Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
File:                     8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json)
Hash identifier:          M+BSnaxtDlIhWscjp6CjOCduRYmYEJgk+rK6dGqQUfo=
Subject key identifier:   40:7A:6F:F1:FE:35:C1:D9:8D:B6:41:98:FC:DB:E6:3D:68:65:7B:CF
Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
Certificate issuer:       /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Certificate serial:       01962E98F756DB2B6F70439A2168AB0993D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
Manifest number:          090E
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: 385+PbTBNOYB+FEBGktSM35oXtRIXHg4093as87F4sU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f7:56:db:2b:6f:70:43:9a:21:68:ab:09:93:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=407a6ff1fe35c1d98db64198fcdbe63d68657bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:d8:0f:84:8c:34:17:30:c4:1d:30:7c:96:
                    2e:4d:63:08:b5:4d:f9:c8:8c:24:6e:55:b0:66:65:
                    af:51:d3:f5:fc:35:3b:d9:d6:6e:a7:87:05:b6:5b:
                    12:06:a9:d7:b8:5c:48:3b:b2:9f:6b:27:d0:0b:67:
                    05:4b:1f:35:77:ac:35:94:91:49:5c:43:54:34:a6:
                    1d:7c:7a:a1:9c:2d:b3:9e:64:5f:00:99:38:4a:b3:
                    26:07:dd:43:ff:21:e6:e3:0a:46:e2:66:40:12:23:
                    8c:02:cf:68:66:b8:88:92:dc:22:eb:73:c4:e2:e1:
                    f9:9c:22:cb:eb:75:3b:34:74:ae:8f:ac:92:e8:8a:
                    6d:3d:d9:bb:90:84:0b:65:b5:52:8f:61:b8:ac:06:
                    88:90:02:50:e7:56:06:0b:d1:29:da:46:ce:6c:6a:
                    d0:e2:cc:83:27:9c:17:84:06:84:c1:6c:db:73:d7:
                    df:56:7e:0a:0a:53:47:1c:22:d4:46:bf:01:ee:0b:
                    4b:c2:15:80:13:e3:f9:5e:ca:c4:c4:ba:34:4d:52:
                    e1:96:55:d8:5e:53:29:c6:cb:0a:bd:e2:fe:b0:a9:
                    9a:c6:78:c8:70:53:99:4e:bb:1c:e3:5a:c3:b3:52:
                    6d:ed:f1:5a:52:ce:46:69:44:e2:62:f7:57:fe:b0:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7A:6F:F1:FE:35:C1:D9:8D:B6:41:98:FC:DB:E6:3D:68:65:7B:CF
            X509v3 Authority Key Identifier:
                keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7f:d2:5c:e8:95:bb:82:86:93:03:ff:e3:a9:bb:7a:e4:b0:
         95:93:d2:b9:95:66:d4:85:a9:ee:10:22:8e:70:08:b3:d6:c0:
         3d:0a:47:c1:d3:27:48:32:fa:e4:f5:4d:c9:e9:02:f9:12:14:
         ab:26:9a:b1:f2:e1:fb:d3:4a:46:ed:71:f4:36:cc:e6:c0:21:
         fa:7c:56:f6:bb:94:f7:d2:87:25:91:95:a3:87:66:e8:41:4e:
         53:8d:1e:15:99:23:d1:70:10:0c:15:24:56:41:f7:1b:ca:5e:
         c4:ff:6f:9d:f8:c2:4d:33:64:9e:be:c0:d9:e1:af:33:ac:bf:
         53:77:10:67:42:e3:13:62:30:0a:b2:67:c9:e7:13:8e:21:71:
         a7:61:c2:1b:d6:46:47:d4:cd:01:e2:1c:83:dc:60:45:68:f6:
         04:ac:80:e6:15:be:38:59:7a:6c:08:d6:6d:24:cc:06:47:01:
         8c:80:00:8b:c5:18:8a:98:4f:cd:77:62:07:f2:ee:6c:a4:3e:
         b5:53:4a:3c:7c:29:b9:67:d7:72:c5:34:28:ad:4d:77:3a:98:
         bf:2e:90:da:4b:06:cd:63:ea:43:92:b0:ea:ad:38:29:30:17:
         cf:bd:bc:33:8b:66:22:d6:ff:bd:71:2a:ce:88:ea:0f:b8:b9:
         23:ca:3a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPdW2ytvcEOaIWirCZPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzgxZDhlNDI2N2QyZDQ1ZWI2NTI1MGEyYTQ4MjUwYjVm
YjUyNWIwHhcNMjUwNDEzMTAwMTM4WhcNMjUwNDE0MTAwMTM4WjAzMTEwLwYDVQQD
Eyg0MDdhNmZmMWZlMzVjMWQ5OGRiNjQxOThmY2RiZTYzZDY4NjU3YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZjYD4SMNBcwxB0wfJYuTWMItU35
yIwkblWwZmWvUdP1/DU72dZup4cFtlsSBqnXuFxIO7KfayfQC2cFSx81d6w1lJFJ
XENUNKYdfHqhnC2znmRfAJk4SrMmB91D/yHm4wpG4mZAEiOMAs9oZriIktwi63PE
4uH5nCLL63U7NHSuj6yS6IptPdm7kIQLZbVSj2G4rAaIkAJQ51YGC9Ep2kbObGrQ
4syDJ5wXhAaEwWzbc9ffVn4KClNHHCLURr8B7gtLwhWAE+P5XsrExLo0TVLhllXY
XlMpxssKveL+sKmaxnjIcFOZTrsc41rDs1Jt7fFaUs5GaUTiYvdX/rBYTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB6b/H+NcHZjbZBmPzb5j1oZXvPMB8GA1UdIwQY
MBaAFPHIHY5CZ9LUXrZSUKKkglC1+1JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lYmFiNDctNjA5MS00YjE0LTgwMDgt
MzYyYmI1NDQ2MDg1LzEvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lYmFiNDctNjA5MS00YjE0LTgwMDgtMzYyYmI1NDQ2MDg1
LzEvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbn/SXOiV
u4KGkwP/46m7euSwlZPSuZVm1IWp7hAijnAIs9bAPQpHwdMnSDL65PVNyekC+RIU
qyaasfLh+9NKRu1x9DbM5sAh+nxW9ruU99KHJZGVo4dm6EFOU40eFZkj0XAQDBUk
VkH3G8pexP9vnfjCTTNknr7A2eGvM6y/U3cQZ0LjE2IwCrJnyecTjiFxp2HCG9ZG
R9TNAeIcg9xgRWj2BKyA5hW+OFl6bAjWbSTMBkcBjIAAi8UYiphPzXdiB/LubKQ+
tVNKPHwpuWfXcsU0KK1NdzqYvy6Q2ksGzWPqQ5Kw6q04KTAXz728M4tmItb/vXEq
zojqD7i5I8o68Q==
-----END CERTIFICATE-----