Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7de250-cd48-456d-b1f5-8e2eb17a02ee/1/StnzsQJ5jiAWQqYdrLLZgQUN7z8.mft
File:                     StnzsQJ5jiAWQqYdrLLZgQUN7z8.mft (raw, json)
Hash identifier:          sqWSonI92AP56mUlqUQdMXY+VjXBMe4OUIcVfUzwUKE=
Subject key identifier:   CD:9F:B1:90:6D:1E:7E:5B:7F:E9:CC:17:95:13:1E:93:AE:26:07:67
Authority key identifier: 4A:D9:F3:B1:02:79:8E:20:16:42:A6:1D:AC:B2:D9:81:05:0D:EF:3F
Certificate issuer:       /CN=4ad9f3b102798e201642a61dacb2d981050def3f
Certificate serial:       0195C8E353945C31B9886F3E8B4CDEE0B6AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StnzsQJ5jiAWQqYdrLLZgQUN7z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7de250-cd48-456d-b1f5-8e2eb17a02ee/1/StnzsQJ5jiAWQqYdrLLZgQUN7z8.mft
Manifest number:          0C36
Signing time:             Mon 24 Mar 2025 16:01:35 +0000
Manifest this update:     Mon 24 Mar 2025 16:01:35 +0000
Manifest next update:     Tue 25 Mar 2025 16:01:35 +0000
Files and hashes:         1: StnzsQJ5jiAWQqYdrLLZgQUN7z8.crl (hash: fcdR/LVpslAr0UfxWdmzx/Q4NtJ3cn2pQDMPNqh0xVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:e3:53:94:5c:31:b9:88:6f:3e:8b:4c:de:e0:b6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad9f3b102798e201642a61dacb2d981050def3f
        Validity
            Not Before: Mar 24 16:01:35 2025 GMT
            Not After : Mar 25 16:01:35 2025 GMT
        Subject: CN=cd9fb1906d1e7e5b7fe9cc1795131e93ae260767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:a0:60:d7:e3:c2:06:d8:0e:60:dc:d8:53:
                    55:90:05:19:f7:a8:89:66:98:ba:e5:d0:53:b6:5f:
                    f7:27:f2:ce:98:09:82:a5:b8:ce:91:ac:e7:c6:78:
                    0a:84:d7:39:0b:f9:b9:10:b7:ae:03:2b:5c:1a:87:
                    e3:b4:87:65:0e:07:7e:68:e4:9a:66:45:79:47:13:
                    41:55:bb:43:2d:df:ab:f4:1f:33:1f:4a:b7:91:d8:
                    40:00:a7:d6:02:8b:a2:2a:32:20:6f:2c:47:27:ee:
                    95:d8:cc:79:90:36:55:8b:97:2b:bc:31:a9:99:76:
                    7d:69:e6:11:28:c0:51:35:11:da:bb:0f:5e:a0:09:
                    c5:13:b8:5e:9d:b6:63:32:1b:e2:1e:85:d9:76:54:
                    dc:ca:e6:3e:86:26:75:2e:37:38:ae:f4:43:4a:b2:
                    9d:08:b5:e3:01:3c:ac:3d:08:78:0b:a9:63:aa:7c:
                    8c:c6:88:2a:96:58:ae:fd:3f:b9:13:40:3c:f4:db:
                    d2:2f:45:5a:03:9a:9e:a4:16:a3:da:73:8a:ef:6f:
                    15:25:b0:28:dc:73:91:63:87:9d:1d:1b:9f:a2:67:
                    fa:25:77:14:88:a3:9b:72:1b:ae:18:17:a1:e8:7e:
                    5a:49:8c:dc:b2:12:2e:23:29:02:67:65:0b:99:68:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9F:B1:90:6D:1E:7E:5B:7F:E9:CC:17:95:13:1E:93:AE:26:07:67
            X509v3 Authority Key Identifier:
                keyid:4A:D9:F3:B1:02:79:8E:20:16:42:A6:1D:AC:B2:D9:81:05:0D:EF:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StnzsQJ5jiAWQqYdrLLZgQUN7z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7de250-cd48-456d-b1f5-8e2eb17a02ee/1/StnzsQJ5jiAWQqYdrLLZgQUN7z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7de250-cd48-456d-b1f5-8e2eb17a02ee/1/StnzsQJ5jiAWQqYdrLLZgQUN7z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:30:11:e6:fa:84:91:a4:fa:01:d3:6b:d7:9f:98:d7:d6:
         cd:8d:92:97:d3:c3:f2:f9:26:b5:46:1e:a6:ae:2a:8c:1c:50:
         c5:0e:47:26:e4:73:4d:e9:ad:1b:7d:a7:0d:2b:3f:aa:22:06:
         01:c8:34:71:e9:e9:ba:92:5e:ca:7c:72:3b:40:b3:37:37:0d:
         fb:3f:81:5a:21:ec:cd:4d:1a:8d:c6:2a:f2:12:d8:90:de:62:
         25:7c:c0:8d:31:30:09:05:5c:ef:cc:6f:7d:8a:d5:ff:d3:13:
         8c:e5:a9:3b:1e:d5:64:c6:fd:f2:4d:6b:f3:03:ed:ec:13:1a:
         c1:6d:55:b0:3b:a9:2a:55:10:b8:b0:69:10:8b:a1:f4:4a:c1:
         84:94:06:33:82:ee:05:5d:72:a1:97:0f:42:82:83:f3:69:3f:
         bd:3f:50:b7:4d:e8:e0:11:ac:03:40:7c:b7:76:ae:00:c0:bd:
         8e:46:20:10:d5:d4:8f:c8:ca:91:74:85:a1:00:e7:7c:fb:55:
         06:3e:2f:72:91:f8:cc:a9:f2:6f:b3:4b:f3:4e:7a:3e:8b:b1:
         47:30:dc:ae:93:01:de:41:08:b4:03:40:ab:f1:fa:3e:b1:c0:
         fd:c8:b7:13:fe:c5:7a:81:00:31:91:ca:43:f2:be:59:5b:3a:
         de:9f:1d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXI41OUXDG5iG8+i0ze4LarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDlmM2IxMDI3OThlMjAxNjQyYTYxZGFjYjJkOTgxMDUw
ZGVmM2YwHhcNMjUwMzI0MTYwMTM1WhcNMjUwMzI1MTYwMTM1WjAzMTEwLwYDVQQD
EyhjZDlmYjE5MDZkMWU3ZTViN2ZlOWNjMTc5NTEzMWU5M2FlMjYwNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCagYNfjwgbYDmDc2FNVkAUZ96iJ
Zpi65dBTtl/3J/LOmAmCpbjOkaznxngKhNc5C/m5ELeuAytcGofjtIdlDgd+aOSa
ZkV5RxNBVbtDLd+r9B8zH0q3kdhAAKfWAouiKjIgbyxHJ+6V2Mx5kDZVi5crvDGp
mXZ9aeYRKMBRNRHauw9eoAnFE7henbZjMhviHoXZdlTcyuY+hiZ1Ljc4rvRDSrKd
CLXjATysPQh4C6ljqnyMxogqlliu/T+5E0A89NvSL0VaA5qepBaj2nOK728VJbAo
3HORY4edHRufomf6JXcUiKObchuuGBeh6H5aSYzcshIuIykCZ2ULmWhZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2fsZBtHn5bf+nMF5UTHpOuJgdnMB8GA1UdIwQY
MBaAFErZ87ECeY4gFkKmHayy2YEFDe8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RuenNRSjVqaUFXUXFZZHJMTFpnUVVON3o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83ZGUyNTAtY2Q0OC00NTZkLWIxZjUt
OGUyZWIxN2EwMmVlLzEvU3RuenNRSjVqaUFXUXFZZHJMTFpnUVVON3o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83ZGUyNTAtY2Q0OC00NTZkLWIxZjUtOGUyZWIxN2EwMmVl
LzEvU3RuenNRSjVqaUFXUXFZZHJMTFpnUVVON3o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEcwEeb6
hJGk+gHTa9efmNfWzY2Sl9PD8vkmtUYepq4qjBxQxQ5HJuRzTemtG32nDSs/qiIG
Acg0cenpupJeynxyO0CzNzcN+z+BWiHszU0ajcYq8hLYkN5iJXzAjTEwCQVc78xv
fYrV/9MTjOWpOx7VZMb98k1r8wPt7BMawW1VsDupKlUQuLBpEIuh9ErBhJQGM4Lu
BV1yoZcPQoKD82k/vT9Qt03o4BGsA0B8t3auAMC9jkYgENXUj8jKkXSFoQDnfPtV
Bj4vcpH4zKnyb7NL8056PouxRzDcrpMB3kEItANAq/H6PrHA/ci3E/7FeoEAMZHK
Q/K+WVs63p8dhA==
-----END CERTIFICATE-----