Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File:                     TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier:          015WrbE2EprNrNCiNPz/+Z4Gb6sRtdI+jmQ6TaEgmI8=
Subject key identifier:   C2:0F:F2:58:22:76:28:40:E6:32:39:40:06:83:D9:CB:BA:FC:C2:13
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer:       /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial:       01962F06764D8AEC1A0C21F1FF47DB2CE147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: 50fxYUe8feb9zWofZtfNE1UWtnBzUwtmFc+8ach1qiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:76:4d:8a:ec:1a:0c:21:f1:ff:47:db:2c:e1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=c20ff25822762840e63239400683d9cbbafcc213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:46:2b:51:d7:c7:4f:29:e1:14:6b:ca:97:
                    e3:0a:08:e2:5d:79:e3:1b:18:05:80:a9:87:df:3f:
                    28:5d:f0:ad:d0:ec:c5:cd:45:58:e8:5d:98:32:23:
                    52:2a:74:0c:ad:78:1f:f4:8e:06:89:bd:c2:a1:ba:
                    de:04:64:d2:44:7a:c7:d4:ea:87:9a:04:b8:e8:00:
                    73:75:b6:16:7c:20:b3:08:97:62:ef:59:dd:56:b1:
                    58:bf:95:a1:34:a1:4b:8c:bb:c8:60:40:de:77:e1:
                    62:66:53:57:14:28:0f:7c:35:9c:15:cb:69:bc:5f:
                    51:ee:d4:8e:a3:39:85:c3:b2:f3:d4:5f:b7:6b:96:
                    56:7b:53:99:ca:2a:e7:23:8b:97:7d:2f:23:74:1d:
                    3a:ec:7a:6f:c1:45:ce:14:32:02:ba:d4:5d:1c:11:
                    e4:3a:14:b2:ab:84:f5:ae:6e:88:b8:41:aa:d7:3d:
                    ce:c1:4f:8e:c5:7d:b4:ee:57:47:0d:78:5e:83:ea:
                    c9:84:5a:10:49:47:70:71:89:d3:28:95:48:ee:da:
                    2b:48:dd:4e:34:8f:73:65:bc:b6:58:1b:f2:da:fb:
                    94:7a:e2:9d:34:b6:93:1f:05:f8:44:97:1c:65:db:
                    52:83:43:67:0d:ff:1d:bd:5e:ea:e5:6d:74:2e:be:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0F:F2:58:22:76:28:40:E6:32:39:40:06:83:D9:CB:BA:FC:C2:13
            X509v3 Authority Key Identifier:
                keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:79:fb:16:78:05:e7:6b:34:8d:64:ab:a4:1f:e7:26:ca:b4:
         19:57:62:a6:8f:e8:59:07:38:a8:01:cc:d5:2b:32:eb:5d:c3:
         61:ca:51:dd:35:c8:c8:a9:49:3a:1f:e7:a5:1c:34:db:00:18:
         d4:54:24:68:79:58:d2:06:48:3a:7d:ec:54:60:f4:98:ab:8d:
         3e:88:f3:19:a4:8b:c7:93:33:bb:54:92:22:74:7a:c2:52:f8:
         42:f5:fe:d3:9a:67:5f:40:25:3a:cd:5a:f7:7b:24:1a:fe:20:
         7d:88:9e:b2:f5:2a:8e:8e:5e:92:5e:ec:0c:e3:38:52:2b:7b:
         3d:64:3e:61:de:7e:15:74:18:06:11:aa:7e:9c:75:58:86:b9:
         4a:a0:53:35:30:f6:e7:5d:ac:5b:73:9f:f8:9d:3e:d2:69:0d:
         12:31:42:15:5b:3b:13:e9:e5:2e:66:fb:bc:e6:9c:a1:ce:f0:
         91:49:c7:be:da:0e:44:4e:e8:45:8d:35:83:84:df:05:63:cb:
         4f:e4:ff:ae:7b:da:4e:c7:44:9e:73:ac:d1:88:0a:51:0e:bc:
         e9:32:c8:45:01:b7:3c:2f:f7:5d:b3:53:6c:05:3d:38:a5:7a:
         76:aa:0b:1d:9a:79:22:2e:3f:bf:4d:3f:50:30:66:7a:28:2d:
         5f:6a:52:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnZNiuwaDCHx/0fbLOFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDYxZjgzNzg2OGNiZWFjYTE3YWVmNDg2Nzg0ZjYxZjQ5
MjQzZWQwHhcNMjUwNDEzMTIwMTE0WhcNMjUwNDE0MTIwMTE0WjAzMTEwLwYDVQQD
EyhjMjBmZjI1ODIyNzYyODQwZTYzMjM5NDAwNjgzZDljYmJhZmNjMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfJGK1HXx08p4RRrypfjCgjiXXnj
GxgFgKmH3z8oXfCt0OzFzUVY6F2YMiNSKnQMrXgf9I4Gib3CobreBGTSRHrH1OqH
mgS46ABzdbYWfCCzCJdi71ndVrFYv5WhNKFLjLvIYEDed+FiZlNXFCgPfDWcFctp
vF9R7tSOozmFw7Lz1F+3a5ZWe1OZyirnI4uXfS8jdB067HpvwUXOFDICutRdHBHk
OhSyq4T1rm6IuEGq1z3OwU+OxX207ldHDXheg+rJhFoQSUdwcYnTKJVI7torSN1O
NI9zZby2WBvy2vuUeuKdNLaTHwX4RJccZdtSg0NnDf8dvV7q5W10Lr4w2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIP8lgidihA5jI5QAaD2cu6/MITMB8GA1UdIwQY
MBaAFExGH4N4aMvqyheu9IZ4T2H0kkPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmIt
ZjlkMDk2NTI0YzEzLzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lNGMzMTktNzIyMy00MjQ2LWI2NmItZjlkMDk2NTI0YzEz
LzEvVEVZZmczaG95LXJLRjY3MGhuaFBZZlNTUS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXn7FngF
52s0jWSrpB/nJsq0GVdipo/oWQc4qAHM1Ssy613DYcpR3TXIyKlJOh/npRw02wAY
1FQkaHlY0gZIOn3sVGD0mKuNPojzGaSLx5Mzu1SSInR6wlL4QvX+05pnX0AlOs1a
93skGv4gfYiesvUqjo5ekl7sDOM4Uit7PWQ+Yd5+FXQYBhGqfpx1WIa5SqBTNTD2
512sW3Of+J0+0mkNEjFCFVs7E+nlLmb7vOacoc7wkUnHvtoORE7oRY01g4TfBWPL
T+T/rnvaTsdEnnOs0YgKUQ686TLIRQG3PC/3XbNTbAU9OKV6dqoLHZp5Ii4/v00/
UDBmeigtX2pSjQ==
-----END CERTIFICATE-----