Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
File:                     himZ5D_2yece78WG-jpj_f6irkw.mft (raw, json)
Hash identifier:          IFwgbhe0J4DxtwKsUfWr51RNSDf/0fdvmNLtSGr7xC8=
Subject key identifier:   82:7F:14:E3:3D:99:CA:45:98:3A:A9:EC:7C:AF:8F:0B:5E:63:4D:37
Authority key identifier: 86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C
Certificate issuer:       /CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
Certificate serial:       01962E61915F3DB5A70E9269B5AF4AEF08B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
Manifest number:          02CE
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: himZ5D_2yece78WG-jpj_f6irkw.crl (hash: sVQKc74kD8r0U7rMJ8iQIz0nidFCZsJuix8+r/cmX4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:91:5f:3d:b5:a7:0e:92:69:b5:af:4a:ef:08:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=827f14e33d99ca45983aa9ec7caf8f0b5e634d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:de:a6:e3:4e:8e:74:86:7c:cf:4f:19:0b:
                    19:c1:fa:22:10:ed:88:d2:a8:9e:c1:01:88:c4:8f:
                    4a:9e:c7:9e:22:57:7b:b9:ea:3b:24:d4:8e:12:1c:
                    47:fe:55:23:bf:d6:4e:b7:5c:18:77:14:42:21:64:
                    1d:61:2d:a0:4a:98:19:55:df:6a:50:54:10:c9:99:
                    df:71:f4:a3:5a:cc:66:3d:37:9b:14:99:ff:61:dd:
                    e8:60:ea:d3:cf:88:3c:eb:bd:e2:84:09:f7:2b:be:
                    a3:c0:4a:31:64:b9:02:cc:d6:11:8a:f8:b0:f6:4f:
                    e1:42:ad:27:db:c4:3f:2c:59:f3:e5:73:fc:d5:10:
                    e2:a5:43:9a:6c:fa:f7:16:57:41:f4:34:10:af:89:
                    f5:92:77:8d:8c:9a:13:eb:78:71:f2:46:25:f4:7f:
                    1c:72:90:ac:90:fa:0a:7b:b4:fb:59:79:dd:b1:f9:
                    68:2c:bc:fa:5b:0a:e5:c2:e3:28:db:0e:03:d2:a5:
                    f2:6a:a8:0e:83:61:84:b9:a6:52:82:7c:43:97:da:
                    7d:a9:4a:36:8c:fb:30:80:d5:69:fd:8e:8c:73:09:
                    a2:7e:a0:9e:07:b4:95:9d:c9:da:ac:66:99:d8:38:
                    44:f6:93:26:c1:16:0b:e1:d7:09:0f:16:ea:24:72:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7F:14:E3:3D:99:CA:45:98:3A:A9:EC:7C:AF:8F:0B:5E:63:4D:37
            X509v3 Authority Key Identifier:
                keyid:86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:42:9b:fe:f8:d2:9f:e0:38:83:07:68:b3:e4:9f:0d:c2:
         13:44:78:c2:c2:3f:ca:82:4d:c5:f1:4e:c1:dc:91:d3:f3:ef:
         7b:eb:c7:5d:64:45:d5:85:f8:49:3a:3d:d3:7f:fe:f5:fb:df:
         ed:09:35:23:a1:22:ce:fc:98:2f:a8:fe:98:34:2c:83:6c:83:
         e0:6b:a4:d6:2a:ad:c3:a3:d0:12:b4:b6:bc:fa:a8:ac:31:f2:
         cb:c5:f6:71:be:a9:39:25:a7:07:12:a1:67:c0:3b:26:80:a6:
         ee:14:e3:aa:40:8d:e5:6b:31:47:75:15:d6:d1:a7:be:6d:c4:
         73:5d:ec:07:7d:07:a9:83:0a:0f:0c:7c:61:59:ca:9d:87:a3:
         ee:92:55:7c:dd:d0:75:ad:49:0e:7e:3d:14:ae:1f:d0:81:6c:
         d5:2e:1d:b1:ee:60:70:bc:a3:a8:da:f4:65:c3:83:bf:fc:c5:
         97:3c:6b:45:54:60:48:ee:b5:59:0a:57:4e:90:a0:45:ed:f8:
         fa:28:91:88:8e:6e:12:f8:6a:5c:c9:2b:a6:74:67:3c:fa:73:
         fa:f4:59:15:25:d3:69:8a:67:d9:83:bf:a8:4f:59:c9:d6:6b:
         23:f1:53:ef:ca:df:1a:66:0a:b0:09:b2:8c:b9:ca:f8:e7:98:
         97:bd:14:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZFfPbWnDpJpta9K7wixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Mjk5OWU0M2ZmNmM5ZTcxZWVmYzU4NmZhM2E2M2ZkZmVh
MmFlNGMwHhcNMjUwNDEzMDkwMTA4WhcNMjUwNDE0MDkwMTA4WjAzMTEwLwYDVQQD
Eyg4MjdmMTRlMzNkOTljYTQ1OTgzYWE5ZWM3Y2FmOGYwYjVlNjM0ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3bepuNOjnSGfM9PGQsZwfoiEO2I
0qiewQGIxI9KnseeIld7ueo7JNSOEhxH/lUjv9ZOt1wYdxRCIWQdYS2gSpgZVd9q
UFQQyZnfcfSjWsxmPTebFJn/Yd3oYOrTz4g8673ihAn3K76jwEoxZLkCzNYRiviw
9k/hQq0n28Q/LFnz5XP81RDipUOabPr3FldB9DQQr4n1kneNjJoT63hx8kYl9H8c
cpCskPoKe7T7WXndsfloLLz6WwrlwuMo2w4D0qXyaqgOg2GEuaZSgnxDl9p9qUo2
jPswgNVp/Y6McwmifqCeB7SVncnarGaZ2DhE9pMmwRYL4dcJDxbqJHJZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ/FOM9mcpFmDqp7HyvjwteY003MB8GA1UdIwQY
MBaAFIYpmeQ/9snnHu/Fhvo6Y/3+oq5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGltWjVEXzJ5ZWNlNzhXRy1qcGpfZjZpcmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lN2M5MmMtMDhlMC00NzU4LWI4MzAt
ZjVkZmFhMGNiZGQwLzEvaGltWjVEXzJ5ZWNlNzhXRy1qcGpfZjZpcmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9lN2M5MmMtMDhlMC00NzU4LWI4MzAtZjVkZmFhMGNiZGQw
LzEvaGltWjVEXzJ5ZWNlNzhXRy1qcGpfZjZpcmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ39Cm/74
0p/gOIMHaLPknw3CE0R4wsI/yoJNxfFOwdyR0/Pve+vHXWRF1YX4STo903/+9fvf
7Qk1I6EizvyYL6j+mDQsg2yD4Guk1iqtw6PQErS2vPqorDHyy8X2cb6pOSWnBxKh
Z8A7JoCm7hTjqkCN5WsxR3UV1tGnvm3Ec13sB30HqYMKDwx8YVnKnYej7pJVfN3Q
da1JDn49FK4f0IFs1S4dse5gcLyjqNr0ZcODv/zFlzxrRVRgSO61WQpXTpCgRe34
+iiRiI5uEvhqXMkrpnRnPPpz+vRZFSXTaYpn2YO/qE9ZydZrI/FT78rfGmYKsAmy
jLnK+OeYl70UfQ==
-----END CERTIFICATE-----