Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File:                     cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier:          hV6qOfTPye/6PCJvju+wi608RVUT/ZZ9dPcgZEoJw3A=
Subject key identifier:   D2:1A:B8:4D:C9:8A:01:A6:E1:1B:27:AC:1D:19:15:DD:76:4B:96:DE
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer:       /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial:       01962F3DD014E3353966D0426524345C4D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: 1rsuVKWSF9kDA7aIGFtkAKnkKSm4ffEbf8G1MWL7lO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d0:14:e3:35:39:66:d0:42:65:24:34:5c:4d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=d21ab84dc98a01a6e11b27ac1d1915dd764b96de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:3d:ed:b3:76:a5:1d:32:89:69:7e:1a:a9:
                    ab:97:2d:a4:41:5f:c6:fa:1a:a6:fe:01:e4:5d:f1:
                    77:cd:75:b9:7b:91:e0:00:76:ad:5a:76:dc:0c:87:
                    57:c6:d5:00:5c:0a:59:43:92:2c:0d:d7:85:38:95:
                    c7:1b:fe:83:e9:25:4b:9f:50:38:e1:28:63:18:3a:
                    08:54:b0:01:37:6f:5a:63:76:46:1d:d4:f3:69:8d:
                    61:46:78:cf:a5:cb:5c:2d:b3:d7:b4:9c:7a:4d:e6:
                    ce:0a:a9:7b:a4:43:d6:02:06:a4:9a:5e:80:d5:30:
                    57:68:28:29:f9:4d:0a:e8:ee:fe:61:fa:58:8e:16:
                    79:e6:d3:ee:75:ea:16:75:0b:be:d5:d6:72:77:93:
                    f5:ab:7d:b4:7e:cf:b5:f7:eb:2e:13:9c:ee:92:27:
                    12:6d:64:5a:ec:22:5f:96:3d:ab:42:75:b5:6c:e9:
                    a2:9a:61:0c:f3:d4:45:61:24:50:5f:1e:4b:06:3f:
                    65:1f:74:59:7a:0c:25:25:e7:92:ee:b2:20:d4:13:
                    8f:5a:54:7a:3c:ed:34:14:0e:53:91:cb:fb:37:b8:
                    f4:ff:fe:54:4f:05:28:9f:5d:fa:c6:f0:18:10:ac:
                    f1:dc:fa:9e:05:66:e6:55:5f:b4:6b:e1:3e:75:ef:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:B8:4D:C9:8A:01:A6:E1:1B:27:AC:1D:19:15:DD:76:4B:96:DE
            X509v3 Authority Key Identifier:
                keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:db:f2:b6:23:72:66:79:31:40:7d:d2:5e:b7:a7:89:79:cc:
         de:01:e6:78:d3:6b:8c:98:4f:2c:4a:d6:af:94:b9:3e:cd:63:
         71:db:8b:ea:82:dd:27:23:ae:e4:25:c5:87:d0:be:10:01:de:
         20:8f:87:0b:dc:f9:77:a0:61:fe:bd:c9:79:37:20:3b:e8:09:
         63:8f:e2:e4:14:77:ce:a7:fd:c4:ca:fd:aa:a5:17:c0:fc:23:
         50:96:c1:28:c0:23:48:7c:c0:9a:70:64:66:21:e9:f9:e5:bc:
         08:b4:ef:f1:eb:ac:d4:47:99:d4:86:66:6d:77:75:11:30:cf:
         d3:23:e6:bd:92:84:a1:4d:3d:89:d2:1f:5e:0a:44:6f:2a:ba:
         1b:70:27:5d:b5:f3:88:8d:c8:b3:e5:9d:8e:12:76:21:0e:9f:
         8d:f7:92:ac:6c:4e:fb:dc:a1:80:82:7e:87:c8:ad:27:71:79:
         af:71:4a:55:a8:1c:70:aa:bf:0f:9a:ad:87:2a:3b:f9:1d:41:
         46:d1:1a:da:ae:f4:b2:1e:20:42:e2:43:2d:b7:a8:9a:eb:8e:
         43:ed:25:ad:df:83:09:b0:52:1f:91:17:7c:41:21:60:06:1e:
         aa:16:5a:0a:e6:97:38:3e:18:aa:b2:4e:cb:11:8d:92:fc:76:
         64:24:00:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdAU4zU5ZtBCZSQ0XE0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzNjZGFjYzFlMjhmMDIxM2RmYjI4ZjNkZmQ4YjljYmRk
M2M2MmUwHhcNMjUwNDEzMTMwMTQxWhcNMjUwNDE0MTMwMTQxWjAzMTEwLwYDVQQD
EyhkMjFhYjg0ZGM5OGEwMWE2ZTExYjI3YWMxZDE5MTVkZDc2NGI5NmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0og97bN2pR0yiWl+Gqmrly2kQV/G
+hqm/gHkXfF3zXW5e5HgAHatWnbcDIdXxtUAXApZQ5IsDdeFOJXHG/6D6SVLn1A4
4ShjGDoIVLABN29aY3ZGHdTzaY1hRnjPpctcLbPXtJx6TebOCql7pEPWAgakml6A
1TBXaCgp+U0K6O7+YfpYjhZ55tPudeoWdQu+1dZyd5P1q320fs+19+suE5zukicS
bWRa7CJflj2rQnW1bOmimmEM89RFYSRQXx5LBj9lH3RZegwlJeeS7rIg1BOPWlR6
PO00FA5Tkcv7N7j0//5UTwUon136xvAYEKzx3PqeBWbmVV+0a+E+de95EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIauE3JigGm4RsnrB0ZFd12S5beMB8GA1UdIwQY
MBaAFHJzzazB4o8CE9+yjz39i5y908YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjIt
YzBhMjViMTA5MDJhLzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjItYzBhMjViMTA5MDJh
LzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktvytiNy
ZnkxQH3SXreniXnM3gHmeNNrjJhPLErWr5S5Ps1jcduL6oLdJyOu5CXFh9C+EAHe
II+HC9z5d6Bh/r3JeTcgO+gJY4/i5BR3zqf9xMr9qqUXwPwjUJbBKMAjSHzAmnBk
ZiHp+eW8CLTv8eus1EeZ1IZmbXd1ETDP0yPmvZKEoU09idIfXgpEbyq6G3AnXbXz
iI3Is+WdjhJ2IQ6fjfeSrGxO+9yhgIJ+h8itJ3F5r3FKVagccKq/D5qthyo7+R1B
RtEa2q70sh4gQuJDLbeomuuOQ+0lrd+DCbBSH5EXfEEhYAYeqhZaCuaXOD4YqrJO
yxGNkvx2ZCQA8g==
-----END CERTIFICATE-----