Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File:                     k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier:          GW90IsJGhEluRbaKcBehHMEhPU7pbxYYYRQD7qm72GU=
Subject key identifier:   04:F0:29:29:D9:DA:C3:1F:45:5B:62:61:FC:92:F0:36:1A:8B:C0:59
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer:       /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial:       01962F0684CEDB0F42F275C8BE0CEBBCA16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number:          0CB4
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: PHWWtTK3oSth97i1F07Zg0HC1IOHma009tmxboV5g1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:84:ce:db:0f:42:f2:75:c8:be:0c:eb:bc:a1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=04f02929d9dac31f455b6261fc92f0361a8bc059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:52:5a:37:93:e5:6f:0d:16:a8:e3:83:05:
                    1c:d6:ca:9c:b9:7b:64:ff:4e:4f:d4:3d:e5:a8:97:
                    1c:85:47:a5:07:d4:0a:5f:b3:61:46:ba:f9:9b:2e:
                    67:4b:fa:5f:03:e0:d3:7f:9f:04:51:03:2d:38:de:
                    17:22:1d:e2:85:18:c0:f0:3e:20:90:3d:f8:ba:33:
                    0f:12:e4:90:1f:56:de:d1:84:6d:61:6d:62:cb:24:
                    45:e5:2c:1e:84:35:da:c8:fb:3d:e2:ed:ad:85:22:
                    26:f2:db:58:bc:6c:db:e5:68:8b:d0:ab:0a:57:89:
                    f9:78:18:a9:d4:f1:ce:4a:4b:25:a3:7e:1c:23:8b:
                    60:fe:2c:cb:a2:05:ca:54:31:1f:6e:f7:c6:96:35:
                    47:19:94:4f:8f:c2:d5:62:79:63:89:24:1c:6c:c8:
                    1c:a8:0f:78:1c:da:23:58:91:2c:72:20:0c:88:8a:
                    06:fd:b2:d2:9e:5a:49:e1:85:0d:d9:fc:67:ce:5b:
                    3c:76:eb:e0:cd:39:db:96:0a:7c:cd:3f:ca:6d:35:
                    66:35:b5:2c:c0:e0:32:2c:22:9b:4b:9d:6f:7a:a5:
                    c8:65:1c:a0:d8:9c:a5:00:09:32:27:f7:15:d3:86:
                    46:df:10:2a:33:8c:fb:2f:8f:1f:70:95:01:5b:f2:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:29:29:D9:DA:C3:1F:45:5B:62:61:FC:92:F0:36:1A:8B:C0:59
            X509v3 Authority Key Identifier:
                keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f1:ee:7f:c6:b6:b5:ef:96:71:2b:bf:e3:8f:45:a9:e6:8a:
         e3:9c:ef:95:2f:cb:21:9a:07:34:79:0f:87:1f:5a:6e:3f:20:
         2e:23:ce:9d:61:ae:85:37:52:6f:88:17:99:0f:6c:b9:76:e2:
         0a:64:b9:19:6f:e1:7c:68:93:ef:17:ec:db:38:a9:80:09:00:
         94:9d:1d:8a:49:f8:87:60:f5:ff:e1:67:df:f4:77:97:49:98:
         cb:04:66:7f:3d:6e:10:f5:34:d3:56:2c:f5:69:0a:b3:56:07:
         09:49:26:fb:10:5c:54:6a:f0:f8:ba:41:7d:f1:97:5a:4d:69:
         44:85:ec:f9:9c:8c:bb:ed:70:c3:5a:7a:67:46:33:33:45:70:
         b5:f5:f5:f5:6b:61:1f:b2:57:56:fd:61:c2:e9:4a:fb:11:96:
         8c:c8:04:86:08:e7:8c:23:ef:e3:76:73:cc:ed:62:cd:e8:2b:
         6d:1d:4d:43:1f:9a:50:01:d7:bf:ab:e1:f4:25:79:db:86:a9:
         47:2a:4c:be:1d:f5:10:13:ff:34:2e:0b:ef:15:8f:3f:88:1e:
         d7:6a:24:cf:21:ea:4d:65:f8:78:88:2d:ab:18:c1:6e:6c:3a:
         89:a9:a8:3a:64:08:5c:00:06:af:87:83:08:9d:80:e6:c5:de:
         02:2e:47:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBoTO2w9C8nXIvgzrvKFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTE4YmE4Y2UxNzIxMjI0NTA4YzFkMjczY2M2MWNjOGZj
ZDhkZTQwHhcNMjUwNDEzMTIwMTE4WhcNMjUwNDE0MTIwMTE4WjAzMTEwLwYDVQQD
EygwNGYwMjkyOWQ5ZGFjMzFmNDU1YjYyNjFmYzkyZjAzNjFhOGJjMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOFSWjeT5W8NFqjjgwUc1sqcuXtk
/05P1D3lqJcchUelB9QKX7NhRrr5my5nS/pfA+DTf58EUQMtON4XIh3ihRjA8D4g
kD34ujMPEuSQH1be0YRtYW1iyyRF5SwehDXayPs94u2thSIm8ttYvGzb5WiL0KsK
V4n5eBip1PHOSkslo34cI4tg/izLogXKVDEfbvfGljVHGZRPj8LVYnljiSQcbMgc
qA94HNojWJEsciAMiIoG/bLSnlpJ4YUN2fxnzls8duvgzTnblgp8zT/KbTVmNbUs
wOAyLCKbS51veqXIZRyg2JylAAkyJ/cV04ZG3xAqM4z7L48fcJUBW/JEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATwKSnZ2sMfRVtiYfyS8DYai8BZMB8GA1UdIwQY
MBaAFJPhi6jOFyEiRQjB0nPMYcyPzY3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1HTHFNNFhJU0pGQ01IU2M4eGh6SV9OamVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83OTcxNWUtNTAwMy00MTU2LTllYWEt
N2ZiM2RlMzk0NTJkLzEvay1HTHFNNFhJU0pGQ01IU2M4eGh6SV9OamVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83OTcxNWUtNTAwMy00MTU2LTllYWEtN2ZiM2RlMzk0NTJk
LzEvay1HTHFNNFhJU0pGQ01IU2M4eGh6SV9OamVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfHuf8a2
te+WcSu/449FqeaK45zvlS/LIZoHNHkPhx9abj8gLiPOnWGuhTdSb4gXmQ9suXbi
CmS5GW/hfGiT7xfs2zipgAkAlJ0dikn4h2D1/+Fn3/R3l0mYywRmfz1uEPU001Ys
9WkKs1YHCUkm+xBcVGrw+LpBffGXWk1pRIXs+ZyMu+1ww1p6Z0YzM0VwtfX19Wth
H7JXVv1hwulK+xGWjMgEhgjnjCPv43ZzzO1izegrbR1NQx+aUAHXv6vh9CV524ap
RypMvh31EBP/NC4L7xWPP4ge12okzyHqTWX4eIgtqxjBbmw6iamoOmQIXAAGr4eD
CJ2A5sXeAi5HAw==
-----END CERTIFICATE-----