Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
File:                     ardZKec1zmWma9gtyotlHZhWzSw.mft (raw, json)
Hash identifier:          doLA+3cxNJ09gk8JHgXQZZrc14FqcYsgCV//RKE94xY=
Subject key identifier:   6E:16:57:DC:CB:EB:FB:C7:86:03:76:2C:F9:5D:CD:A1:6C:94:DC:34
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Certificate issuer:       /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial:       01962F7493008999CE43000E4B66B2F089EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft
Manifest number:          1138
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: ardZKec1zmWma9gtyotlHZhWzSw.crl (hash: 5+kncSqsfZ1HxoEJkz8BrORIMFn4mFIA90Y+DQyQhO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:93:00:89:99:ce:43:00:0e:4b:66:b2:f0:89:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=6e1657dccbebfbc78603762cf95dcda16c94dc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:05:0d:e7:c2:c4:17:7d:bf:0a:ad:4b:51:
                    15:32:29:5e:b9:93:d0:d4:a8:25:37:53:ed:60:b8:
                    84:77:c7:fa:b6:eb:f4:81:b4:e7:7e:3d:3d:bf:2d:
                    ec:6f:09:7a:19:0d:91:fd:d4:36:f7:3f:1b:83:02:
                    5f:29:76:f7:85:18:db:7e:7e:b2:5a:42:36:a6:ce:
                    83:48:5f:a7:5f:97:d6:94:81:6d:24:39:a5:89:be:
                    10:e8:8e:24:cf:d6:6b:ef:43:aa:3f:f4:77:14:d4:
                    84:0c:aa:d0:67:19:b5:b2:c4:c9:e7:c4:f3:71:af:
                    a5:29:1a:12:2e:9c:77:f6:c3:5d:93:f9:96:7b:0d:
                    61:23:0d:7e:57:a5:cc:1b:78:15:33:96:f9:94:f8:
                    3e:a4:ee:5c:f9:05:4b:d2:60:ca:36:40:ed:36:7d:
                    f9:64:5c:41:4a:8b:7d:0d:49:8f:3d:8e:d7:80:64:
                    a1:99:b5:36:43:92:7b:1f:9b:47:1d:d3:77:32:de:
                    12:50:15:2e:5e:49:4b:41:df:a3:7a:cd:f7:89:2d:
                    56:ec:79:1f:88:2d:ae:15:f2:0b:46:5f:67:ad:38:
                    f7:c4:78:af:5b:93:c1:16:85:19:e4:02:b0:7a:a6:
                    a3:e2:5c:1a:d8:70:f0:72:27:7d:b3:62:e5:4e:cb:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:57:DC:CB:EB:FB:C7:86:03:76:2C:F9:5D:CD:A1:6C:94:DC:34
            X509v3 Authority Key Identifier:
                keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ad:19:ff:c9:3a:73:c6:81:d6:a3:34:d6:05:17:22:c7:05:
         1a:24:12:c2:5a:2a:44:ff:02:eb:50:c1:16:48:dc:c8:ee:0c:
         2c:fd:f8:9b:2b:b5:1a:cc:78:3d:36:d5:19:c7:8c:e2:71:93:
         06:6e:37:22:6a:b4:36:79:b0:f4:58:a1:90:59:b5:7d:82:c6:
         16:b4:ee:a5:67:ca:a1:db:65:e0:7b:3b:bf:79:40:bb:00:46:
         b7:77:1e:07:02:53:4c:60:4a:e4:84:54:89:8e:ec:27:df:c5:
         d4:9b:55:1f:d1:ed:73:75:9e:b1:e3:ac:7f:54:30:16:43:11:
         01:c2:52:20:bf:5e:85:8a:14:3a:1f:70:73:b0:ba:b8:c4:e0:
         1a:b6:09:0e:d9:c9:99:5f:1d:a2:75:19:d0:9c:9c:fd:7b:fb:
         43:39:32:d1:b8:57:a4:2f:62:91:60:70:83:93:31:16:01:e5:
         32:3f:8a:51:88:46:69:ac:a4:52:eb:68:9d:86:d3:bd:a2:46:
         b4:69:c3:ae:81:07:9b:88:8e:2c:ce:0d:cc:70:04:1b:cf:75:
         c1:0e:c3:ee:d6:35:55:6a:08:6e:8b:b5:b5:9c:bc:e5:54:ab:
         0b:00:98:c2:c6:1d:df:5d:9f:4a:10:0b:c5:42:af:e6:23:29:
         3a:a5:42:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJMAiZnOQwAOS2ay8InsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjc1OTI5ZTczNWNlNjVhNjZiZDgyZGNhOGI2NTFkOTg1
NmNkMmMwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
Eyg2ZTE2NTdkY2NiZWJmYmM3ODYwMzc2MmNmOTVkY2RhMTZjOTRkYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcIFDefCxBd9vwqtS1EVMileuZPQ
1KglN1PtYLiEd8f6tuv0gbTnfj09vy3sbwl6GQ2R/dQ29z8bgwJfKXb3hRjbfn6y
WkI2ps6DSF+nX5fWlIFtJDmlib4Q6I4kz9Zr70OqP/R3FNSEDKrQZxm1ssTJ58Tz
ca+lKRoSLpx39sNdk/mWew1hIw1+V6XMG3gVM5b5lPg+pO5c+QVL0mDKNkDtNn35
ZFxBSot9DUmPPY7XgGShmbU2Q5J7H5tHHdN3Mt4SUBUuXklLQd+jes33iS1W7Hkf
iC2uFfILRl9nrTj3xHivW5PBFoUZ5AKweqaj4lwa2HDwcid9s2LlTsvfnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4WV9zL6/vHhgN2LPldzaFslNw0MB8GA1UdIwQY
MBaAFGq3WSnnNc5lpmvYLcqLZR2YVs0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJkWktlYzF6bVdtYTlndHlvdGxIWmhXelN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85ZDFjOGYtYzYzNC00NmFhLWFmZjgt
N2MyYjIxZmY2Y2ViLzEvYXJkWktlYzF6bVdtYTlndHlvdGxIWmhXelN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85ZDFjOGYtYzYzNC00NmFhLWFmZjgtN2MyYjIxZmY2Y2Vi
LzEvYXJkWktlYzF6bVdtYTlndHlvdGxIWmhXelN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAta0Z/8k6
c8aB1qM01gUXIscFGiQSwloqRP8C61DBFkjcyO4MLP34myu1Gsx4PTbVGceM4nGT
Bm43Imq0Nnmw9FihkFm1fYLGFrTupWfKodtl4Hs7v3lAuwBGt3ceBwJTTGBK5IRU
iY7sJ9/F1JtVH9Htc3WeseOsf1QwFkMRAcJSIL9ehYoUOh9wc7C6uMTgGrYJDtnJ
mV8donUZ0Jyc/Xv7Qzky0bhXpC9ikWBwg5MxFgHlMj+KUYhGaaykUutonYbTvaJG
tGnDroEHm4iOLM4NzHAEG891wQ7D7tY1VWoIbou1tZy85VSrCwCYwsYd312fShAL
xUKv5iMpOqVCIg==
-----END CERTIFICATE-----