Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
File:                     cl3CBR5_PY1hf1UYng7m8xdNkto.mft (raw, json)
Hash identifier:          ZlNahci2VnY4TSUfG5wRvhdTby8xuSql9pPpbuqEhis=
Subject key identifier:   48:14:FB:36:09:14:50:5C:05:5C:6C:FB:CE:A2:FC:23:16:5C:E1:CE
Authority key identifier: 72:5D:C2:05:1E:7F:3D:8D:61:7F:55:18:9E:0E:E6:F3:17:4D:92:DA
Certificate issuer:       /CN=725dc2051e7f3d8d617f55189e0ee6f3174d92da
Certificate serial:       01962F06B8AC6678D8677A536473BBC56ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cl3CBR5_PY1hf1UYng7m8xdNkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
Manifest number:          020F
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: cl3CBR5_PY1hf1UYng7m8xdNkto.crl (hash: GprJcaL8T1+MK+CMC/8g7VUUNNRC+mZM+mNH+lAxBls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b8:ac:66:78:d8:67:7a:53:64:73:bb:c5:6e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725dc2051e7f3d8d617f55189e0ee6f3174d92da
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=4814fb360914505c055c6cfbcea2fc23165ce1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:0b:0c:e4:9c:fa:91:32:ec:e0:14:5f:84:
                    bd:f8:ef:49:fa:ce:34:c8:a8:ae:58:ce:9e:fe:fe:
                    af:84:70:ac:b9:78:d7:96:0c:19:41:a9:3a:51:f6:
                    22:23:03:78:27:59:bc:df:f4:fb:c0:e0:83:10:57:
                    fd:e1:41:c8:82:a4:b6:66:30:fb:e8:67:ad:aa:b2:
                    8c:0d:c4:5f:f8:75:88:77:c9:94:69:78:20:21:2c:
                    ce:9e:50:55:c5:b6:16:05:0b:60:81:45:47:71:51:
                    cf:a3:8d:02:b5:78:ae:e9:d3:d8:e9:26:41:ef:4a:
                    aa:ba:d7:9a:62:88:4e:43:e5:39:d9:32:4a:b9:63:
                    f9:52:5f:4e:3d:29:2c:79:40:92:3a:3a:2c:9b:92:
                    ea:e8:38:69:96:8a:55:90:49:32:72:36:f9:46:f3:
                    da:80:4f:c4:4c:bc:36:07:cb:1c:35:3b:33:49:d1:
                    37:0b:73:2e:71:32:72:01:f1:25:8f:75:13:3f:f4:
                    74:15:58:73:ed:1d:5e:2a:f6:de:cd:43:97:03:06:
                    80:7c:79:31:18:74:62:0b:bf:de:9b:df:a7:5e:b2:
                    dc:b8:10:59:11:a8:4c:ba:a4:dc:17:76:19:4a:fc:
                    49:51:53:9f:af:33:a3:38:e1:d9:37:7a:74:d9:e6:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:14:FB:36:09:14:50:5C:05:5C:6C:FB:CE:A2:FC:23:16:5C:E1:CE
            X509v3 Authority Key Identifier:
                keyid:72:5D:C2:05:1E:7F:3D:8D:61:7F:55:18:9E:0E:E6:F3:17:4D:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cl3CBR5_PY1hf1UYng7m8xdNkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:87:58:16:4f:8a:ea:b1:88:92:f6:3c:42:6e:9a:07:88:c9:
         17:12:cf:5c:67:96:c0:15:05:85:53:9c:e3:a7:f7:e6:74:44:
         d4:21:d5:bc:ec:f3:9d:e5:83:a3:2b:f7:81:84:83:44:cf:e5:
         ab:92:d0:e2:21:9a:cf:8d:50:df:b8:e9:5b:94:22:1a:88:4d:
         14:6f:16:33:a8:48:b6:66:d4:fa:97:12:47:d8:46:1a:c0:3c:
         da:47:31:8a:4a:03:18:b3:cb:7e:c7:4f:81:86:65:07:a4:b0:
         10:4a:36:dc:1b:25:31:30:e3:a0:51:9e:e8:17:98:f2:fa:42:
         a4:ae:27:ba:d5:e6:b3:f8:63:5c:9d:40:b3:1b:d0:58:39:f4:
         25:1b:4d:bb:24:dd:09:d4:5d:fb:50:b2:71:0a:a9:d4:93:d9:
         af:6c:90:37:89:69:25:77:08:17:b3:e8:de:54:cf:ff:b6:e3:
         c4:4c:34:4d:ce:22:61:e5:e5:6e:f2:74:00:d8:48:7c:b3:7e:
         3b:0a:04:91:13:cf:a1:a6:00:e1:77:c7:f3:07:38:1b:80:df:
         6f:57:89:7d:78:65:c7:59:26:a2:f7:ea:6e:f5:54:ed:9e:4f:
         e7:27:46:2b:6c:76:2b:7f:96:b7:1c:db:49:3c:e2:c5:65:42:
         27:46:f8:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrisZnjYZ3pTZHO7xW7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNWRjMjA1MWU3ZjNkOGQ2MTdmNTUxODllMGVlNmYzMTc0
ZDkyZGEwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
Eyg0ODE0ZmIzNjA5MTQ1MDVjMDU1YzZjZmJjZWEyZmMyMzE2NWNlMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1sLDOSc+pEy7OAUX4S9+O9J+s40
yKiuWM6e/v6vhHCsuXjXlgwZQak6UfYiIwN4J1m83/T7wOCDEFf94UHIgqS2ZjD7
6GetqrKMDcRf+HWId8mUaXggISzOnlBVxbYWBQtggUVHcVHPo40CtXiu6dPY6SZB
70qquteaYohOQ+U52TJKuWP5Ul9OPSkseUCSOjosm5Lq6DhplopVkEkycjb5RvPa
gE/ETLw2B8scNTszSdE3C3MucTJyAfElj3UTP/R0FVhz7R1eKvbezUOXAwaAfHkx
GHRiC7/em9+nXrLcuBBZEahMuqTcF3YZSvxJUVOfrzOjOOHZN3p02eaoswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgU+zYJFFBcBVxs+86i/CMWXOHOMB8GA1UdIwQY
MBaAFHJdwgUefz2NYX9VGJ4O5vMXTZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2wzQ0JSNV9QWTFoZjFVWW5nN204eGROa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ODQxMTEtNmY3Yy00ZTY5LTk0Yzkt
ZmYwZjUyNjMzNTI3LzEvY2wzQ0JSNV9QWTFoZjFVWW5nN204eGROa3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ODQxMTEtNmY3Yy00ZTY5LTk0YzktZmYwZjUyNjMzNTI3
LzEvY2wzQ0JSNV9QWTFoZjFVWW5nN204eGROa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIdYFk+K
6rGIkvY8Qm6aB4jJFxLPXGeWwBUFhVOc46f35nRE1CHVvOzzneWDoyv3gYSDRM/l
q5LQ4iGaz41Q37jpW5QiGohNFG8WM6hItmbU+pcSR9hGGsA82kcxikoDGLPLfsdP
gYZlB6SwEEo23BslMTDjoFGe6BeY8vpCpK4nutXms/hjXJ1AsxvQWDn0JRtNuyTd
CdRd+1CycQqp1JPZr2yQN4lpJXcIF7Po3lTP/7bjxEw0Tc4iYeXlbvJ0ANhIfLN+
OwoEkRPPoaYA4XfH8wc4G4Dfb1eJfXhlx1kmovfqbvVU7Z5P5ydGK2x2K3+Wtxzb
STzixWVCJ0b4qg==
-----END CERTIFICATE-----