Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File:                     APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier:          Uo+7wxtB6u3YcJE7b++RSFW3zYqSYE+jzwByTqdJr64=
Subject key identifier:   10:F9:4B:FD:9C:79:F0:FB:F6:B4:F4:34:58:1E:E3:0D:98:12:E1:9D
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer:       /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial:       01962F3D40E51FCF6B42848697EF8BD8C259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number:          143F
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: BH0ulEXgFcr9RZElkU9yKNdEDSZeqD6jTsCje/3pu+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:40:e5:1f:cf:6b:42:84:86:97:ef:8b:d8:c2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=10f94bfd9c79f0fbf6b4f434581ee30d9812e19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:45:5c:31:b8:be:fa:33:af:7d:81:b2:06:
                    8d:c0:9e:ea:d8:f7:a6:11:20:b1:a8:80:73:ee:aa:
                    8b:59:1c:3b:5a:9f:a0:1e:aa:dc:ea:81:57:43:c7:
                    a8:75:82:ac:2f:6f:d9:0a:e7:68:ca:18:8f:42:48:
                    2b:bd:15:6d:79:f5:66:ee:06:29:2c:5f:6f:ef:21:
                    9f:63:f7:3c:1b:c7:97:f3:a1:4a:23:04:d9:6e:d0:
                    7e:7f:95:ae:cf:ce:34:9e:30:3b:0d:8d:33:a6:eb:
                    f8:9f:73:ad:f8:1d:f6:5d:a4:6f:58:31:f2:16:20:
                    91:cd:96:b4:29:32:c4:ed:8d:2f:8d:d5:12:3e:43:
                    53:df:df:1e:68:0e:ca:4c:8d:04:49:62:bb:13:95:
                    a7:5d:59:48:8d:59:a3:ba:43:7c:00:be:51:62:4c:
                    7b:89:5f:06:05:04:86:b5:4e:2f:b6:70:29:d3:f1:
                    3b:95:af:d5:11:35:90:9a:26:7a:84:34:76:7c:a2:
                    11:05:5b:f7:c6:3d:c9:18:11:f8:e6:cb:cb:72:04:
                    71:ea:ec:65:90:4e:4c:21:13:22:9c:42:53:dc:3e:
                    23:c3:b0:e0:da:86:98:64:e7:64:77:97:65:01:64:
                    28:4a:e4:7f:bd:98:3f:ec:9d:eb:be:fd:82:62:f0:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:4B:FD:9C:79:F0:FB:F6:B4:F4:34:58:1E:E3:0D:98:12:E1:9D
            X509v3 Authority Key Identifier:
                keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:ef:82:34:d3:9f:07:e4:77:d3:9b:66:4a:4d:89:0c:13:
         91:fb:71:cb:d1:42:b8:b3:6a:42:21:4e:da:4e:c2:fb:2d:96:
         37:06:a8:fa:61:09:d3:d2:05:22:a6:17:65:d6:70:35:01:49:
         be:ba:0f:bc:82:c6:fb:4d:6e:7f:23:00:a1:2a:b9:c1:99:5b:
         aa:7c:ff:b1:05:26:63:7b:89:5c:c5:15:d7:b4:c3:8c:a5:48:
         a7:28:31:80:bf:c1:e7:99:16:67:c6:0e:97:3f:31:f6:56:8b:
         97:ff:a4:51:a2:c6:35:ba:d2:5c:66:b2:0b:35:52:26:f4:6d:
         f7:4c:54:f7:48:d9:4c:5c:1f:ad:41:90:6e:bc:e9:46:17:64:
         67:7b:52:e1:9b:62:7b:cb:90:ae:96:f9:d9:0c:a4:e6:60:5e:
         37:df:41:3d:8a:bc:a8:aa:77:e9:43:b2:31:89:2a:c7:9c:e7:
         e8:cb:20:dc:3b:8c:ff:2e:ab:d1:23:17:29:01:cd:57:8f:3f:
         c0:aa:69:15:0f:df:f1:09:71:fa:96:8b:f9:54:95:b4:9e:5e:
         e7:23:4d:22:33:4f:f4:72:45:42:b9:27:cd:23:9f:05:3c:23:
         54:97:f9:86:a4:03:d2:18:59:75:31:ba:2e:2d:19:61:2c:8b:
         f9:24:07:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUDlH89rQoSGl++L2MJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjdkNTZjZDM3ZTMxZTBhNTI1ZjViYjFhNWJhZjVmNDk5
ZTQwNmQwHhcNMjUwNDEzMTMwMTA1WhcNMjUwNDE0MTMwMTA1WjAzMTEwLwYDVQQD
EygxMGY5NGJmZDljNzlmMGZiZjZiNGY0MzQ1ODFlZTMwZDk4MTJlMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KlFXDG4vvozr32BsgaNwJ7q2Pem
ESCxqIBz7qqLWRw7Wp+gHqrc6oFXQ8eodYKsL2/ZCudoyhiPQkgrvRVtefVm7gYp
LF9v7yGfY/c8G8eX86FKIwTZbtB+f5Wuz840njA7DY0zpuv4n3Ot+B32XaRvWDHy
FiCRzZa0KTLE7Y0vjdUSPkNT398eaA7KTI0ESWK7E5WnXVlIjVmjukN8AL5RYkx7
iV8GBQSGtU4vtnAp0/E7la/VETWQmiZ6hDR2fKIRBVv3xj3JGBH45svLcgRx6uxl
kE5MIRMinEJT3D4jw7Dg2oaYZOdkd5dlAWQoSuR/vZg/7J3rvv2CYvBAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD5S/2cefD79rT0NFge4w2YEuGdMB8GA1UdIwQY
MBaAFAD31WzTfjHgpSX1uxpbr19JnkBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84Y2I3ZWEtZDc1ZC00NmY2LWE1YzMt
MTNiMjllYWUxOWIzLzEvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84Y2I3ZWEtZDc1ZC00NmY2LWE1YzMtMTNiMjllYWUxOWIz
LzEvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcPvgjTT
nwfkd9ObZkpNiQwTkftxy9FCuLNqQiFO2k7C+y2WNwao+mEJ09IFIqYXZdZwNQFJ
vroPvILG+01ufyMAoSq5wZlbqnz/sQUmY3uJXMUV17TDjKVIpygxgL/B55kWZ8YO
lz8x9laLl/+kUaLGNbrSXGayCzVSJvRt90xU90jZTFwfrUGQbrzpRhdkZ3tS4Zti
e8uQrpb52Qyk5mBeN99BPYq8qKp36UOyMYkqx5zn6Msg3DuM/y6r0SMXKQHNV48/
wKppFQ/f8Qlx+paL+VSVtJ5e5yNNIjNP9HJFQrknzSOfBTwjVJf5hqQD0hhZdTG6
Li0ZYSyL+SQHMQ==
-----END CERTIFICATE-----