Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File:                     ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier:          rVL4YVu2iBLZnIhHsmUHSj5qcfif9i9zil9D3rLvYWE=
Subject key identifier:   3A:44:14:60:B7:0F:6B:6A:F4:B5:81:0B:B6:BD:19:E4:A7:F3:83:B4
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer:       /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial:       01962E98DA94CFB8EDC7209F2569B060CA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number:          088F
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: sFdLeRmRONbtgFnlaYmR6/2L76SzGFx94cH+NxjPkHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:da:94:cf:b8:ed:c7:20:9f:25:69:b0:60:ca:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=3a441460b70f6b6af4b5810bb6bd19e4a7f383b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:3f:6f:f7:0e:90:19:3e:08:a3:6c:cb:2e:
                    ac:d3:23:79:69:e7:9c:bd:2b:4e:5f:6d:98:1c:2b:
                    95:5e:2c:da:71:a1:ed:85:c3:ac:20:7a:f3:00:0e:
                    03:60:34:c5:ed:ee:4f:8d:0e:2a:3d:66:ea:2e:8f:
                    99:75:65:ee:23:37:01:78:f9:4f:89:1d:eb:2a:4d:
                    7f:68:51:66:fa:7c:a9:a5:c9:86:6f:12:9b:09:41:
                    3d:7c:a1:3a:80:1a:bf:14:01:d0:a9:20:5c:f6:25:
                    18:7d:ad:c5:2d:35:75:70:e0:36:9a:12:c5:9c:aa:
                    e5:92:43:30:08:96:70:9e:21:3d:fc:e9:0f:09:a3:
                    d8:a1:a4:e4:81:b2:66:30:62:c8:0c:83:10:74:c4:
                    d7:6b:cf:8f:5e:dc:32:54:04:5e:18:42:64:f5:47:
                    1c:95:64:4b:26:8c:07:61:10:d4:9d:a9:0c:e8:84:
                    0a:a7:af:31:ce:de:3e:16:72:6d:18:e2:b2:6a:b4:
                    ad:e6:41:2d:1b:e4:e4:f9:15:15:5a:9c:7f:10:c0:
                    b0:e8:be:5d:40:d3:39:cf:ea:a7:01:e2:b5:83:73:
                    57:2e:7e:69:21:43:5a:25:64:00:12:5b:41:eb:33:
                    e4:e5:96:a5:44:a8:5a:f1:52:a6:2a:50:9d:90:3e:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:44:14:60:B7:0F:6B:6A:F4:B5:81:0B:B6:BD:19:E4:A7:F3:83:B4
            X509v3 Authority Key Identifier:
                keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:b8:39:f0:48:b4:1e:e0:cb:d6:50:d9:41:18:1b:9f:48:
         a5:4c:e7:c6:f8:01:de:56:9f:ef:f4:3e:0a:c7:4f:00:06:24:
         e6:41:b3:32:1c:ab:23:6c:c0:a9:d0:90:06:15:e2:a3:c1:a5:
         ee:77:79:11:f9:ea:98:41:e6:a1:4b:10:b1:00:57:b0:55:9b:
         97:2d:41:41:f6:51:d9:b2:c5:3d:f3:3d:50:8d:84:d9:ca:95:
         ba:14:16:86:19:c8:31:d3:23:fc:b8:37:c5:14:72:f5:32:78:
         5c:c2:09:26:8a:e1:7f:94:15:58:6c:8d:27:9d:6d:31:e2:bf:
         dd:4e:1a:ce:0a:47:6e:19:dc:2a:74:cb:80:0d:f0:7e:b9:16:
         3c:a2:70:b7:a3:0a:c1:09:46:d5:df:ee:45:a2:f0:a2:0e:02:
         c7:70:81:c1:43:a7:ea:ac:4a:63:e8:19:39:64:c6:97:ff:e2:
         d6:4f:6d:a3:43:b9:00:99:6d:1a:a3:97:db:a6:5f:53:17:63:
         80:63:c3:f3:61:a5:79:cc:cb:b4:3d:65:f4:5a:62:0e:42:68:
         13:af:67:7c:87:41:df:f0:83:ee:c6:c8:fd:cd:a1:70:b5:ed:
         48:36:22:cb:db:c2:c4:27:cb:87:07:49:ed:fc:d6:2c:86:99:
         a0:68:ed:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNqUz7jtxyCfJWmwYMqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzQwZmY2NjlhM2FkYzlkNjY5NjEzNWM4ZDcxZjZkZjVl
YWMyN2IwHhcNMjUwNDEzMTAwMTMxWhcNMjUwNDE0MTAwMTMxWjAzMTEwLwYDVQQD
EygzYTQ0MTQ2MGI3MGY2YjZhZjRiNTgxMGJiNmJkMTllNGE3ZjM4M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0So/b/cOkBk+CKNsyy6s0yN5aeec
vStOX22YHCuVXizacaHthcOsIHrzAA4DYDTF7e5PjQ4qPWbqLo+ZdWXuIzcBePlP
iR3rKk1/aFFm+nyppcmGbxKbCUE9fKE6gBq/FAHQqSBc9iUYfa3FLTV1cOA2mhLF
nKrlkkMwCJZwniE9/OkPCaPYoaTkgbJmMGLIDIMQdMTXa8+PXtwyVAReGEJk9Ucc
lWRLJowHYRDUnakM6IQKp68xzt4+FnJtGOKyarSt5kEtG+Tk+RUVWpx/EMCw6L5d
QNM5z+qnAeK1g3NXLn5pIUNaJWQAEltB6zPk5ZalRKha8VKmKlCdkD4GfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpEFGC3D2tq9LWBC7a9GeSn84O0MB8GA1UdIwQY
MBaAFDg0D/Zpo63J1mlhNcjXH2316sJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2Mt
Mjg0NmVhYWRkZTY3LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2MtMjg0NmVhYWRkZTY3
LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHm4OfBI
tB7gy9ZQ2UEYG59IpUznxvgB3laf7/Q+CsdPAAYk5kGzMhyrI2zAqdCQBhXio8Gl
7nd5EfnqmEHmoUsQsQBXsFWbly1BQfZR2bLFPfM9UI2E2cqVuhQWhhnIMdMj/Lg3
xRRy9TJ4XMIJJorhf5QVWGyNJ51tMeK/3U4azgpHbhncKnTLgA3wfrkWPKJwt6MK
wQlG1d/uRaLwog4Cx3CBwUOn6qxKY+gZOWTGl//i1k9to0O5AJltGqOX26ZfUxdj
gGPD82GleczLtD1l9FpiDkJoE69nfIdB3/CD7sbI/c2hcLXtSDYiy9vCxCfLhwdJ
7fzWLIaZoGjtuw==
-----END CERTIFICATE-----