Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
File:                     ICNzDgbEv7_6ypBeUxJldCwXirQ.mft (raw, json)
Hash identifier:          hHI+lHbvLaAzvBFxd8XnDQkWV3pcsn8cwQijRD0L9pY=
Subject key identifier:   A3:06:6A:63:C7:8A:9D:0F:DF:0E:9D:C6:D7:82:AB:54:0A:FB:4F:63
Authority key identifier: 20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
Certificate issuer:       /CN=2023730e06c4bfbffaca905e531265742c178ab4
Certificate serial:       01962E98E5E4248B40D182FE8CA9ED8A6536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
Manifest number:          0EBE
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: ICNzDgbEv7_6ypBeUxJldCwXirQ.crl (hash: JmIv7s2RGmaDCQGoi7UKjKRccGFz2kg3dZ3zPtFVq4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e5:e4:24:8b:40:d1:82:fe:8c:a9:ed:8a:65:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2023730e06c4bfbffaca905e531265742c178ab4
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=a3066a63c78a9d0fdf0e9dc6d782ab540afb4f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:52:eb:e9:58:58:1f:08:e8:f3:78:ba:53:
                    4f:c8:8e:7f:3f:fb:fc:a8:03:e1:3f:c4:4c:a5:22:
                    a2:07:74:85:a1:0d:c9:e9:b9:b3:ba:fa:32:51:a7:
                    5a:38:6e:5b:b5:c8:e0:9e:5b:7f:05:a2:7f:79:3f:
                    bd:a8:8b:59:19:56:50:a4:e6:83:dd:10:6c:a6:3c:
                    68:04:66:e0:6c:f0:77:b9:ec:24:6b:cf:b1:42:d5:
                    f3:e3:17:0f:a9:4e:81:14:a9:26:fa:24:db:7c:49:
                    38:6d:b1:5d:8e:eb:f6:54:15:94:5e:9d:c4:23:22:
                    f3:86:d5:45:8e:a3:8c:e2:f7:cc:5e:82:cc:b4:53:
                    d3:48:d1:53:7b:05:d4:1a:c4:bd:8e:80:47:23:f2:
                    aa:9b:4b:47:1f:04:c0:70:97:e2:5c:14:61:7a:49:
                    74:92:92:e8:c4:a4:9a:09:2e:42:5c:9b:c0:ad:9f:
                    3c:ee:8a:eb:c5:7b:40:19:18:e0:54:d2:44:ea:0b:
                    bd:48:55:07:c4:e8:21:22:c5:d4:af:ed:0c:ea:20:
                    9f:ad:e4:a6:e1:18:75:56:94:06:35:52:87:21:89:
                    b6:f5:b0:64:b7:ac:97:f6:a3:e2:2a:9c:9f:ac:2c:
                    4a:aa:68:e4:77:65:4e:1a:70:55:45:39:bb:70:9a:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:6A:63:C7:8A:9D:0F:DF:0E:9D:C6:D7:82:AB:54:0A:FB:4F:63
            X509v3 Authority Key Identifier:
                keyid:20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:5c:f9:81:7e:e8:71:0e:8a:75:c9:da:2d:11:b1:7e:02:
         16:ac:0b:3c:1d:bf:5b:91:9c:11:27:fa:bc:0c:3c:5a:f5:81:
         67:bf:6d:47:fd:9a:92:19:aa:60:9b:19:c1:24:6b:42:46:3a:
         17:d1:9b:d4:3e:cb:2c:41:99:a8:fe:5b:a6:77:61:d5:bd:51:
         d7:7c:1b:8c:18:da:d6:29:25:29:4d:ea:4a:5b:e0:ad:8c:8b:
         49:e6:8c:da:8d:cb:16:e1:46:16:35:b6:e6:0d:b9:91:85:26:
         06:02:0a:22:72:a9:dd:2a:e7:37:58:c7:83:a8:3a:78:64:a5:
         b5:6c:1e:6d:9e:95:f0:12:d1:49:a6:dc:a8:32:ad:f1:07:26:
         75:8d:cf:ad:64:54:0f:f4:cc:b9:0c:8e:d1:42:11:1f:0c:cd:
         d8:b5:60:d3:e7:39:5a:e0:82:41:10:86:87:c9:d7:11:36:8a:
         d6:7c:e6:13:41:0a:e8:06:05:1a:67:56:42:ed:bf:43:ab:3a:
         1d:6b:be:a9:46:1d:da:9a:5a:55:70:02:dc:35:08:1a:bb:7b:
         0f:e7:bf:45:07:24:d9:77:5a:51:d4:ac:41:f6:f8:eb:19:5f:
         21:11:67:3f:27:c7:50:8b:72:ac:bd:45:05:30:c3:7c:77:5b:
         ce:7d:ed:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOXkJItA0YL+jKntimU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMjM3MzBlMDZjNGJmYmZmYWNhOTA1ZTUzMTI2NTc0MmMx
NzhhYjQwHhcNMjUwNDEzMTAwMTM0WhcNMjUwNDE0MTAwMTM0WjAzMTEwLwYDVQQD
EyhhMzA2NmE2M2M3OGE5ZDBmZGYwZTlkYzZkNzgyYWI1NDBhZmI0ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI1S6+lYWB8I6PN4ulNPyI5/P/v8
qAPhP8RMpSKiB3SFoQ3J6bmzuvoyUadaOG5btcjgnlt/BaJ/eT+9qItZGVZQpOaD
3RBspjxoBGbgbPB3uewka8+xQtXz4xcPqU6BFKkm+iTbfEk4bbFdjuv2VBWUXp3E
IyLzhtVFjqOM4vfMXoLMtFPTSNFTewXUGsS9joBHI/Kqm0tHHwTAcJfiXBRhekl0
kpLoxKSaCS5CXJvArZ887orrxXtAGRjgVNJE6gu9SFUHxOghIsXUr+0M6iCfreSm
4Rh1VpQGNVKHIYm29bBkt6yX9qPiKpyfrCxKqmjkd2VOGnBVRTm7cJo7AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMGamPHip0P3w6dxteCq1QK+09jMB8GA1UdIwQY
MBaAFCAjcw4GxL+/+sqQXlMSZXQsF4q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUNOekRnYkV2N182eXBCZVV4SmxkQ3dYaXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80NWQ3YzEtYzRmMC00ODM1LWI0NjYt
YjAzMzViYTNlMGMyLzEvSUNOekRnYkV2N182eXBCZVV4SmxkQ3dYaXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80NWQ3YzEtYzRmMC00ODM1LWI0NjYtYjAzMzViYTNlMGMy
LzEvSUNOekRnYkV2N182eXBCZVV4SmxkQ3dYaXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP9c+YF+
6HEOinXJ2i0RsX4CFqwLPB2/W5GcESf6vAw8WvWBZ79tR/2akhmqYJsZwSRrQkY6
F9Gb1D7LLEGZqP5bpndh1b1R13wbjBja1iklKU3qSlvgrYyLSeaM2o3LFuFGFjW2
5g25kYUmBgIKInKp3SrnN1jHg6g6eGSltWwebZ6V8BLRSabcqDKt8QcmdY3PrWRU
D/TMuQyO0UIRHwzN2LVg0+c5WuCCQRCGh8nXETaK1nzmE0EK6AYFGmdWQu2/Q6s6
HWu+qUYd2ppaVXAC3DUIGrt7D+e/RQck2XdaUdSsQfb46xlfIRFnPyfHUItyrL1F
BTDDfHdbzn3tUg==
-----END CERTIFICATE-----