Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File:                     2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier:          27B2vMvsrp2eCwyPELPLbV11uuk6IhVbmdA05UDdT2I=
Subject key identifier:   BA:95:F4:B2:3F:63:47:33:FF:6F:D5:A9:10:D9:FD:01:A5:F1:7D:2B
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer:       /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial:       01962ECF4E72DC54BCEBA2EE3146BC23BAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number:          F4
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: 6dZCY+yonawbqII2/J1rZxMs+aMg2QtzYsUzbGv3C/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4e:72:dc:54:bc:eb:a2:ee:31:46:bc:23:ba:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=ba95f4b23f634733ff6fd5a910d9fd01a5f17d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ef:9d:2d:3f:5a:de:00:ac:81:93:7d:e8:57:
                    e6:2c:a9:5c:65:4f:69:8c:8e:ae:86:15:60:ef:9b:
                    51:49:a6:86:21:ef:4b:dd:05:ec:69:7f:95:b3:16:
                    56:71:18:82:d8:14:14:9c:80:7a:80:ad:1b:3c:22:
                    c7:54:eb:77:70:5e:d1:01:85:4c:5a:b4:e4:57:4c:
                    44:a9:39:9b:32:46:92:57:1d:9c:59:26:c7:44:db:
                    39:6b:5e:99:8a:e6:e6:77:6e:86:9b:7c:cc:77:c1:
                    d8:00:88:31:79:32:12:1c:39:9a:7f:40:37:f2:29:
                    53:e5:e4:39:c4:da:ba:38:33:0b:bb:23:fa:3b:f9:
                    84:9e:e7:21:d3:db:3b:58:b5:44:af:8b:a5:ea:0c:
                    a7:5b:89:1e:71:9e:66:71:98:a4:a2:70:54:37:9f:
                    d9:74:1b:20:fd:7c:a0:cb:72:24:ad:c8:14:ba:dd:
                    ee:d9:7e:0b:41:fe:16:84:a6:6d:fe:dd:01:e4:00:
                    b9:44:b5:3d:ff:87:f2:09:e2:40:fb:c8:fc:99:bf:
                    6f:e8:1c:0d:8d:72:41:78:80:3e:63:9a:ad:20:0d:
                    eb:e8:62:c4:32:f0:4a:14:c5:f6:85:f0:55:45:4b:
                    a1:d6:3a:01:a2:6b:02:34:b2:7c:b3:15:32:60:16:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:95:F4:B2:3F:63:47:33:FF:6F:D5:A9:10:D9:FD:01:A5:F1:7D:2B
            X509v3 Authority Key Identifier:
                keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:ac:64:bc:a4:b4:47:17:8b:a2:7c:6f:6f:8a:c1:23:b6:
         98:5f:f8:27:2b:bc:7b:c9:5c:9e:03:97:a6:d6:bb:1c:33:da:
         bf:7a:6b:0d:60:01:a2:94:03:a0:bb:2b:a7:88:5a:9b:16:9f:
         f7:f0:9b:88:84:bd:f1:47:fb:e6:5a:15:fa:f3:45:c2:b4:eb:
         43:cd:80:02:00:80:e9:b4:45:81:a1:8a:b1:68:0f:ed:47:15:
         c9:bd:c0:9b:ed:91:9d:50:ea:2b:09:c7:9c:76:b5:19:de:42:
         64:10:8e:87:6d:20:d7:71:b4:ad:f7:25:42:a5:dd:6f:2b:80:
         bb:10:7b:9b:8c:05:70:1b:16:b5:0f:ac:f1:c5:dd:1e:6d:c0:
         73:b5:69:71:43:c9:8d:ac:f1:12:49:ea:d1:22:1c:d0:3a:46:
         a8:21:7f:28:b7:85:96:26:39:07:89:f1:e2:11:d9:d2:02:64:
         b8:09:73:8d:b4:9c:c3:d4:de:df:b8:6e:3c:a4:5d:14:ea:f7:
         c8:c9:83:12:9a:31:a4:a0:e5:36:fb:37:6c:6b:50:e4:84:0f:
         f3:5e:50:18:91:13:9f:63:e2:f0:cc:83:38:3b:12:4c:4f:12:
         2e:66:bc:7a:30:c7:ae:a3:9c:15:48:53:8b:9d:38:95:7f:ba:
         7a:65:9e:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz05y3FS866LuMUa8I7qmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MGFkMTExMTMxODMwMGJhNjc4ZTg4ZTA1MDJiMWZjNTFl
MzUzNzkwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
EyhiYTk1ZjRiMjNmNjM0NzMzZmY2ZmQ1YTkxMGQ5ZmQwMWE1ZjE3ZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e+dLT9a3gCsgZN96FfmLKlcZU9p
jI6uhhVg75tRSaaGIe9L3QXsaX+VsxZWcRiC2BQUnIB6gK0bPCLHVOt3cF7RAYVM
WrTkV0xEqTmbMkaSVx2cWSbHRNs5a16Ziubmd26Gm3zMd8HYAIgxeTISHDmaf0A3
8ilT5eQ5xNq6ODMLuyP6O/mEnuch09s7WLVEr4ul6gynW4kecZ5mcZikonBUN5/Z
dBsg/Xygy3IkrcgUut3u2X4LQf4WhKZt/t0B5AC5RLU9/4fyCeJA+8j8mb9v6BwN
jXJBeIA+Y5qtIA3r6GLEMvBKFMX2hfBVRUuh1joBomsCNLJ8sxUyYBZxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqV9LI/Y0cz/2/VqRDZ/QGl8X0rMB8GA1UdIwQY
MBaAFNkK0RETGDALpnjojgUCsfxR41N5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzIt
NWEyN2I4YWYyOGE1LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzItNWEyN2I4YWYyOGE1
LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+2sZLyk
tEcXi6J8b2+KwSO2mF/4Jyu8e8lcngOXpta7HDPav3prDWABopQDoLsrp4hamxaf
9/CbiIS98Uf75loV+vNFwrTrQ82AAgCA6bRFgaGKsWgP7UcVyb3Am+2RnVDqKwnH
nHa1Gd5CZBCOh20g13G0rfclQqXdbyuAuxB7m4wFcBsWtQ+s8cXdHm3Ac7VpcUPJ
jazxEknq0SIc0DpGqCF/KLeFliY5B4nx4hHZ0gJkuAlzjbScw9Te37huPKRdFOr3
yMmDEpoxpKDlNvs3bGtQ5IQP815QGJETn2Pi8MyDODsSTE8SLma8ejDHrqOcFUhT
i504lX+6emWeIQ==
-----END CERTIFICATE-----