Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File:                     DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier:          RgKiaOKF9p9GdWfuvG7eHYxWuh1utBba/QmUJAMPhL8=
Subject key identifier:   39:4D:F3:B6:8A:B5:0B:0D:34:99:E2:68:03:C0:5B:7E:BD:85:92:23
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer:       /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial:       01962F0713D26896633EC9D999BE6695B0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number:          0AF1
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: uzU/kalGAkmQQVMr5OaMw+ngqCtWRxMf6S8OwE8T9K8=)
                          2: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (hash: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:13:d2:68:96:63:3e:c9:d9:99:be:66:95:b0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=394df3b68ab50b0d3499e26803c05b7ebd859223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:91:80:cf:47:bf:b4:cd:ee:0b:71:5d:67:
                    fd:94:28:e2:34:c2:4e:2e:4e:2d:a4:44:37:29:99:
                    37:3f:82:4f:a4:a9:86:45:71:0c:e1:68:7d:fa:54:
                    c7:86:56:64:6c:d7:6d:10:fa:16:73:15:9e:0e:71:
                    2a:29:b8:46:17:20:54:f0:41:28:60:5d:e5:31:b5:
                    b7:f2:1f:be:9b:63:12:e8:2b:63:76:39:b0:9d:79:
                    bf:f6:75:ee:88:51:ba:ed:16:64:28:f0:fd:68:e8:
                    38:28:41:49:8b:30:35:22:ae:ed:7c:72:17:61:0d:
                    45:d5:d3:ff:46:93:5f:17:37:54:91:b0:37:dc:55:
                    7e:dd:71:dd:e9:b8:84:e6:ca:5e:81:94:f8:52:99:
                    3b:27:78:71:80:a9:38:84:d2:cf:b2:22:0f:4f:39:
                    85:fb:20:5e:d6:4e:ac:84:a9:ad:c7:e6:4d:9e:7f:
                    21:b6:a5:09:bd:2c:28:90:87:e3:33:12:65:44:45:
                    bd:4d:2d:3d:68:c9:a0:be:a4:3c:28:f2:9b:fd:10:
                    77:fd:5e:f6:35:fd:13:0a:63:7a:38:5c:96:42:ab:
                    cb:ff:6b:08:62:50:e8:aa:f1:92:54:79:11:4c:1a:
                    b8:0f:ac:aa:4a:48:16:65:50:b4:3f:97:61:dc:b6:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4D:F3:B6:8A:B5:0B:0D:34:99:E2:68:03:C0:5B:7E:BD:85:92:23
            X509v3 Authority Key Identifier:
                keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:73:31:4c:96:32:c9:23:64:6e:34:c1:94:3d:29:30:51:6e:
         3a:a7:26:74:ab:b2:9a:7a:e9:52:16:73:67:89:ae:e2:a3:1c:
         c0:cf:20:86:aa:f5:86:6e:92:a2:d2:e2:0f:f3:32:db:c8:02:
         a5:70:77:b0:5d:68:fb:25:ee:8a:21:30:64:4b:9f:83:78:a5:
         80:80:22:86:2b:e4:39:f6:ae:bf:fb:de:cf:48:d9:be:f6:25:
         5e:6c:73:1a:15:78:9d:60:97:69:00:48:97:14:ce:a0:dd:d5:
         57:2e:f6:31:50:7c:f3:b7:6f:3a:2d:76:16:02:17:0e:06:71:
         47:33:2d:0e:d6:35:7c:ea:4c:fd:1a:04:ef:27:7f:e8:04:ad:
         21:70:f4:f8:7f:a8:05:b3:62:3c:0c:6b:1b:37:e4:0e:fc:73:
         42:39:5f:ca:86:e7:7c:31:60:b6:fd:82:d6:ed:8f:c1:32:4c:
         0e:8e:56:71:aa:35:cf:ea:0a:fe:12:49:9d:3a:33:4e:ab:2b:
         ba:34:c1:3a:18:22:6d:45:12:d8:d0:00:a4:96:6c:49:0d:07:
         5c:7c:01:34:ec:f2:1c:b1:3f:85:75:14:46:b8:e5:f0:f2:21:
         5a:3d:b5:9a:8c:67:5f:d4:9a:b6:a9:79:73:c5:cb:1b:ef:98:
         ce:ee:62:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxPSaJZjPsnZmb5mlbC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjNjMzE2NGQzZDhjMjY0NGNmMjliMzIzNjc2MWE1NzFl
ZTU4YmEwHhcNMjUwNDEzMTIwMTU1WhcNMjUwNDE0MTIwMTU1WjAzMTEwLwYDVQQD
EygzOTRkZjNiNjhhYjUwYjBkMzQ5OWUyNjgwM2MwNWI3ZWJkODU5MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg6RgM9Hv7TN7gtxXWf9lCjiNMJO
Lk4tpEQ3KZk3P4JPpKmGRXEM4Wh9+lTHhlZkbNdtEPoWcxWeDnEqKbhGFyBU8EEo
YF3lMbW38h++m2MS6CtjdjmwnXm/9nXuiFG67RZkKPD9aOg4KEFJizA1Iq7tfHIX
YQ1F1dP/RpNfFzdUkbA33FV+3XHd6biE5spegZT4Upk7J3hxgKk4hNLPsiIPTzmF
+yBe1k6shKmtx+ZNnn8htqUJvSwokIfjMxJlREW9TS09aMmgvqQ8KPKb/RB3/V72
Nf0TCmN6OFyWQqvL/2sIYlDoqvGSVHkRTBq4D6yqSkgWZVC0P5dh3LYRhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlN87aKtQsNNJniaAPAW369hZIjMB8GA1UdIwQY
MBaAFA2zwxZNPYwmRM8psyNnYaVx7li6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWIt
M2Q0NjQzOWFhNDFjLzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWItM2Q0NjQzOWFhNDFj
LzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnMxTJYy
ySNkbjTBlD0pMFFuOqcmdKuymnrpUhZzZ4mu4qMcwM8ghqr1hm6SotLiD/My28gC
pXB3sF1o+yXuiiEwZEufg3ilgIAihivkOfauv/vez0jZvvYlXmxzGhV4nWCXaQBI
lxTOoN3VVy72MVB887dvOi12FgIXDgZxRzMtDtY1fOpM/RoE7yd/6AStIXD0+H+o
BbNiPAxrGzfkDvxzQjlfyobnfDFgtv2C1u2PwTJMDo5Wcao1z+oK/hJJnTozTqsr
ujTBOhgibUUS2NAApJZsSQ0HXHwBNOzyHLE/hXUURrjl8PIhWj21moxnX9Satql5
c8XLG++Yzu5iIg==
-----END CERTIFICATE-----