Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
File:                     FBxyOMCfG6TRJON73uZPglqi9rU.mft (raw, json)
Hash identifier:          70trftHCthxCjaqpgiKSs4aURyYQPkiOfzLf7Tsniv4=
Subject key identifier:   F9:BB:08:14:1D:A3:F2:1D:3C:DF:82:63:3D:B1:E2:42:5C:F2:D0:E9
Authority key identifier: 14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5
Certificate issuer:       /CN=141c7238c09f1ba4d124e37bdee64f825aa2f6b5
Certificate serial:       01948EBEAB0FD54A019F684770A28F583C0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FBxyOMCfG6TRJON73uZPglqi9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
Manifest number:          1054
Signing time:             Wed 22 Jan 2025 16:00:47 +0000
Manifest this update:     Wed 22 Jan 2025 16:00:47 +0000
Manifest next update:     Thu 23 Jan 2025 16:00:47 +0000
Files and hashes:         1: FBxyOMCfG6TRJON73uZPglqi9rU.crl (hash: c63c6AoZRuH2ztYM7YRbTLSBst5tVOvH/vEa0+/P2uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:be:ab:0f:d5:4a:01:9f:68:47:70:a2:8f:58:3c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141c7238c09f1ba4d124e37bdee64f825aa2f6b5
        Validity
            Not Before: Jan 22 16:00:47 2025 GMT
            Not After : Jan 23 16:00:47 2025 GMT
        Subject: CN=f9bb08141da3f21d3cdf82633db1e2425cf2d0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:f2:5d:40:d8:cb:b4:ca:8a:68:b7:65:2f:
                    66:ac:d5:09:eb:82:17:60:3e:08:b3:ae:93:c5:54:
                    9d:ba:a8:4e:5c:4a:a3:46:d5:dd:49:f3:e0:d9:81:
                    89:36:45:bd:f2:64:28:5e:df:34:51:7d:6c:3b:8e:
                    fc:7c:be:c8:38:cb:c2:0a:bf:b3:16:5b:90:16:9f:
                    d4:0d:1f:38:8d:99:ab:41:1d:94:3a:83:85:b6:13:
                    e7:43:98:05:1a:dc:05:0f:f7:66:fa:52:a6:6a:4d:
                    06:eb:ad:ee:68:cd:27:82:39:f6:e5:0d:0b:09:a0:
                    1a:9a:b7:14:75:2c:31:c9:c0:8c:f0:58:43:96:80:
                    21:cb:d8:ea:f4:79:25:68:95:37:c5:78:9e:04:63:
                    ba:bb:05:f9:4c:76:83:82:ee:03:c7:ae:5d:c4:f0:
                    a4:ec:82:3b:9d:18:5b:e6:55:b3:ef:57:22:4c:92:
                    a5:b3:3a:59:d1:b6:32:c4:62:7f:fb:60:b8:24:a5:
                    cd:a9:e3:a3:6a:f9:24:f2:2d:7d:77:86:8f:4c:a2:
                    c9:7c:74:8e:56:39:b2:f6:b9:7f:f1:81:26:7f:c9:
                    66:bf:5f:d5:a0:3b:fc:69:d7:d9:78:1d:57:e7:8f:
                    4b:c1:c3:bb:1b:5a:d2:8a:f7:28:6e:39:b9:9f:43:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BB:08:14:1D:A3:F2:1D:3C:DF:82:63:3D:B1:E2:42:5C:F2:D0:E9
            X509v3 Authority Key Identifier:
                keyid:14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FBxyOMCfG6TRJON73uZPglqi9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:75:ee:fd:96:c9:3b:6e:0b:68:77:82:1b:21:31:16:7f:8f:
         fa:79:98:90:2f:79:c7:cc:35:87:6d:65:74:68:ae:aa:d8:44:
         ca:56:c2:24:e4:86:c5:2d:e3:78:45:39:34:88:41:9b:a4:b7:
         4a:f4:fc:e8:b3:74:74:c5:23:45:a8:b1:ee:e6:c6:52:33:f5:
         aa:31:b7:fb:11:76:be:07:24:0c:1a:d6:34:a7:18:85:37:3d:
         0a:7f:70:a5:39:db:09:e7:0a:fe:76:30:74:1b:51:05:f6:c4:
         ce:47:44:e0:90:a6:91:7b:f6:98:b4:6a:72:0f:a3:de:56:12:
         b2:da:3b:99:49:1c:38:35:84:70:4d:3c:fb:29:7c:49:f3:da:
         7b:ff:ee:ed:5f:43:13:17:0a:6a:31:cd:32:5d:28:2b:b8:34:
         bf:83:11:de:ca:d8:bf:97:2c:46:fa:64:38:5a:c2:ee:22:e1:
         0c:40:c0:bd:35:66:7b:ec:14:1b:e7:56:ef:6f:6d:4d:97:39:
         ce:e1:41:f0:ab:48:25:8f:cd:17:fe:25:4b:35:0b:4b:8f:3c:
         a3:ef:63:17:ed:20:28:d9:9a:be:b1:95:b6:7c:b7:48:4c:b6:
         08:31:17:82:26:10:c6:bb:b8:94:56:b4:fc:b1:3c:18:94:c5:
         d4:0d:e3:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSOvqsP1UoBn2hHcKKPWDwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MWM3MjM4YzA5ZjFiYTRkMTI0ZTM3YmRlZTY0ZjgyNWFh
MmY2YjUwHhcNMjUwMTIyMTYwMDQ3WhcNMjUwMTIzMTYwMDQ3WjAzMTEwLwYDVQQD
EyhmOWJiMDgxNDFkYTNmMjFkM2NkZjgyNjMzZGIxZTI0MjVjZjJkMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cTyXUDYy7TKimi3ZS9mrNUJ64IX
YD4Is66TxVSduqhOXEqjRtXdSfPg2YGJNkW98mQoXt80UX1sO478fL7IOMvCCr+z
FluQFp/UDR84jZmrQR2UOoOFthPnQ5gFGtwFD/dm+lKmak0G663uaM0ngjn25Q0L
CaAamrcUdSwxycCM8FhDloAhy9jq9HklaJU3xXieBGO6uwX5THaDgu4Dx65dxPCk
7II7nRhb5lWz71ciTJKlszpZ0bYyxGJ/+2C4JKXNqeOjavkk8i19d4aPTKLJfHSO
Vjmy9rl/8YEmf8lmv1/VoDv8adfZeB1X549LwcO7G1rSivcobjm5n0NluQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm7CBQdo/IdPN+CYz2x4kJc8tDpMB8GA1UdIwQY
MBaAFBQccjjAnxuk0STje97mT4Jaova1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkJ4eU9NQ2ZHNlRSSk9ONzN1WlBnbHFpOXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTk3YWMtNWM1OS00ZTQxLWIzZjYt
NTBhZjQ1MGY0YTQ1LzEvRkJ4eU9NQ2ZHNlRSSk9ONzN1WlBnbHFpOXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTk3YWMtNWM1OS00ZTQxLWIzZjYtNTBhZjQ1MGY0YTQ1
LzEvRkJ4eU9NQ2ZHNlRSSk9ONzN1WlBnbHFpOXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3Xu/ZbJ
O24LaHeCGyExFn+P+nmYkC95x8w1h21ldGiuqthEylbCJOSGxS3jeEU5NIhBm6S3
SvT86LN0dMUjRaix7ubGUjP1qjG3+xF2vgckDBrWNKcYhTc9Cn9wpTnbCecK/nYw
dBtRBfbEzkdE4JCmkXv2mLRqcg+j3lYSsto7mUkcODWEcE08+yl8SfPae//u7V9D
ExcKajHNMl0oK7g0v4MR3srYv5csRvpkOFrC7iLhDEDAvTVme+wUG+dW729tTZc5
zuFB8KtIJY/NF/4lSzULS488o+9jF+0gKNmavrGVtny3SEy2CDEXgiYQxru4lFa0
/LE8GJTF1A3jYQ==
-----END CERTIFICATE-----