Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File:                     oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier:          ItLsnK3/zzv6AzOIdrVf+N3Jc2LU2uk2D57o6wvrOPs=
Subject key identifier:   D8:F2:AA:3E:A9:00:01:71:0F:E6:7C:55:F0:C8:A5:3B:58:B6:F3:66
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer:       /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial:       01962E9983E01CFDE1E4D7A8426E542AD970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: 3mB/Co0eYBPZJ/qGFvQgzskkJGaNTXLxSZX8l9JOh6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:83:e0:1c:fd:e1:e4:d7:a8:42:6e:54:2a:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=d8f2aa3ea90001710fe67c55f0c8a53b58b6f366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:11:8b:e2:94:b9:11:82:4f:de:be:0b:87:
                    84:70:ca:74:a0:23:a8:a0:a0:d9:4e:95:a9:ef:13:
                    d4:1f:9e:82:2b:b9:92:2f:90:5e:d2:54:e9:e9:0d:
                    8a:9e:af:d0:c5:78:98:74:7d:db:b2:f8:7e:c9:85:
                    6d:11:56:6d:1e:7b:86:6a:e0:35:f0:d1:55:4d:f7:
                    3d:df:41:07:7e:34:99:32:fa:43:01:54:f6:37:ea:
                    80:8c:7c:da:92:f6:4b:a7:a0:26:a3:0a:cf:e8:f3:
                    c4:aa:7f:7c:c8:bc:18:c4:22:cf:e7:80:6d:21:4f:
                    b1:b3:73:f1:33:65:49:b4:84:30:bc:37:5f:be:09:
                    5f:b3:98:ee:1d:1b:10:32:56:2d:dc:d3:0f:15:ce:
                    0f:02:15:b3:bb:46:e3:c8:12:d7:0f:6c:48:b3:43:
                    72:b4:49:ce:20:3f:1f:e6:2e:bf:99:2a:16:b4:0a:
                    22:83:df:a3:55:0c:c4:1b:ac:c5:13:ee:ae:20:44:
                    42:e2:70:40:67:75:7f:ad:b6:e1:b6:ce:69:cd:e7:
                    f7:01:bc:d0:d2:24:5f:f0:c4:48:af:48:72:b6:92:
                    ee:33:c0:79:85:6a:1c:7d:37:05:83:3d:4a:78:0d:
                    d0:81:d9:d0:72:3c:8b:3f:04:4f:65:c0:bd:7a:de:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F2:AA:3E:A9:00:01:71:0F:E6:7C:55:F0:C8:A5:3B:58:B6:F3:66
            X509v3 Authority Key Identifier:
                keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:6e:a0:2b:2b:41:c5:e3:6f:81:ec:ba:9e:44:5b:63:91:bc:
         69:9c:ed:90:b7:0c:0c:2d:0c:57:5b:a7:84:1f:4e:34:58:bf:
         db:a5:4f:91:5c:c8:98:f8:96:47:5e:98:19:5c:fd:4c:59:f0:
         36:6c:94:b8:81:46:46:24:47:4d:d1:8a:f4:57:51:92:05:23:
         6d:c9:e0:ef:cf:1c:b4:53:ef:85:ad:2c:b9:c3:f6:7a:cb:7b:
         4f:92:d8:e6:17:32:bc:3b:67:31:79:31:c4:0a:f1:ed:e0:4c:
         c5:d4:52:bd:a2:0e:10:2e:ac:4c:94:62:61:e9:d3:a7:d9:0c:
         b6:f3:f9:59:e2:cb:c2:2d:30:43:01:9d:fe:51:c2:1a:cd:ee:
         fb:90:30:2c:b3:ca:03:3e:7e:7a:1c:0a:38:da:62:49:df:44:
         38:02:87:c2:9b:59:95:bd:4a:8e:51:fc:c2:7c:b2:3a:5c:86:
         40:d2:f2:37:d4:2f:f1:81:a3:6e:b6:ff:0b:c4:d4:2f:b2:6e:
         7f:85:c6:69:ec:4b:6e:24:8b:c7:ed:63:b5:1f:f6:98:c1:4c:
         0a:18:df:10:7c:e2:11:66:62:51:15:d7:fc:a8:a3:12:fc:b1:
         2f:16:dc:3c:e3:da:19:6b:4f:87:b8:42:f6:00:fb:ce:bb:14:
         66:c5:5b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYPgHP3h5NeoQm5UKtlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGYzNDFkM2FiNTYzYjlmYzQwOTgwYWU3YzE3NDAyYzIx
NWVmMmEwHhcNMjUwNDEzMTAwMjE0WhcNMjUwNDE0MTAwMjE0WjAzMTEwLwYDVQQD
EyhkOGYyYWEzZWE5MDAwMTcxMGZlNjdjNTVmMGM4YTUzYjU4YjZmMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVMRi+KUuRGCT96+C4eEcMp0oCOo
oKDZTpWp7xPUH56CK7mSL5Be0lTp6Q2Knq/QxXiYdH3bsvh+yYVtEVZtHnuGauA1
8NFVTfc930EHfjSZMvpDAVT2N+qAjHzakvZLp6AmowrP6PPEqn98yLwYxCLP54Bt
IU+xs3PxM2VJtIQwvDdfvglfs5juHRsQMlYt3NMPFc4PAhWzu0bjyBLXD2xIs0Ny
tEnOID8f5i6/mSoWtAoig9+jVQzEG6zFE+6uIERC4nBAZ3V/rbbhts5pzef3AbzQ
0iRf8MRIr0hytpLuM8B5hWocfTcFgz1KeA3QgdnQcjyLPwRPZcC9et56wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjyqj6pAAFxD+Z8VfDIpTtYtvNmMB8GA1UdIwQY
MBaAFKEPNB06tWO5/ECYCufBdALCFe8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEt
MTc0MDcxNjVhZmU2LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEtMTc0MDcxNjVhZmU2
LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsm6gKytB
xeNvgey6nkRbY5G8aZztkLcMDC0MV1unhB9ONFi/26VPkVzImPiWR16YGVz9TFnw
NmyUuIFGRiRHTdGK9FdRkgUjbcng788ctFPvha0sucP2est7T5LY5hcyvDtnMXkx
xArx7eBMxdRSvaIOEC6sTJRiYenTp9kMtvP5WeLLwi0wQwGd/lHCGs3u+5AwLLPK
Az5+ehwKONpiSd9EOAKHwptZlb1KjlH8wnyyOlyGQNLyN9Qv8YGjbrb/C8TUL7Ju
f4XGaexLbiSLx+1jtR/2mMFMChjfEHziEWZiURXX/KijEvyxLxbcPOPaGWtPh7hC
9gD7zrsUZsVbcA==
-----END CERTIFICATE-----