Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File:                     RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier:          tFZDDMG2/0Yblwxlvu3h2jsBZJYXVFd3vGxrswqvWuQ=
Subject key identifier:   F1:74:22:DC:6C:8B:83:D5:65:85:46:41:10:88:61:B8:CF:43:1B:8B
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer:       /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial:       01962E2AE6F06627DD6603F1B66BEA90A819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number:          0259
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: moTeMW4xUASo83tpKIL3CMo8LUQ0uZ00wDQjA5H4v0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e6:f0:66:27:dd:66:03:f1:b6:6b:ea:90:a8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=f17422dc6c8b83d565854641108861b8cf431b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:32:3e:a5:7f:b2:d4:9f:a6:20:ec:ac:b4:
                    a7:07:c8:1d:f6:98:0b:7d:b5:ff:1d:d3:30:df:fb:
                    20:62:e9:79:8a:a0:15:05:ef:57:ab:93:b3:5e:8d:
                    8a:3f:a1:64:68:43:30:f0:45:74:ac:e6:e3:9c:a4:
                    0b:6c:ba:24:a7:a1:b5:01:a1:a7:a8:5e:05:d8:55:
                    08:51:07:66:2b:44:6c:23:74:88:bc:62:5f:72:52:
                    54:41:be:25:27:66:ae:d3:96:17:bd:a3:a8:79:dd:
                    1e:bf:51:56:19:37:b6:08:8a:33:72:33:44:cf:55:
                    5f:89:82:d6:52:a6:a0:ed:fe:d3:a9:5f:a0:08:71:
                    5d:f8:e8:0f:2b:df:20:80:3e:fc:92:03:fc:e0:e5:
                    0d:5a:7a:93:54:40:4d:f6:d3:7b:90:c6:11:e0:5e:
                    1f:70:22:ae:dd:28:e9:4b:bd:dd:a4:31:bc:0a:65:
                    af:99:b8:d8:51:80:4f:59:1e:88:ba:36:71:73:2e:
                    4c:16:dd:cf:1c:8c:46:c6:2c:9a:a9:fa:86:ba:25:
                    2a:9f:cb:79:ca:71:4f:51:4d:89:bd:ec:9b:6e:15:
                    de:c9:ba:af:8c:6d:3e:aa:32:24:35:dd:64:40:12:
                    71:68:74:87:60:d9:45:3f:77:74:7f:39:0e:27:ad:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:22:DC:6C:8B:83:D5:65:85:46:41:10:88:61:B8:CF:43:1B:8B
            X509v3 Authority Key Identifier:
                keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:28:f9:9c:28:e0:ad:d0:57:89:2e:d0:fa:dc:84:25:0a:67:
         40:6c:22:c5:5e:6e:95:fd:a8:7f:dd:bb:2a:78:1c:ce:23:74:
         b2:d1:d3:53:8a:09:38:1c:1e:94:1e:10:87:a9:de:78:9c:b6:
         8d:92:9a:78:98:40:e3:c8:ef:e1:74:99:5f:3c:19:8b:18:85:
         10:24:c8:4a:f0:3a:5d:b7:b0:9f:fd:b8:68:03:33:19:3f:00:
         be:6b:92:cf:f5:4d:7f:1c:23:11:d2:c9:b8:75:45:9f:e0:cd:
         1d:26:14:a9:80:a7:93:ca:20:e7:bd:d5:4b:63:df:9d:82:8b:
         19:23:ac:11:c4:f1:da:05:13:5d:20:cf:0e:bc:38:93:89:c6:
         73:42:ee:93:ac:47:b4:12:3c:ba:10:46:55:d7:94:88:8b:d8:
         8b:27:81:42:74:46:5c:e4:e4:57:25:d9:6d:68:d0:ed:df:1d:
         a8:37:2e:95:65:3a:0a:54:c1:4c:81:4c:f6:40:34:c0:c4:13:
         c1:4d:ba:68:7d:2b:0d:15:54:5e:1b:e1:1f:b1:9a:04:53:3f:
         aa:05:ac:8f:dd:9e:98:8c:44:ff:24:b9:38:11:6b:3e:58:3b:
         cb:77:57:97:6a:72:fe:11:18:fd:37:ab:6f:cd:b1:0e:91:7b:
         2b:52:a9:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKubwZifdZgPxtmvqkKgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTBkMjhhOTI3NGY5ZGYxMDY1YjdmNjJmOGI4OTk3NzM5
YzA0N2QwHhcNMjUwNDEzMDgwMTI1WhcNMjUwNDE0MDgwMTI1WjAzMTEwLwYDVQQD
EyhmMTc0MjJkYzZjOGI4M2Q1NjU4NTQ2NDExMDg4NjFiOGNmNDMxYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVEyPqV/stSfpiDsrLSnB8gd9pgL
fbX/HdMw3/sgYul5iqAVBe9Xq5OzXo2KP6FkaEMw8EV0rObjnKQLbLokp6G1AaGn
qF4F2FUIUQdmK0RsI3SIvGJfclJUQb4lJ2au05YXvaOoed0ev1FWGTe2CIozcjNE
z1VfiYLWUqag7f7TqV+gCHFd+OgPK98ggD78kgP84OUNWnqTVEBN9tN7kMYR4F4f
cCKu3SjpS73dpDG8CmWvmbjYUYBPWR6IujZxcy5MFt3PHIxGxiyaqfqGuiUqn8t5
ynFPUU2JveybbhXeybqvjG0+qjIkNd1kQBJxaHSHYNlFP3d0fzkOJ61xDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF0Itxsi4PVZYVGQRCIYbjPQxuLMB8GA1UdIwQY
MBaAFEQQ0oqSdPnfEGW39i+LiZdznAR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUt
OTA3ODM4YjU3MjVmLzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUtOTA3ODM4YjU3MjVm
LzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOij5nCjg
rdBXiS7Q+tyEJQpnQGwixV5ulf2of927KngcziN0stHTU4oJOBwelB4Qh6neeJy2
jZKaeJhA48jv4XSZXzwZixiFECTISvA6Xbewn/24aAMzGT8AvmuSz/VNfxwjEdLJ
uHVFn+DNHSYUqYCnk8og573VS2PfnYKLGSOsEcTx2gUTXSDPDrw4k4nGc0Luk6xH
tBI8uhBGVdeUiIvYiyeBQnRGXOTkVyXZbWjQ7d8dqDculWU6ClTBTIFM9kA0wMQT
wU26aH0rDRVUXhvhH7GaBFM/qgWsj92emIxE/yS5OBFrPlg7y3dXl2py/hEY/Ter
b82xDpF7K1Kp8Q==
-----END CERTIFICATE-----