Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File:                     8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier:          Eu3+5lXBYCnzYaegp4YlsCMI9KT2u7caWw9kyZSKpZo=
Subject key identifier:   32:B9:AB:66:FA:3E:F9:FA:C4:F7:18:EC:AC:79:C6:02:45:2A:86:D2
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer:       /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial:       01962FAB9D77A0B667D6D520E5FEFD18BAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number:          135E
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: is/KCjmiKX39g5fxAR6Lt6Cr2H4MCnT6Y+bOc9vU3i0=)
                          2: IhBK0ciO53Ec1EbuRK46uaRKreQ.roa (hash: 4ZKr5RNFkrNbbNrdBlZagiUZ6klyQ2uoBXn/MMtAeKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:77:a0:b6:67:d6:d5:20:e5:fe:fd:18:ba:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=32b9ab66fa3ef9fac4f718ecac79c602452a86d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:80:91:cd:41:de:18:ae:d9:e3:1e:42:a0:
                    8d:c7:b0:89:4d:f7:e9:06:f7:6a:a9:ec:02:2a:d3:
                    d7:c2:55:b4:9c:20:bc:ba:58:d8:5c:18:f9:2a:cf:
                    2b:9d:88:1a:e1:14:b8:0b:39:06:a2:c5:9f:f0:ab:
                    46:2c:81:13:07:77:57:74:17:04:aa:96:1e:cd:d2:
                    ee:5f:ff:3f:f0:21:cc:22:3d:09:16:e0:90:da:2e:
                    71:bc:28:94:6c:c5:ec:75:3b:b7:61:84:e3:e4:f2:
                    28:76:78:ea:3d:4c:eb:76:43:e8:99:83:27:e0:49:
                    9e:fd:58:5c:c4:02:af:31:96:a6:ba:e5:30:8a:5c:
                    2c:b3:52:23:66:f6:26:a8:de:73:c4:80:63:b1:98:
                    b4:8d:84:c4:d0:bf:c7:54:75:7a:c7:d5:e6:86:fc:
                    f0:aa:74:72:84:0d:c0:66:be:0a:1c:db:fd:93:ef:
                    16:0b:7f:f5:1e:6d:76:09:c0:7a:0b:1c:25:17:cc:
                    7f:aa:aa:98:4d:07:a0:f3:1f:01:3b:49:4d:cf:76:
                    73:79:3d:ca:c0:11:95:73:69:52:e1:dd:88:78:89:
                    b0:4c:08:5c:0a:44:9c:29:ae:99:ca:0b:e6:54:bd:
                    73:28:92:f1:4d:1b:a2:1e:08:70:69:42:f6:76:1b:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B9:AB:66:FA:3E:F9:FA:C4:F7:18:EC:AC:79:C6:02:45:2A:86:D2
            X509v3 Authority Key Identifier:
                keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:d7:0e:fb:d9:ac:2f:77:90:bb:aa:8e:ad:79:e9:79:b5:
         a0:42:1c:5a:fb:da:4c:a9:ad:5a:44:a2:3b:27:93:8c:b8:25:
         f7:2c:b0:1f:c2:31:98:86:8e:ab:f6:41:76:8d:46:69:80:80:
         bb:cd:22:a0:c9:d0:16:ac:51:ff:df:13:ed:91:b5:20:7f:2a:
         4b:c4:57:01:f3:45:d4:2d:bf:68:ab:2f:5f:db:e4:55:41:c4:
         fd:fb:9b:ac:d9:54:66:ca:01:59:46:a5:ee:b2:fd:de:f5:36:
         f3:b3:98:34:36:59:2f:0d:63:50:b6:8c:a4:7b:79:99:6d:58:
         de:b0:ea:4a:07:14:0b:1f:b7:78:63:e4:24:d6:2c:5f:48:43:
         bf:7d:62:f6:f6:0a:d4:4e:5c:33:51:5b:a9:63:6f:3f:25:86:
         92:11:7b:7e:49:71:4e:45:b7:93:85:da:b4:b2:b7:cd:6c:dc:
         12:7d:57:d7:ec:25:f2:90:38:98:e8:ed:ce:a9:71:fe:d8:36:
         28:ab:17:3a:82:fa:83:fa:1a:a8:06:c8:38:68:c1:59:79:0e:
         53:6a:3e:57:b2:04:8b:9c:bc:d8:3b:81:c5:70:ea:78:92:e9:
         b1:c3:6c:76:68:cd:55:ce:ea:80:b0:d8:79:d5:6d:d1:fa:3a:
         97:5f:56:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq513oLZn1tUg5f79GLqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTIzYWJhZTNjZjBiMzUxMjYwZDY2ZjMyMzM5OTI4ZmRk
ZjJlYmIwHhcNMjUwNDEzMTUwMTM4WhcNMjUwNDE0MTUwMTM4WjAzMTEwLwYDVQQD
EygzMmI5YWI2NmZhM2VmOWZhYzRmNzE4ZWNhYzc5YzYwMjQ1MmE4NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx22Akc1B3hiu2eMeQqCNx7CJTffp
BvdqqewCKtPXwlW0nCC8uljYXBj5Ks8rnYga4RS4CzkGosWf8KtGLIETB3dXdBcE
qpYezdLuX/8/8CHMIj0JFuCQ2i5xvCiUbMXsdTu3YYTj5PIodnjqPUzrdkPomYMn
4Eme/VhcxAKvMZamuuUwilwss1IjZvYmqN5zxIBjsZi0jYTE0L/HVHV6x9Xmhvzw
qnRyhA3AZr4KHNv9k+8WC3/1Hm12CcB6CxwlF8x/qqqYTQeg8x8BO0lNz3ZzeT3K
wBGVc2lS4d2IeImwTAhcCkScKa6ZygvmVL1zKJLxTRuiHghwaUL2dhtI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK5q2b6Pvn6xPcY7Kx5xgJFKobSMB8GA1UdIwQY
MBaAFPPiOrrjzws1EmDWbzIzmSj93y67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1JNnV1UFBDelVTWU5adk1qT1pLUDNmTHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wODY4YWYtZjJkNy00OTA1LTg4ZDIt
OWRiNjY2NTQ0OWNiLzEvOC1JNnV1UFBDelVTWU5adk1qT1pLUDNmTHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wODY4YWYtZjJkNy00OTA1LTg4ZDItOWRiNjY2NTQ0OWNi
LzEvOC1JNnV1UFBDelVTWU5adk1qT1pLUDNmTHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2rXDvvZ
rC93kLuqjq156Xm1oEIcWvvaTKmtWkSiOyeTjLgl9yywH8IxmIaOq/ZBdo1GaYCA
u80ioMnQFqxR/98T7ZG1IH8qS8RXAfNF1C2/aKsvX9vkVUHE/fubrNlUZsoBWUal
7rL93vU287OYNDZZLw1jULaMpHt5mW1Y3rDqSgcUCx+3eGPkJNYsX0hDv31i9vYK
1E5cM1FbqWNvPyWGkhF7fklxTkW3k4XatLK3zWzcEn1X1+wl8pA4mOjtzqlx/tg2
KKsXOoL6g/oaqAbIOGjBWXkOU2o+V7IEi5y82DuBxXDqeJLpscNsdmjNVc7qgLDY
edVt0fo6l19WZg==
-----END CERTIFICATE-----