Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File:                     FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier:          KyXT4FE0Uf7coWXKZcr5zWK8UOo0YvAb10RaHr6n188=
Subject key identifier:   70:5F:84:C0:55:92:E8:EB:BB:DC:D5:F6:4C:14:26:06:C2:F6:BF:8F
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer:       /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial:       01962E99A23E76B50CECD9006391A0B42002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: eGnSL6Uq+PmJnbVGB6G5TGvMQjU5v7+5PTd9vgTho4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a2:3e:76:b5:0c:ec:d9:00:63:91:a0:b4:20:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=705f84c05592e8ebbbdcd5f64c142606c2f6bf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:0d:12:bf:be:c1:6e:35:be:91:d7:f8:01:
                    20:bd:34:66:bb:6f:29:c0:f1:44:32:9c:50:6e:28:
                    58:ac:27:06:bd:ce:c4:49:53:99:df:f5:f8:1b:5e:
                    60:72:db:4c:20:ce:ad:4b:f0:a3:15:55:88:ba:dd:
                    0d:b4:0e:3c:9d:82:17:61:b7:1d:0d:ab:fb:ab:25:
                    72:b8:65:a1:b4:ea:8b:56:d3:ba:2b:69:eb:f3:6e:
                    22:53:c6:41:8c:0d:5d:68:75:30:b7:31:09:c9:e8:
                    29:ca:86:4f:c2:e0:a6:d7:69:f3:7b:3c:8d:42:2d:
                    5a:44:3b:02:51:05:be:3e:8c:e5:ec:0e:2b:6a:e6:
                    90:dd:c5:3a:20:a4:c9:60:30:bb:97:94:ae:4d:53:
                    34:3e:f0:c6:64:89:c6:ce:5a:2d:9e:84:22:cd:f5:
                    97:cb:d5:82:13:97:64:72:1f:20:47:58:e3:2e:77:
                    2b:e6:4d:f2:55:b0:b8:be:cc:af:59:bb:91:3e:bf:
                    fb:1a:67:ef:86:9b:e1:66:ad:23:74:b8:ee:cf:b3:
                    11:fb:6c:70:99:0f:c9:62:93:1f:85:36:00:4d:33:
                    ee:ff:49:06:a2:ee:87:a9:40:09:b8:84:2d:28:d7:
                    dc:a3:2e:a7:c4:69:a7:df:b7:a3:01:6e:6c:64:f6:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5F:84:C0:55:92:E8:EB:BB:DC:D5:F6:4C:14:26:06:C2:F6:BF:8F
            X509v3 Authority Key Identifier:
                keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:04:a9:f8:16:02:78:6f:c7:0e:f6:b0:ec:1b:b4:3c:bb:
         99:51:87:6c:fc:d2:c5:08:c5:87:18:70:84:87:ff:e8:c8:10:
         be:55:18:f7:8c:2f:f1:07:9b:08:15:c1:57:95:51:9d:26:7a:
         97:be:2c:cd:c5:67:56:7d:36:6c:8f:c4:af:2d:08:d1:90:c7:
         62:8d:3d:ec:15:ed:6a:44:20:df:8a:4e:0a:2d:64:4b:3e:cb:
         9f:94:a9:01:60:15:f6:f4:5d:31:51:c2:0a:d4:98:5f:92:41:
         c3:3c:c2:17:33:2e:ab:bf:9e:95:db:f0:65:40:72:d8:a7:f9:
         94:4e:fd:23:55:77:1e:50:00:c9:4e:c0:0a:9c:87:8c:71:16:
         bc:9c:48:61:6c:84:3f:fb:6a:4d:20:11:99:00:77:45:e5:f5:
         e5:28:1c:67:00:96:91:ba:85:09:4b:73:de:55:1f:f0:a1:8f:
         c3:8f:8b:89:d3:ae:6b:10:0b:e8:6d:b8:3a:3a:7e:66:f2:2c:
         3f:8e:4b:cb:e8:21:a4:fa:a7:a5:1a:3c:51:4b:e4:f0:83:c3:
         a6:73:b9:11:ef:b0:4d:04:ec:af:46:5f:2b:f6:c6:3f:a4:36:
         08:6f:95:d9:1c:98:b0:d2:28:75:86:bb:2a:bb:a8:7d:96:cc:
         49:ee:59:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumaI+drUM7NkAY5GgtCACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Mjc5YWFkMTdkZjZiZjY1NzU2NWFlNWE5M2ViOTA5ODUz
NzRhM2MwHhcNMjUwNDEzMTAwMjIyWhcNMjUwNDE0MTAwMjIyWjAzMTEwLwYDVQQD
Eyg3MDVmODRjMDU1OTJlOGViYmJkY2Q1ZjY0YzE0MjYwNmMyZjZiZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArosNEr++wW41vpHX+AEgvTRmu28p
wPFEMpxQbihYrCcGvc7ESVOZ3/X4G15gcttMIM6tS/CjFVWIut0NtA48nYIXYbcd
Dav7qyVyuGWhtOqLVtO6K2nr824iU8ZBjA1daHUwtzEJyegpyoZPwuCm12nzezyN
Qi1aRDsCUQW+Pozl7A4rauaQ3cU6IKTJYDC7l5SuTVM0PvDGZInGzlotnoQizfWX
y9WCE5dkch8gR1jjLncr5k3yVbC4vsyvWbuRPr/7GmfvhpvhZq0jdLjuz7MR+2xw
mQ/JYpMfhTYATTPu/0kGou6HqUAJuIQtKNfcoy6nxGmn37ejAW5sZPbwWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBfhMBVkujru9zV9kwUJgbC9r+PMB8GA1UdIwQY
MBaAFBcnmq0X32v2V1Za5ak+uQmFN0o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUt
MWFlZWYzOWMyYjVjLzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUtMWFlZWYzOWMyYjVj
LzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1cEqfgW
Anhvxw72sOwbtDy7mVGHbPzSxQjFhxhwhIf/6MgQvlUY94wv8QebCBXBV5VRnSZ6
l74szcVnVn02bI/Ery0I0ZDHYo097BXtakQg34pOCi1kSz7Ln5SpAWAV9vRdMVHC
CtSYX5JBwzzCFzMuq7+eldvwZUBy2Kf5lE79I1V3HlAAyU7ACpyHjHEWvJxIYWyE
P/tqTSARmQB3ReX15SgcZwCWkbqFCUtz3lUf8KGPw4+LidOuaxAL6G24Ojp+ZvIs
P45Ly+ghpPqnpRo8UUvk8IPDpnO5Ee+wTQTsr0ZfK/bGP6Q2CG+V2RyYsNIodYa7
KruofZbMSe5ZUA==
-----END CERTIFICATE-----