Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File:                     468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier:          4+tZbIepeQauYGz27QiQsliRHxWI+eHVsU6tBA6uy5s=
Subject key identifier:   1E:2F:68:A1:5B:08:A1:89:BD:BD:09:42:24:73:4A:05:CA:99:BB:15
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer:       /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial:       01962E98B00B4D6C4EC483B941AA2897D48A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number:          0846
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: VnsYGN1FnFCldsEEYYwOnkghvlBv0uJZcF30t5iDgVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b0:0b:4d:6c:4e:c4:83:b9:41:aa:28:97:d4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=1e2f68a15b08a189bdbd094224734a05ca99bb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:6b:fe:1b:d4:e0:a8:d9:ae:e1:9f:16:1e:
                    b8:f4:3e:28:b3:6a:61:4e:6e:85:23:73:13:14:9f:
                    39:35:77:93:87:1f:5c:53:c5:20:00:da:9d:df:b3:
                    70:0f:ba:70:83:5d:77:9f:4e:1a:0d:81:59:34:de:
                    1d:e9:d4:18:af:08:18:eb:c9:d1:83:99:c8:7e:cf:
                    f6:7d:cd:b4:17:75:ec:bd:97:5c:c9:13:f9:32:15:
                    5b:de:1b:d9:bc:3e:c9:12:5e:94:91:8e:a5:9e:5b:
                    60:fa:4c:8d:73:d1:be:9e:82:95:f2:8d:9a:9e:3c:
                    3e:57:ed:08:09:90:18:4a:f7:e7:12:88:3c:00:fc:
                    a7:cb:0f:af:0b:4a:a8:31:19:02:5e:42:c7:d5:17:
                    ca:7a:81:0a:0b:3f:98:34:ac:23:b3:75:e0:39:38:
                    a4:bb:c4:42:fa:fb:43:c7:28:1f:a4:af:71:b3:82:
                    39:ac:68:5d:38:71:c9:4d:d7:c1:9b:73:51:43:c1:
                    6c:bc:39:e6:02:c3:1d:bd:a0:21:90:0e:ba:32:b0:
                    ae:d0:80:9e:84:a8:c7:bd:44:a2:90:a1:30:b0:c8:
                    7a:43:28:e2:cc:1f:a1:2f:31:a2:47:a4:cc:45:83:
                    84:63:d1:e2:4b:34:14:93:32:b6:20:ad:51:b2:29:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2F:68:A1:5B:08:A1:89:BD:BD:09:42:24:73:4A:05:CA:99:BB:15
            X509v3 Authority Key Identifier:
                keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:24:3d:8d:e7:4b:b0:a8:fb:84:5e:22:ce:c6:e9:5d:4d:4e:
         a3:8e:fb:b9:a7:b8:8e:c5:01:f3:9b:a7:d8:f2:c5:3e:a2:1f:
         be:35:11:d5:76:1f:b6:74:b4:64:7a:c1:16:a6:1c:e1:da:e8:
         ca:9a:74:50:57:d8:ab:cc:7d:3d:92:3d:1c:02:b8:8d:9e:f7:
         39:73:ec:fd:1d:45:93:9a:d6:b6:ea:9e:59:6d:67:84:86:ad:
         d8:cf:3a:2c:88:e7:4b:bb:17:f1:28:1a:aa:76:ea:82:9d:b4:
         49:5c:db:44:e3:1f:d0:f7:af:8f:c9:4e:e7:a1:13:e1:63:f8:
         60:4c:85:04:a9:b8:c5:dc:bb:cc:ad:dc:7d:86:41:0a:57:b5:
         14:bf:11:df:d8:9b:28:45:1e:e0:dd:33:fc:bf:bf:d7:88:3a:
         34:25:5f:f2:32:e0:9e:aa:00:06:af:23:40:67:2e:31:61:07:
         c9:41:ad:68:e8:5b:e0:96:8a:f7:2d:3d:5b:b2:90:04:13:c5:
         fc:a9:5a:68:dd:5f:ec:e2:9b:96:c1:3c:17:9b:11:ef:d3:32:
         4f:1a:f7:71:c8:f7:20:cb:e6:07:1f:e4:6b:cd:71:52:45:b0:
         34:60:d6:f6:4e:7b:d0:62:aa:97:15:df:3a:ac:cd:5d:fc:64:
         15:e2:59:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLALTWxOxIO5Qaool9SKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx
MjQ5ZmIwHhcNMjUwNDEzMTAwMTIwWhcNMjUwNDE0MTAwMTIwWjAzMTEwLwYDVQQD
EygxZTJmNjhhMTViMDhhMTg5YmRiZDA5NDIyNDczNGEwNWNhOTliYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysdr/hvU4KjZruGfFh649D4os2ph
Tm6FI3MTFJ85NXeThx9cU8UgANqd37NwD7pwg113n04aDYFZNN4d6dQYrwgY68nR
g5nIfs/2fc20F3XsvZdcyRP5MhVb3hvZvD7JEl6UkY6lnltg+kyNc9G+noKV8o2a
njw+V+0ICZAYSvfnEog8APynyw+vC0qoMRkCXkLH1RfKeoEKCz+YNKwjs3XgOTik
u8RC+vtDxygfpK9xs4I5rGhdOHHJTdfBm3NRQ8FsvDnmAsMdvaAhkA66MrCu0ICe
hKjHvUSikKEwsMh6QyjizB+hLzGiR6TMRYOEY9HiSzQUkzK2IK1RsimWOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4vaKFbCKGJvb0JQiRzSgXKmbsVMB8GA1UdIwQY
MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt
NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx
LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCQ9jedL
sKj7hF4izsbpXU1Oo477uae4jsUB85un2PLFPqIfvjUR1XYftnS0ZHrBFqYc4dro
ypp0UFfYq8x9PZI9HAK4jZ73OXPs/R1Fk5rWtuqeWW1nhIat2M86LIjnS7sX8Sga
qnbqgp20SVzbROMf0Pevj8lO56ET4WP4YEyFBKm4xdy7zK3cfYZBCle1FL8R39ib
KEUe4N0z/L+/14g6NCVf8jLgnqoABq8jQGcuMWEHyUGtaOhb4JaK9y09W7KQBBPF
/KlaaN1f7OKblsE8F5sR79MyTxr3ccj3IMvmBx/ka81xUkWwNGDW9k570GKqlxXf
OqzNXfxkFeJZ+w==
-----END CERTIFICATE-----