Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File:                     J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier:          jzmel0D/iGk/2ZGiUjQ8bpHQjEROfMwEhQNzNRn+UbE=
Subject key identifier:   1E:4D:01:9A:18:0B:A1:86:F6:1C:93:6A:11:9B:99:C8:F1:DE:1A:C5
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer:       /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial:       01962F7443E827AB5614D3BD4E543C32319B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number:          10BB
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: W2uB4vIxBjdDLvImNNCnWjMO5dG2zSOOsakwZjlvz78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:43:e8:27:ab:56:14:d3:bd:4e:54:3c:32:31:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=1e4d019a180ba186f61c936a119b99c8f1de1ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b3:e5:a8:81:0f:50:f7:5f:bb:10:4a:d2:ac:
                    6f:38:9f:45:49:4f:7a:8b:d1:51:68:9b:48:06:d5:
                    03:da:38:cf:53:94:7d:d6:80:2a:dd:0d:e7:98:b8:
                    c3:0c:a0:5f:16:56:86:76:33:fc:12:57:ac:9d:e0:
                    5b:db:58:c4:3c:ed:c7:d7:28:7a:44:1f:5f:3d:b2:
                    7d:3a:dc:d9:83:aa:fe:30:d0:c4:ce:5f:06:3f:4c:
                    07:e4:df:f6:7d:7c:fd:5b:bc:00:ee:1b:3c:e7:09:
                    e3:c6:c3:3a:dc:6f:24:cd:94:78:ff:ab:d7:5c:6a:
                    21:19:4a:5e:ec:dd:19:a8:ad:f4:97:49:d4:4e:83:
                    04:f6:4f:58:88:95:5e:6a:0f:44:f9:5d:bd:9f:af:
                    f8:17:59:04:b6:1c:70:53:74:ed:da:0c:9b:20:ec:
                    4e:59:0e:71:26:72:aa:1d:97:7a:24:7b:94:74:a3:
                    c1:3c:4d:a9:0f:72:29:85:dd:f7:22:7b:37:4d:de:
                    e9:94:22:7c:9e:f9:18:34:8f:dd:48:26:b2:70:13:
                    ba:d1:e1:fb:3a:70:c2:d2:c5:f5:94:8b:3d:74:a3:
                    27:0f:e1:ea:ec:7d:aa:cc:97:ed:3e:3d:a3:b8:90:
                    80:17:8d:33:d5:a5:47:48:bf:5d:1f:6d:cd:34:06:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:01:9A:18:0B:A1:86:F6:1C:93:6A:11:9B:99:C8:F1:DE:1A:C5
            X509v3 Authority Key Identifier:
                keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:88:03:5b:8c:c3:57:24:68:69:c1:a7:a5:d2:7e:ef:cd:
         41:19:a0:9b:82:4b:b4:3d:5f:4e:79:25:17:0c:ca:73:7d:50:
         25:83:73:43:a5:83:e9:50:cc:d5:ac:df:99:0f:46:89:fd:13:
         0c:c7:bc:af:af:14:5b:5f:9b:af:7b:46:88:46:61:fb:3c:f1:
         3e:25:bc:ef:4b:40:16:0c:d0:03:0d:01:5c:e4:10:ac:46:4a:
         86:68:19:17:20:e0:bb:0d:48:30:8b:61:7c:f2:10:08:e4:74:
         4b:ee:66:85:72:52:e9:76:3d:19:c5:83:55:f7:b7:73:bc:d6:
         b0:f9:94:41:31:eb:ee:79:f5:96:d9:69:39:d5:31:74:17:2b:
         b0:d3:df:c0:df:54:b3:46:b9:ee:63:1f:0c:3e:dd:b9:04:52:
         06:0c:f2:33:61:67:23:9e:a6:8a:b6:dd:00:ae:f5:12:43:86:
         47:1b:0f:a2:ac:1b:81:04:b2:bf:90:36:cb:52:9f:6b:8f:c6:
         c9:01:26:72:cf:df:3a:b4:4e:04:8a:eb:21:89:44:75:3e:d0:
         14:63:2f:7d:b5:fd:90:6b:6d:58:5d:85:e7:c6:c9:70:3b:b0:
         2c:04:b3:0c:32:95:27:f0:38:15:b4:0e:97:ec:bc:45:58:44:
         7c:e3:dd:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEPoJ6tWFNO9TlQ8MjGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm
NmViYjYwHhcNMjUwNDEzMTQwMTEwWhcNMjUwNDE0MTQwMTEwWjAzMTEwLwYDVQQD
EygxZTRkMDE5YTE4MGJhMTg2ZjYxYzkzNmExMTliOTljOGYxZGUxYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrPlqIEPUPdfuxBK0qxvOJ9FSU96
i9FRaJtIBtUD2jjPU5R91oAq3Q3nmLjDDKBfFlaGdjP8ElesneBb21jEPO3H1yh6
RB9fPbJ9OtzZg6r+MNDEzl8GP0wH5N/2fXz9W7wA7hs85wnjxsM63G8kzZR4/6vX
XGohGUpe7N0ZqK30l0nUToME9k9YiJVeag9E+V29n6/4F1kEthxwU3Tt2gybIOxO
WQ5xJnKqHZd6JHuUdKPBPE2pD3Iphd33Ins3Td7plCJ8nvkYNI/dSCaycBO60eH7
OnDC0sX1lIs9dKMnD+Hq7H2qzJftPj2juJCAF40z1aVHSL9dH23NNAbhiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5NAZoYC6GG9hyTahGbmcjx3hrFMB8GA1UdIwQY
MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt
YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2
LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5WIA1uM
w1ckaGnBp6XSfu/NQRmgm4JLtD1fTnklFwzKc31QJYNzQ6WD6VDM1azfmQ9Gif0T
DMe8r68UW1+br3tGiEZh+zzxPiW870tAFgzQAw0BXOQQrEZKhmgZFyDguw1IMIth
fPIQCOR0S+5mhXJS6XY9GcWDVfe3c7zWsPmUQTHr7nn1ltlpOdUxdBcrsNPfwN9U
s0a57mMfDD7duQRSBgzyM2FnI56mirbdAK71EkOGRxsPoqwbgQSyv5A2y1Kfa4/G
yQEmcs/fOrROBIrrIYlEdT7QFGMvfbX9kGttWF2F58bJcDuwLASzDDKVJ/A4FbQO
l+y8RVhEfOPdpg==
-----END CERTIFICATE-----