Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft
File:                     Gvq72Ih6kieJRewu74JDoSlq33g.mft (raw, json)
Hash identifier:          8n3wLuEVvGVZPPdaBpDxRHQZfkimWP5CWXQQJR80LhY=
Subject key identifier:   FB:FD:F4:4E:76:79:27:7B:8F:3B:D7:CC:1E:F3:60:B1:B5:F4:1D:A3
Authority key identifier: 1A:FA:BB:D8:88:7A:92:27:89:45:EC:2E:EF:82:43:A1:29:6A:DF:78
Certificate issuer:       /CN=1afabbd8887a92278945ec2eef8243a1296adf78
Certificate serial:       01962E9904E541D6A1359F8E284DE3451F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gvq72Ih6kieJRewu74JDoSlq33g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: Gvq72Ih6kieJRewu74JDoSlq33g.crl (hash: ntPzUhZR3v/knmzHDF5mgvRcdQF6qCF09GYEgxcWRdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:04:e5:41:d6:a1:35:9f:8e:28:4d:e3:45:1f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afabbd8887a92278945ec2eef8243a1296adf78
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=fbfdf44e7679277b8f3bd7cc1ef360b1b5f41da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:57:69:0d:47:48:07:2a:cb:4d:a2:f8:59:
                    d4:f4:4e:ad:c4:6f:a6:23:92:ef:36:79:4e:4e:54:
                    76:04:d6:b3:fd:c2:f1:2d:d3:ca:98:d1:28:ac:03:
                    56:99:6b:d6:ad:b4:99:35:6f:5d:a6:60:65:90:a9:
                    ff:c8:70:42:36:eb:18:8b:7e:55:6e:fd:66:14:0f:
                    6f:1b:03:75:58:2d:9d:10:fb:19:c8:db:f7:45:16:
                    5d:fc:04:38:f7:40:5c:d1:92:f4:4c:a1:2d:e7:cf:
                    8c:04:cb:4b:9d:2d:62:f5:42:ce:99:eb:74:b0:56:
                    60:2c:8b:11:f3:1c:b7:68:6a:6b:34:4a:87:94:0d:
                    82:b7:c3:98:1d:e2:0a:07:84:48:fc:4d:da:6a:44:
                    6d:7e:25:83:65:23:45:c2:66:e7:81:9f:b6:26:af:
                    7b:1a:8f:77:1f:29:3e:bf:bb:ec:ee:97:3b:2c:a3:
                    67:2f:64:52:f6:bd:69:1d:b5:77:45:1e:d6:2a:63:
                    e9:4a:b2:1d:d8:5a:e2:e2:7f:2b:5e:41:ce:9a:4e:
                    8c:88:a7:c6:76:86:8d:bf:b5:70:0d:08:15:c1:df:
                    94:da:7e:05:6a:90:dc:0d:ce:a3:38:a7:a0:a9:0e:
                    ef:72:16:40:87:56:67:0c:b2:45:db:80:16:0e:5f:
                    f6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FD:F4:4E:76:79:27:7B:8F:3B:D7:CC:1E:F3:60:B1:B5:F4:1D:A3
            X509v3 Authority Key Identifier:
                keyid:1A:FA:BB:D8:88:7A:92:27:89:45:EC:2E:EF:82:43:A1:29:6A:DF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvq72Ih6kieJRewu74JDoSlq33g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a5:e7:10:3a:09:35:fc:76:68:01:32:87:11:fa:a7:d8:66:
         ea:dd:d9:b4:91:8d:98:58:5c:64:bb:de:2b:f6:20:a9:0e:7f:
         21:e5:87:e1:23:2d:e0:e8:3e:f7:7e:bf:fd:b4:25:e7:d1:aa:
         0f:01:8f:93:b4:53:1a:6f:2f:5c:a9:8e:61:98:8f:22:a3:e8:
         d0:f1:24:27:7a:0b:66:73:01:a3:d5:97:90:38:2f:20:58:78:
         31:d2:e0:38:91:6b:a6:28:f4:15:bb:eb:bd:5b:45:90:51:53:
         12:55:2a:35:9f:ad:8a:f3:61:81:9d:63:8c:8f:c5:01:c7:03:
         0f:58:83:42:52:3c:13:18:af:49:a2:f2:32:9f:16:08:81:f5:
         2c:71:11:65:12:4d:3e:e5:37:c6:24:c5:ed:19:55:e2:fb:25:
         cd:9d:8d:b6:c8:d7:a3:4b:c8:87:6c:45:19:81:e8:ec:d0:af:
         c8:eb:dc:46:44:79:a6:31:5b:16:83:81:d2:78:bb:10:15:3b:
         c0:b1:6f:4e:ec:c8:13:06:b9:65:6a:35:7f:0c:d5:99:94:03:
         f7:61:63:b7:a2:dd:d5:46:f2:1d:e5:b5:fc:da:e9:57:12:11:
         11:b0:54:38:85:58:26:52:bc:3d:42:4f:4d:dd:0b:8d:3a:3e:
         89:1f:1f:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQTlQdahNZ+OKE3jRR+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmFiYmQ4ODg3YTkyMjc4OTQ1ZWMyZWVmODI0M2ExMjk2
YWRmNzgwHhcNMjUwNDEzMTAwMTQyWhcNMjUwNDE0MTAwMTQyWjAzMTEwLwYDVQQD
EyhmYmZkZjQ0ZTc2NzkyNzdiOGYzYmQ3Y2MxZWYzNjBiMWI1ZjQxZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj5XaQ1HSAcqy02i+FnU9E6txG+m
I5LvNnlOTlR2BNaz/cLxLdPKmNEorANWmWvWrbSZNW9dpmBlkKn/yHBCNusYi35V
bv1mFA9vGwN1WC2dEPsZyNv3RRZd/AQ490Bc0ZL0TKEt58+MBMtLnS1i9ULOmet0
sFZgLIsR8xy3aGprNEqHlA2Ct8OYHeIKB4RI/E3aakRtfiWDZSNFwmbngZ+2Jq97
Go93Hyk+v7vs7pc7LKNnL2RS9r1pHbV3RR7WKmPpSrId2Fri4n8rXkHOmk6MiKfG
doaNv7VwDQgVwd+U2n4FapDcDc6jOKegqQ7vchZAh1ZnDLJF24AWDl/2FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv99E52eSd7jzvXzB7zYLG19B2jMB8GA1UdIwQY
MBaAFBr6u9iIepIniUXsLu+CQ6Epat94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZxNzJJaDZraWVKUmV3dTc0SkRvU2xxMzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZjdhNGMtMjU0OC00MGRkLTkwMGUt
NTE2MDY1YjZjZmE1LzEvR3ZxNzJJaDZraWVKUmV3dTc0SkRvU2xxMzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kZjdhNGMtMjU0OC00MGRkLTkwMGUtNTE2MDY1YjZjZmE1
LzEvR3ZxNzJJaDZraWVKUmV3dTc0SkRvU2xxMzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKXnEDoJ
Nfx2aAEyhxH6p9hm6t3ZtJGNmFhcZLveK/YgqQ5/IeWH4SMt4Og+936//bQl59Gq
DwGPk7RTGm8vXKmOYZiPIqPo0PEkJ3oLZnMBo9WXkDgvIFh4MdLgOJFrpij0Fbvr
vVtFkFFTElUqNZ+tivNhgZ1jjI/FAccDD1iDQlI8ExivSaLyMp8WCIH1LHERZRJN
PuU3xiTF7RlV4vslzZ2NtsjXo0vIh2xFGYHo7NCvyOvcRkR5pjFbFoOB0ni7EBU7
wLFvTuzIEwa5ZWo1fwzVmZQD92Fjt6Ld1UbyHeW1/NrpVxIREbBUOIVYJlK8PUJP
Td0LjTo+iR8fZA==
-----END CERTIFICATE-----