Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File:                     Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier:          n/ZvHdQJa+S32LwzED3zncfEn8ykBxSnXObl4lLkbco=
Subject key identifier:   04:05:8C:AF:2D:8B:E8:EC:03:76:E1:23:4E:E3:18:F0:6A:37:0E:25
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer:       /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial:       01962FAB2E249855EEDE0D9BB1A19FBE3752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: KfM000tEgv3chK+qlf3cT0389kfwUAsDNBmdqAbHoaM=)
                          2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:24:98:55:ee:de:0d:9b:b1:a1:9f:be:37:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=04058caf2d8be8ec0376e1234ee318f06a370e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:bc:a3:91:b2:7c:e1:fc:5f:c6:dd:61:76:
                    c5:a0:19:48:e0:c2:9b:7c:16:6e:a1:df:db:ff:0e:
                    6d:5b:14:ea:ba:fe:24:38:da:c1:f2:1e:08:2e:dc:
                    38:d7:3d:94:c9:e3:3f:78:d4:3a:7c:d6:17:ea:a3:
                    5a:6d:71:8b:8e:a8:26:27:c1:fe:d6:5c:f1:90:02:
                    c7:27:e5:9d:1a:1c:fb:74:e0:c2:e7:16:74:09:65:
                    6e:2d:e4:54:ce:ba:83:73:6c:4b:6e:e8:cb:86:88:
                    2e:bd:56:39:c6:3f:c9:5b:33:5e:ec:00:36:c5:f2:
                    b4:21:84:8c:31:24:d3:9f:f2:75:34:d7:b2:da:ed:
                    5d:55:d0:ac:51:e1:ea:df:ca:55:b1:f8:d1:fd:bc:
                    d6:32:fc:64:ec:c3:0e:5d:e3:06:25:61:bd:ec:33:
                    ac:ba:ca:d6:60:86:93:f0:d0:7a:08:56:39:b6:ee:
                    31:48:e2:6e:18:73:a6:28:54:d2:22:52:d9:f4:9c:
                    33:1f:8a:e3:f5:72:41:a5:21:9e:f9:9e:4b:57:04:
                    0b:01:3e:75:2a:ea:40:79:39:cb:bc:ac:1a:17:b9:
                    4f:3d:af:f7:26:67:b3:c6:0d:65:65:66:00:c8:4d:
                    b5:92:f7:30:de:f5:f4:4f:cb:11:4c:90:13:36:ce:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:05:8C:AF:2D:8B:E8:EC:03:76:E1:23:4E:E3:18:F0:6A:37:0E:25
            X509v3 Authority Key Identifier:
                keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:9a:6b:b1:27:4f:1f:70:cc:d3:2c:fd:04:c8:53:55:cf:
         7c:65:7b:c5:3f:db:fd:fc:a6:27:d0:6a:6c:cf:b2:4c:52:2a:
         5d:98:48:b9:37:39:2b:da:c0:dd:8a:ab:72:42:e5:23:da:88:
         73:2e:a1:ab:1f:02:fc:36:2b:0f:2b:52:1c:7b:6f:58:b0:49:
         4b:29:75:dc:9b:47:09:b7:b6:0b:a8:6a:d2:f7:66:d9:f4:4d:
         0d:2c:99:fe:8e:d7:16:ea:8f:d6:e0:82:d6:0c:f9:16:15:b3:
         1a:81:ae:ca:7f:d0:8b:1b:0f:3f:2f:c5:93:12:9f:a7:fa:e4:
         8a:64:91:fc:de:8c:50:24:b9:89:f0:10:1a:b6:46:c5:f7:57:
         fa:75:f8:9f:ac:0b:77:86:93:44:07:6e:6c:5f:2d:0e:17:71:
         4c:1e:0a:83:7f:38:5d:02:0e:4c:90:9b:d9:72:9f:b5:58:c5:
         f0:ff:9b:34:6a:ab:db:52:24:1b:ab:2e:65:b4:96:ee:3f:4d:
         b7:64:07:2d:c1:85:88:b1:5c:99:14:84:ff:6e:99:f6:28:ce:
         af:4f:27:07:c3:b7:bc:4c:fa:a6:3c:a5:49:91:8e:6d:d9:40:
         66:c4:22:5b:ca:00:9d:00:b1:63:15:51:83:8a:4b:56:0b:70:
         d5:65:de:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqy4kmFXu3g2bsaGfvjdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmJiYzZmNTFjY2UwMWFlYWFjYmE4MGYyZDBkMjY0MTJl
NDdmOTMwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
EygwNDA1OGNhZjJkOGJlOGVjMDM3NmUxMjM0ZWUzMThmMDZhMzcwZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozS8o5GyfOH8X8bdYXbFoBlI4MKb
fBZuod/b/w5tWxTquv4kONrB8h4ILtw41z2UyeM/eNQ6fNYX6qNabXGLjqgmJ8H+
1lzxkALHJ+WdGhz7dODC5xZ0CWVuLeRUzrqDc2xLbujLhoguvVY5xj/JWzNe7AA2
xfK0IYSMMSTTn/J1NNey2u1dVdCsUeHq38pVsfjR/bzWMvxk7MMOXeMGJWG97DOs
usrWYIaT8NB6CFY5tu4xSOJuGHOmKFTSIlLZ9JwzH4rj9XJBpSGe+Z5LVwQLAT51
KupAeTnLvKwaF7lPPa/3Jmezxg1lZWYAyE21kvcw3vX0T8sRTJATNs4iWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQFjK8ti+jsA3bhI07jGPBqNw4lMB8GA1UdIwQY
MBaAFCMrvG9RzOAa6qy6gPLQ0mQS5H+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQt
NTMxNGFjY2IwNjEyLzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQtNTMxNGFjY2IwNjEy
LzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0aaa7En
Tx9wzNMs/QTIU1XPfGV7xT/b/fymJ9BqbM+yTFIqXZhIuTc5K9rA3YqrckLlI9qI
cy6hqx8C/DYrDytSHHtvWLBJSyl13JtHCbe2C6hq0vdm2fRNDSyZ/o7XFuqP1uCC
1gz5FhWzGoGuyn/QixsPPy/FkxKfp/rkimSR/N6MUCS5ifAQGrZGxfdX+nX4n6wL
d4aTRAdubF8tDhdxTB4Kg384XQIOTJCb2XKftVjF8P+bNGqr21IkG6suZbSW7j9N
t2QHLcGFiLFcmRSE/26Z9ijOr08nB8O3vEz6pjylSZGObdlAZsQiW8oAnQCxYxVR
g4pLVgtw1WXePg==
-----END CERTIFICATE-----