Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File:                     SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier:          LPZ6KuTEs6mdlxPZjFKajLiizIWZXkZhl1D9Gahdfi4=
Subject key identifier:   58:40:C1:C0:0B:8D:69:89:22:26:4B:4E:3A:79:25:9E:03:D0:6B:03
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer:       /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial:       01962E98D0335670908A62B3C29DE0E0C4E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number:          0E7A
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: liLFA28yAUeZ0/MGXEiQrz4Y9VSbil4SU53OB9GMreM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d0:33:56:70:90:8a:62:b3:c2:9d:e0:e0:c4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=5840c1c00b8d698922264b4e3a79259e03d06b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:4e:0a:69:9a:f0:94:ad:c8:75:06:44:b9:
                    c4:1b:98:75:dc:cd:b5:1b:f7:2f:0c:81:0e:95:be:
                    ee:8f:b9:cf:b1:e9:31:ad:40:7b:42:99:59:8f:ce:
                    2e:63:f4:e0:c4:9b:c4:71:a4:54:a3:b8:1d:ac:13:
                    c9:6c:b3:95:36:10:8f:da:ef:e1:b4:86:63:2f:6c:
                    b3:35:24:f7:0e:bd:7b:ba:4e:9f:d8:a7:c0:b4:72:
                    fe:8b:c7:98:a2:6f:10:da:2f:ba:d2:51:44:eb:dc:
                    87:9b:53:af:c5:06:6d:c8:b4:a0:63:46:90:aa:07:
                    fd:23:8f:92:cf:a6:cc:d7:cd:6f:72:e6:68:b0:41:
                    00:80:4f:54:b4:55:83:13:c4:18:9e:69:73:c1:48:
                    bf:dc:3b:b5:70:3c:b2:16:fa:fa:f0:5c:ca:cd:98:
                    f0:9e:c9:ce:f0:86:a9:f4:37:b9:27:7b:22:73:af:
                    11:74:ca:45:8d:0c:c0:98:8a:7e:1c:80:f7:7b:eb:
                    7b:5d:55:83:33:ec:c6:ac:d9:0f:ea:46:4b:f7:48:
                    25:19:89:8c:0e:78:e0:c7:5e:96:6f:47:25:ec:ff:
                    10:65:d5:9b:d1:85:e9:4e:df:70:d3:6d:c1:c2:cf:
                    26:87:7e:e7:57:d9:ce:5e:27:8b:57:36:31:37:41:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:40:C1:C0:0B:8D:69:89:22:26:4B:4E:3A:79:25:9E:03:D0:6B:03
            X509v3 Authority Key Identifier:
                keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:22:30:7e:fd:3a:53:25:eb:37:7e:e4:9d:71:82:c1:71:98:
         99:d8:1e:26:a5:9b:83:51:1c:32:4a:b9:50:11:05:85:4b:6c:
         25:b3:98:23:19:97:30:9c:45:77:78:c3:da:06:9b:bc:57:cc:
         06:3b:76:f1:27:53:a3:96:ba:5f:11:b2:6b:33:1b:0f:09:a8:
         4c:7f:c1:05:15:15:ea:86:16:c6:63:bb:41:85:81:1b:63:82:
         11:21:f9:be:ba:7a:ab:fa:29:4d:92:b2:b3:00:16:81:d8:08:
         e2:c3:24:52:16:3d:66:0a:93:eb:67:cf:bb:ff:00:6f:e5:6b:
         fb:30:24:8f:04:4e:06:0d:d8:e4:0b:67:34:ff:36:64:fb:4e:
         91:d7:89:3f:8d:5a:cd:db:93:e3:e2:fa:4b:8a:92:d0:52:5c:
         28:39:bb:79:79:ab:71:6b:ea:ee:49:25:64:20:19:9e:0f:85:
         be:0f:e2:d3:0a:45:56:90:97:83:02:10:da:25:31:4a:6a:9e:
         a5:83:26:cd:6c:4a:77:ce:a9:2f:be:81:71:e0:ec:e1:cb:44:
         c9:0a:2a:fa:ab:0a:e7:eb:d4:0e:53:05:21:48:46:1c:6c:5b:
         8f:71:73:45:a3:1a:92:31:c5:cf:36:a0:fc:20:a0:34:ad:7a:
         27:39:b6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNAzVnCQimKzwp3g4MTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MzQzODdlYmZlY2RhNjM3YTc2ZTExMTk5ZTFjZDAzMDdj
MmY0Y2EwHhcNMjUwNDEzMTAwMTI4WhcNMjUwNDE0MTAwMTI4WjAzMTEwLwYDVQQD
Eyg1ODQwYzFjMDBiOGQ2OTg5MjIyNjRiNGUzYTc5MjU5ZTAzZDA2YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNOCmma8JStyHUGRLnEG5h13M21
G/cvDIEOlb7uj7nPsekxrUB7QplZj84uY/TgxJvEcaRUo7gdrBPJbLOVNhCP2u/h
tIZjL2yzNST3Dr17uk6f2KfAtHL+i8eYom8Q2i+60lFE69yHm1OvxQZtyLSgY0aQ
qgf9I4+Sz6bM181vcuZosEEAgE9UtFWDE8QYnmlzwUi/3Du1cDyyFvr68FzKzZjw
nsnO8Iap9De5J3sic68RdMpFjQzAmIp+HID3e+t7XVWDM+zGrNkP6kZL90glGYmM
Dnjgx16Wb0cl7P8QZdWb0YXpTt9w023Bws8mh37nV9nOXieLVzYxN0HM9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhAwcALjWmJIiZLTjp5JZ4D0GsDMB8GA1UdIwQY
MBaAFEg0OH6/7NpjenbhEZnhzQMHwvTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ZWU2YzgtZjNlMi00ZmFlLTk5OGEt
NTkxYTJhNDE5NGNkLzEvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85ZWU2YzgtZjNlMi00ZmFlLTk5OGEtNTkxYTJhNDE5NGNk
LzEvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyIwfv06
UyXrN37knXGCwXGYmdgeJqWbg1EcMkq5UBEFhUtsJbOYIxmXMJxFd3jD2gabvFfM
Bjt28SdTo5a6XxGyazMbDwmoTH/BBRUV6oYWxmO7QYWBG2OCESH5vrp6q/opTZKy
swAWgdgI4sMkUhY9ZgqT62fPu/8Ab+Vr+zAkjwROBg3Y5AtnNP82ZPtOkdeJP41a
zduT4+L6S4qS0FJcKDm7eXmrcWvq7kklZCAZng+Fvg/i0wpFVpCXgwIQ2iUxSmqe
pYMmzWxKd86pL76BceDs4ctEyQoq+qsK5+vUDlMFIUhGHGxbj3FzRaMakjHFzzag
/CCgNK16Jzm2fQ==
-----END CERTIFICATE-----