:87:8d:53:8e:ac:26:
                    a9:cc:95:9f:e0:df:5d:2b:06:02:2a:14:a6:40:90:
                    bd:f5:eb:8b:ef:24:cd:7b:ff:ff:64:52:a1:37:1d:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:C0:A1:C7:C4:28:C9:3D:8D:86:29:D7:73:CD:C1:48:7B:30:88
            X509v3 Authority Key Identifier:
                keyid:15:88:BD:8B:31:B9:5E:9C:AC:9F:38:12:8D:95:B8:52:F0:3D:57:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYi9izG5XpysnzgSjZW4UvA9V4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:98:0b:ca:ea:2f:32:21:05:d5:63:af:cb:6c:9a:42:79:
         e9:99:b6:39:78:38:49:21:6d:1e:fe:60:0e:5e:72:b8:da:9d:
         4e:b9:15:03:5b:2f:3b:3f:ab:7c:ec:45:80:5a:4f:ae:86:18:
         7a:97:6a:90:ad:70:6f:5b:03:94:c0:9a:bc:15:fe:e9:b7:dc:
         31:5d:e7:4c:51:cf:88:1e:06:fe:3a:92:b8:04:5b:d4:29:50:
         d1:b4:b7:d8:dc:5a:05:45:72:94:0c:57:07:30:2d:04:67:55:
         c1:5c:49:62:1b:26:95:6b:62:3b:1c:aa:9c:bd:73:00:c2:24:
         e6:4c:a9:df:ec:3c:80:92:7c:92:75:dd:a2:f3:eb:42:ab:38:
         8e:2d:23:50:06:fd:45:dc:76:e5:80:63:91:94:21:9a:f9:1a:
         0f:e1:2e:53:ec:1d:dc:0a:d6:da:5e:01:45:a5:23:e5:2b:c3:
         60:6b:8d:58:13:5e:8f:34:48:65:85:b9:6b:a7:98:90:8e:95:
         4e:49:68:a0:08:5c:49:aa:97:ef:ad:ad:c4:2d:be:4d:a2:7b:
         54:cc:27:b0:7c:7a:30:ac:9f:cb:4f:63:c4:ba:c6:ff:df:fe:
         68:24:aa:72:bf:04:5d:29:c3:df:d2:ea:4c:b3:63:22:70:ff:
         f2:5d:dc:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHOdt/FprRyITPTHpZazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODhiZDhiMzFiOTVlOWNhYzlmMzgxMjhkOTViODUyZjAz
ZDU3ODQwHhcNMjUwNDEzMTAwMTA0WhcNMjUwNDE0MTAwMTA0WjAzMTEwLwYDVQQD
EyhlOTYxYzBhMWM3YzQyOGM5M2Q4ZDg2MjlkNzczY2RjMTQ4N2IzMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioiA5KoCi2L66HHRgAYfdgmHjIsg
n2Y6RALDUEHwXCprEzURki8Bs/8eq0fMRWObMRyM2IGyHQL/IYXtsMbeYB9wFdg3
q5CCJgbbz8HdaX5g0TCa6UerlDySd7Brn3x59eRDlxWJ37z97MTnyIX4aIlK6BoD
jMy+fg6iPnTFHTmXygb87/JRbisDeTfzbxbb5d6zjMBp9Whq4+kv1hfSK/0fcyiw
J1HqscWsQGNQzk3HjMfrSFaQnR18KNwYW+4rBLqBCNDKTBWbaWJNYVW/fyVRXtf5
O1ojLzeHjVOOrCapzJWf4N9dKwYCKhSmQJC99euL7yTNe///ZFKhNx1F5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlhwKHHxCjJPY2GKddzzcFIezCIMB8GA1UdIwQY
MBaAFBWIvYsxuV6crJ84Eo2VuFLwPVeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllpOWl6RzVYcHlzbnpnU2paVzRVdkE5VjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kMWFhMmUtYjgxOS00MjFjLTg0NTYt
YjVhZTgzOWYzMGUyLzEvRllpOWl6RzVYcHlzbnpnU2paVzRVdkE5VjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kMWFhMmUtYjgxOS00MjFjLTg0NTYtYjVhZTgzOWYzMGUy
LzEvRllpOWl6RzVYcHlzbnpnU2paVzRVdkE5VjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpyYC8rq
LzIhBdVjr8tsmkJ56Zm2OXg4SSFtHv5gDl5yuNqdTrkVA1svOz+rfOxFgFpProYY
epdqkK1wb1sDlMCavBX+6bfcMV3nTFHPiB4G/jqSuARb1ClQ0bS32NxaBUVylAxX
BzAtBGdVwVxJYhsmlWtiOxyqnL1zAMIk5kyp3+w8gJJ8knXdovPrQqs4ji0jUAb9
Rdx25YBjkZQhmvkaD+EuU+wd3ArW2l4BRaUj5SvDYGuNWBNejzRIZYW5a6eYkI6V
TklooAhcSaqX762txC2+TaJ7VMwnsHx6MKyfy09jxLrG/9/+aCSqcr8EXSnD39Lq
TLNjInD/8l3cDQ==
-----END CERTIFICATE-----