Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File:                     JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier:          VCGv+WEMNGPNHPhQUS4JZ6cPIBbsmxXYdy8yXTvLBko=
Subject key identifier:   10:F9:9A:20:5F:37:4B:FE:EE:A7:F6:90:9A:DF:ED:23:EF:E1:C4:AB
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer:       /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial:       01962DF3C153DC8460741A7BD34B68204087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number:          05E0
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: asODf5Grp+P7zMsCd4rK7nSkwckiQq2dKa/lH+Nca6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c1:53:dc:84:60:74:1a:7b:d3:4b:68:20:40:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=10f99a205f374bfeeea7f6909adfed23efe1c4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:f6:82:2f:49:94:48:69:2f:1d:a4:84:4b:
                    f1:c1:6b:40:b8:b0:e2:9f:81:90:d8:ce:86:f3:b3:
                    59:af:7d:a7:d1:be:1f:4b:b9:96:16:56:b3:49:31:
                    f6:e7:69:5f:3f:c4:c5:25:ef:9e:7d:ba:80:fd:2a:
                    ae:85:cf:e9:6a:c5:0b:3c:6a:a4:0e:6f:74:d3:a6:
                    03:11:63:21:a8:7d:21:7d:c4:c2:e6:28:f0:88:2d:
                    1f:37:79:fd:c8:89:08:55:17:61:94:21:d2:cc:bb:
                    5b:2d:cb:0a:11:ba:ac:3d:d2:68:b0:31:a7:db:f7:
                    50:9b:44:08:57:6f:29:bf:29:d8:7e:d6:30:2d:8c:
                    fe:c1:3a:12:b0:a6:8a:32:75:eb:84:e0:4d:31:f0:
                    06:49:68:a6:35:1b:4c:df:53:39:94:57:bc:56:a3:
                    f5:21:6c:ed:bc:43:b2:fd:30:71:f2:64:61:66:99:
                    eb:3c:d0:6a:60:18:47:43:b0:55:38:19:c1:4a:01:
                    f4:2f:61:69:dc:b5:ef:b3:2a:c3:62:99:1c:80:3d:
                    03:fa:99:16:7d:36:54:c8:05:24:18:86:a3:45:e3:
                    ad:44:e4:bd:61:ce:7c:9f:a7:82:32:e5:9c:46:ea:
                    7f:84:8b:fa:94:04:c1:b4:94:be:15:66:95:d6:f9:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:9A:20:5F:37:4B:FE:EE:A7:F6:90:9A:DF:ED:23:EF:E1:C4:AB
            X509v3 Authority Key Identifier:
                keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:bf:f8:a1:8c:bf:55:93:5c:73:f9:f0:5a:72:74:9d:d0:
         8d:13:13:be:0a:f0:db:33:e0:72:dd:47:91:95:39:f4:cb:31:
         51:7f:4c:df:07:9c:d0:2b:c0:1d:09:e8:f8:84:3c:ff:2c:b0:
         ac:24:a1:1f:e6:b6:06:9d:75:39:3b:d6:39:58:cf:bf:3b:b3:
         76:b0:31:b0:d6:b3:47:7c:eb:ac:8d:96:8a:c5:87:65:13:f4:
         7b:0a:a1:7d:cf:38:6c:eb:57:23:49:b8:ea:af:c8:56:5c:0b:
         37:2c:f9:0e:17:88:81:6a:8b:22:68:f4:64:76:a2:6b:9f:6b:
         11:5b:6b:71:57:f0:8d:52:a4:6b:ed:da:ae:02:22:ef:94:f1:
         4b:71:b5:77:d2:31:50:9a:da:36:1d:38:1e:82:29:5a:06:d9:
         0c:d6:60:9d:f6:fb:a2:5a:09:22:19:af:6f:84:05:5c:dd:cc:
         d8:cd:6d:33:10:1d:d3:97:92:2f:67:a6:c5:67:ca:ba:98:9b:
         21:2f:75:cd:47:b7:e5:d0:32:b8:0f:bc:59:aa:9d:e0:1b:fa:
         e6:2d:e2:b2:ed:ee:5e:49:a9:24:19:55:53:b2:28:7c:dd:87:
         fa:0a:14:d3:d3:3e:10:b0:1a:e3:70:05:74:98:9b:fa:e4:88:
         b6:23:cc:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88FT3IRgdBp700toIECHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODQ2NGNkN2Q1NjQ3ZGI1YTAzYjY2OWJkYzZiMGZmNzNi
MGRmOGEwHhcNMjUwNDEzMDcwMTExWhcNMjUwNDE0MDcwMTExWjAzMTEwLwYDVQQD
EygxMGY5OWEyMDVmMzc0YmZlZWVhN2Y2OTA5YWRmZWQyM2VmZTFjNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylD2gi9JlEhpLx2khEvxwWtAuLDi
n4GQ2M6G87NZr32n0b4fS7mWFlazSTH252lfP8TFJe+efbqA/Squhc/pasULPGqk
Dm9006YDEWMhqH0hfcTC5ijwiC0fN3n9yIkIVRdhlCHSzLtbLcsKEbqsPdJosDGn
2/dQm0QIV28pvynYftYwLYz+wToSsKaKMnXrhOBNMfAGSWimNRtM31M5lFe8VqP1
IWztvEOy/TBx8mRhZpnrPNBqYBhHQ7BVOBnBSgH0L2Fp3LXvsyrDYpkcgD0D+pkW
fTZUyAUkGIajReOtROS9Yc58n6eCMuWcRup/hIv6lATBtJS+FWaV1vn/uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD5miBfN0v+7qf2kJrf7SPv4cSrMB8GA1UdIwQY
MBaAFCWEZM19VkfbWgO2ab3GsP9zsN+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MDQyYjYtYTg5OS00YzlmLThmZmQt
ZDYyMzAyMmM5ZTk3LzEvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MDQyYjYtYTg5OS00YzlmLThmZmQtZDYyMzAyMmM5ZTk3
LzEvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMi/+KGM
v1WTXHP58FpydJ3QjRMTvgrw2zPgct1HkZU59MsxUX9M3wec0CvAHQno+IQ8/yyw
rCShH+a2Bp11OTvWOVjPvzuzdrAxsNazR3zrrI2WisWHZRP0ewqhfc84bOtXI0m4
6q/IVlwLNyz5DheIgWqLImj0ZHaia59rEVtrcVfwjVKka+3argIi75TxS3G1d9Ix
UJraNh04HoIpWgbZDNZgnfb7oloJIhmvb4QFXN3M2M1tMxAd05eSL2emxWfKupib
IS91zUe35dAyuA+8Waqd4Bv65i3isu3uXkmpJBlVU7IofN2H+goU09M+ELAa43AF
dJib+uSItiPMnA==
-----END CERTIFICATE-----