Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File:                     mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier:          JkeFAXkvY6SnFgdboEdeQCvIFBAsTjP6YRTcTtWkr8g=
Subject key identifier:   D3:AA:D9:09:A5:8C:4E:27:65:0E:E4:5E:31:17:0F:A9:71:2E:A8:D1
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer:       /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial:       01962F7491EBF11C8A8915D35F20712C6576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number:          1270
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: H9oblNP4xFUTAqcr42INh90GxQ9WTkkPvCNeYfslOMg=)
                          2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:91:eb:f1:1c:8a:89:15:d3:5f:20:71:2c:65:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=d3aad909a58c4e27650ee45e31170fa9712ea8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:44:6c:dd:d1:34:f5:89:31:49:3e:17:da:
                    bd:65:2e:b2:03:6f:55:6c:e0:df:06:63:56:d5:f1:
                    71:46:2f:9c:cb:eb:63:0a:7e:f1:e3:35:da:09:2a:
                    00:50:5a:0b:12:5b:3f:de:2e:9f:dd:8c:b8:3c:52:
                    b9:68:41:4a:38:f5:f3:e9:1c:7a:11:6c:5d:60:d7:
                    31:74:81:75:36:46:af:e2:1a:f3:a4:cd:9b:86:ab:
                    24:00:54:0d:00:36:e9:a2:36:26:ca:f9:2a:e4:3c:
                    cc:19:be:42:34:5a:e8:85:f6:b4:99:0d:50:f2:e2:
                    bd:20:4d:95:ce:e2:fe:29:86:25:35:e7:b8:91:78:
                    33:21:e6:8e:a0:50:19:1f:74:60:23:b4:17:24:bf:
                    20:c1:08:ce:b5:54:ef:8e:22:37:f8:2e:d5:79:8e:
                    dc:f7:4c:a7:1f:7c:62:5f:09:9a:1d:3c:82:cf:03:
                    07:b4:86:a9:2e:72:f0:aa:2d:01:43:77:60:ac:37:
                    d3:20:18:f2:f3:b2:24:e5:95:2c:03:c0:1f:10:1f:
                    06:f5:a6:40:5b:ed:5b:ee:e7:23:98:5b:d0:f5:da:
                    92:64:b6:2d:c4:6d:1e:be:83:90:52:b3:1c:12:c8:
                    4a:2f:ac:b2:d2:da:a6:00:78:44:95:05:06:04:f1:
                    b7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AA:D9:09:A5:8C:4E:27:65:0E:E4:5E:31:17:0F:A9:71:2E:A8:D1
            X509v3 Authority Key Identifier:
                keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:45:6d:5d:3d:51:d4:51:ff:74:2b:4d:90:fb:13:a3:f3:
         12:34:63:f1:90:8f:8b:c6:4f:2d:2f:ad:fb:8f:b7:7c:47:f6:
         e2:67:ab:35:28:f8:d9:90:4b:c9:8c:33:6b:ef:37:68:4f:45:
         f3:25:4a:b5:6d:f2:38:11:3e:04:2e:ca:e5:2b:fc:55:34:c1:
         03:a0:4d:96:bd:05:e9:69:9f:69:c5:72:fd:32:ca:34:65:ff:
         c3:b0:09:54:1d:db:3c:12:be:04:3f:cb:b0:85:0b:41:ac:81:
         ad:37:de:be:79:f1:f8:75:ae:f9:af:10:b5:a0:62:fa:98:dd:
         6c:cb:54:9b:3f:a2:34:1f:df:3d:00:7e:e3:ee:d8:79:32:47:
         3e:a3:ac:09:0b:b5:16:21:1b:82:3f:00:22:c4:3a:67:8e:08:
         25:df:7e:2c:92:ad:92:9a:f6:77:dd:5b:65:42:1b:b0:23:ab:
         2c:d2:de:8f:b0:84:4c:71:5f:f0:eb:b7:45:95:01:94:24:7f:
         5b:7b:a9:8d:a5:ca:2c:c3:12:bf:d2:94:c1:26:f0:0d:be:38:
         c1:40:98:59:c1:76:50:7e:fa:d1:a6:5d:90:38:27:3c:73:88:
         5e:f7:c5:f6:ae:3b:2b:fc:38:31:c1:a7:ec:7c:20:c7:66:62:
         55:b8:4a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJHr8RyKiRXTXyBxLGV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjUzYjg2ZWIxZjE5ZDBhZTdjMDBiMTMyZTk3YzAzYTk0
YmZmNjEwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
EyhkM2FhZDkwOWE1OGM0ZTI3NjUwZWU0NWUzMTE3MGZhOTcxMmVhOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3edEbN3RNPWJMUk+F9q9ZS6yA29V
bODfBmNW1fFxRi+cy+tjCn7x4zXaCSoAUFoLEls/3i6f3Yy4PFK5aEFKOPXz6Rx6
EWxdYNcxdIF1Nkav4hrzpM2bhqskAFQNADbpojYmyvkq5DzMGb5CNFrohfa0mQ1Q
8uK9IE2VzuL+KYYlNee4kXgzIeaOoFAZH3RgI7QXJL8gwQjOtVTvjiI3+C7VeY7c
90ynH3xiXwmaHTyCzwMHtIapLnLwqi0BQ3dgrDfTIBjy87Ik5ZUsA8AfEB8G9aZA
W+1b7ucjmFvQ9dqSZLYtxG0evoOQUrMcEshKL6yy0tqmAHhElQUGBPG34QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOq2QmljE4nZQ7kXjEXD6lxLqjRMB8GA1UdIwQY
MBaAFJi1O4brHxnQrnwAsTLpfAOpS/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUt
Mjc1YzVmNzMxYjQ0LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUtMjc1YzVmNzMxYjQ0
LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0ZFbV09
UdRR/3QrTZD7E6PzEjRj8ZCPi8ZPLS+t+4+3fEf24merNSj42ZBLyYwza+83aE9F
8yVKtW3yOBE+BC7K5Sv8VTTBA6BNlr0F6WmfacVy/TLKNGX/w7AJVB3bPBK+BD/L
sIULQayBrTfevnnx+HWu+a8QtaBi+pjdbMtUmz+iNB/fPQB+4+7YeTJHPqOsCQu1
FiEbgj8AIsQ6Z44IJd9+LJKtkpr2d91bZUIbsCOrLNLej7CETHFf8Ou3RZUBlCR/
W3upjaXKLMMSv9KUwSbwDb44wUCYWcF2UH760aZdkDgnPHOIXvfF9q47K/w4McGn
7Hwgx2ZiVbhKag==
-----END CERTIFICATE-----