Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File:                     PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier:          zwBylF01TNnpyTWUAZPfek+4oHYrqebE80Jys6ZY0BI=
Subject key identifier:   E5:74:F3:75:75:15:F1:C4:6B:89:FD:B7:8F:26:E7:FC:0B:0D:DA:24
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer:       /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial:       01962F3D6D2256FE95658958FEE19F0A7A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number:          0C84
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: VO3u/7JzinzbgNti/lj/XHT90jREpIZL7/s5lLHUqHU=)
                          2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6d:22:56:fe:95:65:89:58:fe:e1:9f:0a:7a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=e574f3757515f1c46b89fdb78f26e7fc0b0dda24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:e6:b2:2d:a3:bd:97:ba:89:c6:c9:a8:96:
                    58:02:e7:c9:8e:b4:37:05:34:b4:08:17:36:fc:32:
                    45:1b:5e:b1:8b:e5:c9:5e:55:41:03:08:f6:83:80:
                    a5:7c:82:43:09:45:51:32:fe:e6:7f:11:3b:e5:52:
                    99:28:82:98:7c:e8:73:16:b2:4b:5b:ab:a6:27:63:
                    2d:97:54:db:7e:c3:8d:c5:95:23:8f:25:dc:75:57:
                    28:1f:e6:bf:e5:db:0c:af:8e:82:9e:37:d1:eb:b8:
                    8e:18:9f:cb:2e:7c:a9:e3:1d:6c:c8:18:88:81:80:
                    d3:4d:f9:d7:c5:1b:b8:13:11:b1:20:35:84:de:ae:
                    59:68:7b:90:d7:33:2e:18:60:b0:7b:17:2d:85:c7:
                    89:be:7f:e0:22:af:06:d4:be:a2:3e:25:82:ef:e9:
                    31:bc:1e:7f:3c:48:6b:d6:28:19:98:cc:67:b1:29:
                    05:1b:1c:86:37:45:50:cd:6d:cf:b7:82:0b:86:93:
                    7c:31:35:e7:60:86:dd:54:13:0e:17:39:9a:3c:22:
                    55:a5:3b:a8:87:40:0c:5c:c1:d0:83:82:f4:87:9c:
                    3c:17:a2:a6:91:5a:71:5c:cd:4b:d9:b3:c2:c1:bb:
                    f9:91:29:f4:d5:2d:e0:38:84:e5:b0:d1:35:a9:eb:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:74:F3:75:75:15:F1:C4:6B:89:FD:B7:8F:26:E7:FC:0B:0D:DA:24
            X509v3 Authority Key Identifier:
                keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a7:24:54:b7:bd:8d:d3:66:92:34:ac:48:70:17:40:0a:f3:
         f2:f2:4c:50:7d:6d:c2:e2:4a:bc:0a:47:28:a7:25:34:a2:a1:
         df:c1:db:2a:f9:12:3d:9d:c4:41:25:63:c9:55:51:cd:fd:2e:
         fa:84:b2:10:f3:26:c4:47:58:06:9d:e5:c9:ca:bd:35:2d:00:
         24:a5:d4:e2:bb:9f:d7:05:ef:c7:62:4e:9d:7d:bc:2b:14:d9:
         a3:da:ea:93:69:9f:c9:e6:af:5e:f3:5d:d8:b3:4b:e3:49:e7:
         68:17:8c:7c:2f:0d:42:cb:9a:72:27:69:21:a7:37:6b:ff:e7:
         b4:68:f1:dd:15:4f:0a:de:b5:a2:27:c2:ba:f2:fb:fe:d4:64:
         39:45:90:a7:07:c2:28:27:32:71:52:86:d8:34:64:c6:66:2a:
         af:76:4d:ac:aa:f8:78:89:29:99:af:aa:8e:0c:63:66:6b:c8:
         f1:5c:83:11:b6:23:d0:41:3a:a0:e7:fe:d4:06:4b:4d:b3:56:
         1e:4c:8a:88:cb:30:28:25:96:7c:91:2b:a4:ad:06:8d:b8:33:
         24:5b:72:5c:bb:1a:8a:0e:64:e4:43:25:29:04:a3:5f:a0:c9:
         a2:f3:c2:21:12:12:c2:45:29:ec:39:fb:3d:df:25:fb:de:8b:
         ef:52:b1:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPW0iVv6VZYlY/uGfCno8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5
OTE2Y2UwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
EyhlNTc0ZjM3NTc1MTVmMWM0NmI4OWZkYjc4ZjI2ZTdmYzBiMGRkYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMrmsi2jvZe6icbJqJZYAufJjrQ3
BTS0CBc2/DJFG16xi+XJXlVBAwj2g4ClfIJDCUVRMv7mfxE75VKZKIKYfOhzFrJL
W6umJ2Mtl1TbfsONxZUjjyXcdVcoH+a/5dsMr46CnjfR67iOGJ/LLnyp4x1syBiI
gYDTTfnXxRu4ExGxIDWE3q5ZaHuQ1zMuGGCwexcthceJvn/gIq8G1L6iPiWC7+kx
vB5/PEhr1igZmMxnsSkFGxyGN0VQzW3Pt4ILhpN8MTXnYIbdVBMOFzmaPCJVpTuo
h0AMXMHQg4L0h5w8F6KmkVpxXM1L2bPCwbv5kSn01S3gOITlsNE1qescLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOV083V1FfHEa4n9t48m5/wLDdokMB8GA1UdIwQY
MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct
NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4
LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqckVLe9
jdNmkjSsSHAXQArz8vJMUH1twuJKvApHKKclNKKh38HbKvkSPZ3EQSVjyVVRzf0u
+oSyEPMmxEdYBp3lycq9NS0AJKXU4ruf1wXvx2JOnX28KxTZo9rqk2mfyeavXvNd
2LNL40nnaBeMfC8NQsuacidpIac3a//ntGjx3RVPCt61oifCuvL7/tRkOUWQpwfC
KCcycVKG2DRkxmYqr3ZNrKr4eIkpma+qjgxjZmvI8VyDEbYj0EE6oOf+1AZLTbNW
HkyKiMswKCWWfJErpK0GjbgzJFtyXLsaig5k5EMlKQSjX6DJovPCIRISwkUp7Dn7
Pd8l+96L71KxFw==
-----END CERTIFICATE-----