Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File:                     8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier:          mUqTZYt05n37A/78nIODrJMhf0mUAbgOKE2wZiGFwic=
Subject key identifier:   09:1F:8A:70:1E:E0:AC:D6:9F:43:3C:A2:02:AA:57:CF:D5:61:AB:A4
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer:       /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial:       01962FAB92EAB48F97E655525E49483BED72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: mQY6Mne01botk9tAiV20e6vrmf6+thNkoKRTe0db050=)
                          2: PKwMXWtc8zi6lG0zPr4Lt6yvauU.roa (hash: b1FZV9Y7SIyLBl239X/9J22IOe+GTQHWzBo3nom91OY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:ea:b4:8f:97:e6:55:52:5e:49:48:3b:ed:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=091f8a701ee0acd69f433ca202aa57cfd561aba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:34:87:98:29:9c:12:51:ba:b9:b7:e6:22:
                    0b:bd:19:57:90:13:b0:cf:07:dd:e8:a0:a3:80:4f:
                    2c:3e:b0:60:8c:48:c3:ae:61:42:b0:5f:4d:bf:bc:
                    c6:0c:f8:db:69:e5:e0:76:ea:d9:c2:8a:2c:99:93:
                    4b:f7:e5:88:3c:5b:88:92:97:09:b4:9c:d7:f7:51:
                    0e:6a:48:2e:6e:2b:71:b0:07:f9:c2:cd:60:f8:8f:
                    44:3e:34:44:58:7d:5a:a4:a4:da:c0:fd:aa:83:36:
                    8a:2c:8f:69:c3:b3:fb:52:9d:5a:a7:8d:56:f8:02:
                    e6:12:88:11:b4:9e:e8:81:fa:3b:4a:1a:a9:85:b2:
                    e7:19:b5:35:d7:db:21:c8:d0:50:fe:0c:c6:2f:d0:
                    30:51:75:aa:a3:58:2f:5b:4c:20:ee:d2:ba:a9:5f:
                    f0:0b:8e:5d:05:63:ed:15:fa:58:35:6c:38:ea:e5:
                    c4:45:16:eb:45:80:9e:42:3c:13:a9:d7:72:68:b4:
                    30:4e:5b:79:d2:ec:04:b1:73:20:86:15:48:26:c2:
                    50:f3:63:c3:96:82:0a:53:88:30:92:f3:12:a6:f0:
                    12:88:ad:26:ae:61:91:17:b1:57:5a:7a:db:26:50:
                    eb:a5:a6:9d:4e:86:7b:e7:e6:97:37:17:8f:64:6a:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1F:8A:70:1E:E0:AC:D6:9F:43:3C:A2:02:AA:57:CF:D5:61:AB:A4
            X509v3 Authority Key Identifier:
                keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:04:c6:04:91:5b:60:0f:c8:8d:1d:bb:42:a2:b1:84:28:8d:
         80:f6:33:cd:77:3a:a8:04:20:40:39:e9:20:58:8c:9d:d8:4e:
         4e:4e:8b:5f:75:ef:9f:6c:09:8e:69:eb:54:7a:ed:dd:2b:0a:
         18:4d:97:e4:1f:80:78:02:e6:3d:c5:69:ad:4b:43:69:cb:87:
         82:c9:bf:31:7c:1c:2e:4c:d9:58:cb:4f:d4:66:2e:30:ed:9d:
         56:06:4c:b4:9b:85:df:88:9a:5a:da:9e:b2:92:8c:de:9d:ae:
         aa:54:79:ce:bc:3b:2b:49:08:35:de:da:12:b8:01:68:ed:96:
         26:18:11:d6:be:46:16:98:7a:69:f6:33:99:77:78:6f:c2:5b:
         8b:2c:a6:97:8e:84:a1:db:5b:81:ed:36:1a:b5:17:95:78:cf:
         22:e6:0c:66:e0:29:28:c6:6f:5d:df:e3:00:74:22:ab:2a:09:
         03:56:c4:96:48:07:5b:7e:f5:ce:c1:3f:82:88:b2:30:90:79:
         fc:d1:20:b3:47:93:72:7f:a0:43:0b:da:ff:22:9b:cc:d3:0a:
         dc:c5:5f:83:77:53:93:95:21:40:9d:8a:f1:61:fe:8b:ef:33:
         9e:74:fb:5b:5c:09:7b:13:ae:c1:39:95:42:0c:43:29:64:a9:
         1c:d7:a1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5LqtI+X5lVSXklIO+1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm
NjU3ZmIwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
EygwOTFmOGE3MDFlZTBhY2Q2OWY0MzNjYTIwMmFhNTdjZmQ1NjFhYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5A0h5gpnBJRurm35iILvRlXkBOw
zwfd6KCjgE8sPrBgjEjDrmFCsF9Nv7zGDPjbaeXgdurZwoosmZNL9+WIPFuIkpcJ
tJzX91EOakgubitxsAf5ws1g+I9EPjREWH1apKTawP2qgzaKLI9pw7P7Up1ap41W
+ALmEogRtJ7ogfo7ShqphbLnGbU119shyNBQ/gzGL9AwUXWqo1gvW0wg7tK6qV/w
C45dBWPtFfpYNWw46uXERRbrRYCeQjwTqddyaLQwTlt50uwEsXMghhVIJsJQ82PD
loIKU4gwkvMSpvASiK0mrmGRF7FXWnrbJlDrpaadToZ75+aXNxePZGpI7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkfinAe4KzWn0M8ogKqV8/VYaukMB8GA1UdIwQY
MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt
ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi
LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgTGBJFb
YA/IjR27QqKxhCiNgPYzzXc6qAQgQDnpIFiMndhOTk6LX3Xvn2wJjmnrVHrt3SsK
GE2X5B+AeALmPcVprUtDacuHgsm/MXwcLkzZWMtP1GYuMO2dVgZMtJuF34iaWtqe
spKM3p2uqlR5zrw7K0kINd7aErgBaO2WJhgR1r5GFph6afYzmXd4b8Jbiyyml46E
odtbge02GrUXlXjPIuYMZuApKMZvXd/jAHQiqyoJA1bElkgHW371zsE/goiyMJB5
/NEgs0eTcn+gQwva/yKbzNMK3MVfg3dTk5UhQJ2K8WH+i+8znnT7W1wJexOuwTmV
QgxDKWSpHNehyw==
-----END CERTIFICATE-----