Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File:                     X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier:          uA2teaHf+WPA9iR+3Eu6gj/8G6hZgHtfKh2sTAq0AYg=
Subject key identifier:   83:F1:5B:8D:4E:00:CA:5D:B5:01:38:EC:FA:D8:0B:EE:70:B5:E7:DB
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer:       /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial:       01962DF3B27F5B31174A32B64EFFE33364BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number:          0CA8
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: 8+wwDOVkeSXePKcgTdw4CmdbVyHrfmafxeFa9EwcquY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b2:7f:5b:31:17:4a:32:b6:4e:ff:e3:33:64:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=83f15b8d4e00ca5db50138ecfad80bee70b5e7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:f3:06:55:48:cd:e5:01:cd:4f:93:57:13:
                    f9:c2:f8:25:53:1a:b2:e8:a0:cf:04:a6:2c:46:98:
                    13:9e:dc:60:81:ba:ea:b5:14:15:1d:d5:c9:dd:3f:
                    0c:4f:9b:a3:18:cc:23:dc:57:5e:76:06:47:33:af:
                    c7:77:48:c7:37:c7:2c:e3:78:7c:90:ac:32:0e:ee:
                    b2:1c:d8:81:c0:d6:84:b5:6a:16:d0:65:cc:ee:57:
                    78:f0:37:a4:56:cf:1f:74:68:f3:6f:d4:44:e5:1b:
                    55:f8:b2:05:d1:26:b8:8a:b9:3b:20:ed:0c:12:f8:
                    eb:3a:69:81:28:f8:8f:99:f1:f8:8b:a3:ee:8a:be:
                    e4:b6:7e:3a:35:29:d8:fe:7f:22:58:f0:d9:5a:2a:
                    f6:67:15:92:a5:00:55:81:76:a6:7c:2c:47:ec:c9:
                    14:8b:f0:2c:ea:d1:65:58:87:6a:2d:19:86:95:54:
                    12:bf:4a:2d:37:84:8a:21:65:c6:12:f8:3e:b7:1b:
                    9a:cd:b8:e6:07:d7:8b:f4:db:91:94:dd:89:73:a6:
                    d1:05:2f:6b:5d:5d:71:c6:be:43:24:cf:ba:eb:c6:
                    d6:db:07:eb:d5:72:0c:1c:66:8a:ed:2e:52:5c:2c:
                    f1:9a:30:90:c1:94:4c:1b:4a:75:01:c1:78:31:c8:
                    7a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F1:5B:8D:4E:00:CA:5D:B5:01:38:EC:FA:D8:0B:EE:70:B5:E7:DB
            X509v3 Authority Key Identifier:
                keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:06:21:a9:eb:bc:db:bb:5a:22:b1:a0:cd:97:29:c9:dd:
         9f:31:fb:30:5f:02:c3:08:e9:64:54:51:68:93:c3:9e:6b:61:
         c1:f1:14:3c:a1:6a:cd:e6:db:b4:49:a6:a6:28:7b:05:4d:de:
         12:57:60:b5:f2:0c:14:ad:10:51:52:e6:8c:7a:8d:ed:78:53:
         c0:a8:2f:c1:27:bb:51:15:a6:d6:d4:26:46:68:4b:07:5f:20:
         c5:00:38:d5:23:c6:0f:87:55:a8:f7:b3:37:4e:40:03:fc:a5:
         56:f2:48:90:50:7f:a6:e1:58:1d:85:bd:23:b4:20:5f:d2:1a:
         54:75:a0:f5:43:68:1a:10:72:27:38:ca:23:82:1a:dd:b5:4d:
         2e:d5:fb:40:c0:b8:97:a0:aa:26:03:39:f9:8d:b3:d1:a8:70:
         93:e1:2b:3a:ac:c3:bc:3a:db:91:d5:a7:62:55:2e:97:23:75:
         78:e0:df:65:a8:78:32:56:b6:e1:0f:74:47:b6:a5:27:f8:91:
         28:e8:b3:ec:94:98:3d:c9:ad:54:58:db:84:8b:4b:da:85:1c:
         be:6c:3c:3b:26:f2:37:cb:70:22:e5:bc:88:6e:ad:4e:b0:5b:
         10:9e:62:fe:f2:0c:df:4f:a5:e3:4d:f1:40:20:2d:81:30:4d:
         cf:ac:9d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87J/WzEXSjK2Tv/jM2S9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZGQxZThjMjM5NGQxOGU4NzZjMmQ1NzAxNmU3ZWQ4OTgw
NWE2NjcwHhcNMjUwNDEzMDcwMTA3WhcNMjUwNDE0MDcwMTA3WjAzMTEwLwYDVQQD
Eyg4M2YxNWI4ZDRlMDBjYTVkYjUwMTM4ZWNmYWQ4MGJlZTcwYjVlN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu33zBlVIzeUBzU+TVxP5wvglUxqy
6KDPBKYsRpgTntxggbrqtRQVHdXJ3T8MT5ujGMwj3FdedgZHM6/Hd0jHN8cs43h8
kKwyDu6yHNiBwNaEtWoW0GXM7ld48DekVs8fdGjzb9RE5RtV+LIF0Sa4irk7IO0M
EvjrOmmBKPiPmfH4i6Puir7ktn46NSnY/n8iWPDZWir2ZxWSpQBVgXamfCxH7MkU
i/As6tFlWIdqLRmGlVQSv0otN4SKIWXGEvg+txuazbjmB9eL9NuRlN2Jc6bRBS9r
XV1xxr5DJM+668bW2wfr1XIMHGaK7S5SXCzxmjCQwZRMG0p1AcF4Mch6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPxW41OAMpdtQE47PrYC+5wtefbMB8GA1UdIwQY
MBaAFF/dHowjlNGOh2wtVwFuftiYBaZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMt
NWFlOTNlYzhmYjExLzEvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMtNWFlOTNlYzhmYjEx
LzEvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPysGIanr
vNu7WiKxoM2XKcndnzH7MF8CwwjpZFRRaJPDnmthwfEUPKFqzebbtEmmpih7BU3e
EldgtfIMFK0QUVLmjHqN7XhTwKgvwSe7URWm1tQmRmhLB18gxQA41SPGD4dVqPez
N05AA/ylVvJIkFB/puFYHYW9I7QgX9IaVHWg9UNoGhByJzjKI4Ia3bVNLtX7QMC4
l6CqJgM5+Y2z0ahwk+ErOqzDvDrbkdWnYlUulyN1eODfZah4Mla24Q90R7alJ/iR
KOiz7JSYPcmtVFjbhItL2oUcvmw8OybyN8twIuW8iG6tTrBbEJ5i/vIM30+l403x
QCAtgTBNz6yd1A==
-----END CERTIFICATE-----