Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          8qWl5ssaFlDg6bbY1DThF+MdCcbxHh1TCvzhtf/eB54=
Subject key identifier:   E9:58:CA:09:A7:01:E3:9E:63:94:C0:93:60:6C:A6:9E:F1:51:5E:4C
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       01962DF40EDF4B10065E87091C26D4A43A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: N4yURXNw1X2R3cHQ04Wxgde9YeeVJC3e0BtbU97KH7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0e:df:4b:10:06:5e:87:09:1c:26:d4:a4:3a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=e958ca09a701e39e6394c093606ca69ef1515e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:2c:30:b6:89:55:0c:e8:c2:9c:4a:ef:75:
                    12:e2:c3:58:c5:78:1e:f7:62:c3:68:23:01:cb:68:
                    c9:b0:d1:ee:e8:06:ba:ab:85:01:6f:a9:7b:79:7b:
                    c6:57:f9:0f:56:9d:6c:9a:c4:f7:1c:53:17:36:34:
                    6e:95:22:82:29:71:6f:3e:3c:a7:88:52:b7:43:00:
                    e3:0b:dc:67:f0:e5:94:e4:3b:d2:7e:bb:d8:2e:91:
                    5f:d6:64:b3:dc:c0:b6:b3:7b:f0:da:d9:e9:8d:c9:
                    05:5d:ed:de:02:0f:9a:c3:2f:0f:d8:c0:34:6f:14:
                    f7:5d:b8:29:56:91:af:78:b3:48:62:05:54:40:d8:
                    01:c1:e5:1b:26:df:22:9c:85:7b:e0:1b:47:6b:3b:
                    1a:55:9a:e7:6c:ad:e1:31:6d:31:05:62:9a:c2:cc:
                    60:67:32:06:5e:03:db:5b:11:9b:16:a5:b6:e9:d0:
                    8c:f7:96:b3:14:71:f5:03:46:a3:58:e1:73:d8:d1:
                    0e:30:72:fb:e4:41:f5:46:d4:64:7a:9b:10:41:6b:
                    bc:c9:a1:b4:79:74:07:51:43:cd:ae:78:a9:61:6b:
                    f9:d3:8c:f6:99:8c:01:a1:8b:3b:58:fd:ef:e7:93:
                    99:2d:f6:ff:0b:8b:74:b0:c0:55:cf:9f:70:c0:73:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:58:CA:09:A7:01:E3:9E:63:94:C0:93:60:6C:A6:9E:F1:51:5E:4C
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:bf:62:61:7e:2f:c9:15:b9:d5:6a:75:ac:cf:f6:ff:3f:38:
         a2:72:e3:bf:da:d0:df:6f:24:04:5e:3e:a7:d8:b7:50:0b:43:
         d0:26:f8:52:d9:3e:a9:2f:b8:9c:af:f6:d2:93:14:dd:2b:ee:
         79:e8:3f:bf:38:53:37:84:39:20:c2:42:a0:52:a6:6c:29:0c:
         6f:ba:0e:cc:6a:55:8a:22:99:6a:a1:9c:8f:e1:55:e1:71:ca:
         cf:c6:72:75:0a:6e:e7:b4:a4:9e:80:6e:3d:cc:d9:fa:e6:d9:
         ca:92:82:de:98:bc:8f:a3:1e:31:19:78:40:2c:61:5d:51:f1:
         fd:62:b1:e1:96:a9:a6:1b:2e:0f:b7:63:b0:d9:bc:a2:21:72:
         1a:4f:f7:48:d6:a5:9d:d1:78:98:27:3a:0f:ad:2e:06:0f:63:
         36:44:ac:62:4e:32:2f:19:d9:57:5e:12:dc:37:0a:fc:49:27:
         19:81:00:81:15:75:5b:59:b5:d8:51:a5:e6:5f:d3:22:fd:88:
         0c:db:78:e3:88:4e:7e:74:93:96:20:7c:3d:66:21:24:53:ee:
         ef:06:c7:ce:7a:56:2c:db:ce:5c:03:e5:9b:83:55:a1:86:31:
         77:b6:1a:0f:7e:a6:05:db:78:f0:63:43:4d:78:92:be:3d:0d:
         df:9c:d9:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9A7fSxAGXocJHCbUpDoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTNlZjgzYjJiNGMxMWUwNzA1NWIzZjdjNTQ5YjUwNjI0
NmM2M2UwHhcNMjUwNDEzMDcwMTMxWhcNMjUwNDE0MDcwMTMxWjAzMTEwLwYDVQQD
EyhlOTU4Y2EwOWE3MDFlMzllNjM5NGMwOTM2MDZjYTY5ZWYxNTE1ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03gsMLaJVQzowpxK73US4sNYxXge
92LDaCMBy2jJsNHu6Aa6q4UBb6l7eXvGV/kPVp1smsT3HFMXNjRulSKCKXFvPjyn
iFK3QwDjC9xn8OWU5DvSfrvYLpFf1mSz3MC2s3vw2tnpjckFXe3eAg+awy8P2MA0
bxT3XbgpVpGveLNIYgVUQNgBweUbJt8inIV74BtHazsaVZrnbK3hMW0xBWKawsxg
ZzIGXgPbWxGbFqW26dCM95azFHH1A0ajWOFz2NEOMHL75EH1RtRkepsQQWu8yaG0
eXQHUUPNrnipYWv504z2mYwBoYs7WP3v55OZLfb/C4t0sMBVz59wwHPfSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlYygmnAeOeY5TAk2Bspp7xUV5MMB8GA1UdIwQY
MBaAFOvj74OytMEeBwVbP3xUm1BiRsY+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1Qdmc3SzB3UjRIQlZzX2ZGU2JVR0pHeGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hMGQxOWItNWM2Zi00ODE0LWFkZjgt
MWUxOTM0ZjBlNTVlLzEvNi1Qdmc3SzB3UjRIQlZzX2ZGU2JVR0pHeGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hMGQxOWItNWM2Zi00ODE0LWFkZjgtMWUxOTM0ZjBlNTVl
LzEvNi1Qdmc3SzB3UjRIQlZzX2ZGU2JVR0pHeGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAur9iYX4v
yRW51Wp1rM/2/z84onLjv9rQ328kBF4+p9i3UAtD0Cb4Utk+qS+4nK/20pMU3Svu
eeg/vzhTN4Q5IMJCoFKmbCkMb7oOzGpViiKZaqGcj+FV4XHKz8ZydQpu57SknoBu
PczZ+ubZypKC3pi8j6MeMRl4QCxhXVHx/WKx4ZapphsuD7djsNm8oiFyGk/3SNal
ndF4mCc6D60uBg9jNkSsYk4yLxnZV14S3DcK/EknGYEAgRV1W1m12FGl5l/TIv2I
DNt444hOfnSTliB8PWYhJFPu7wbHznpWLNvOXAPlm4NVoYYxd7YaD36mBdt48GND
TXiSvj0N35zZ4w==
-----END CERTIFICATE-----