Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
File:                     6C8spT8bM9G1NUaiMJXThP8jdwM.mft (raw, json)
Hash identifier:          KQdMKMEroAhSlz5Fhi4aimJfoRPQYL5+FZAlkPsUjyg=
Subject key identifier:   98:5E:78:F4:00:B2:97:8C:D8:69:48:41:5A:FA:ED:CE:D7:B1:1E:2A
Authority key identifier: E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
Certificate issuer:       /CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Certificate serial:       01962F0709AF7B60559B01EF11C2205B2FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 6C8spT8bM9G1NUaiMJXThP8jdwM.crl (hash: tG6c314+WqhVlPCDp+7RgOTNuhnj2cFnAYmpmG51VNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:09:af:7b:60:55:9b:01:ef:11:c2:20:5b:2f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82f2ca53f1b33d1b53546a23095d384ff237703
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=985e78f400b2978cd86948415afaedced7b11e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:02:56:cc:b4:31:92:8e:05:6b:4b:72:e3:
                    45:ae:68:fd:ac:23:8e:58:82:95:c6:74:52:36:30:
                    c8:1c:d8:fb:e8:99:e0:96:47:35:a3:5c:30:1a:ec:
                    ad:97:27:8d:40:9d:46:a4:c3:23:65:7d:00:c0:af:
                    1d:62:be:07:67:6d:be:5c:f6:82:20:17:86:2e:27:
                    ca:14:93:11:e5:78:4c:73:75:30:a1:bf:bc:5e:2e:
                    59:1b:c1:2f:1b:e0:24:a5:cc:23:f5:38:cd:59:e2:
                    eb:93:82:9a:f4:1e:fd:4e:39:0b:ba:b3:9d:fa:1e:
                    c5:1b:02:4b:2b:b1:71:b4:42:80:a1:45:11:c9:84:
                    8d:83:d8:cf:bf:0b:fc:20:48:28:d5:77:59:b5:b2:
                    0e:24:45:7d:7c:b3:6d:92:2d:2e:fd:07:1e:d4:37:
                    55:92:08:d8:51:0c:a7:7a:72:67:b5:84:ab:d2:f9:
                    38:bc:bb:23:83:d5:fe:9e:ae:1f:dc:f8:9f:c2:2b:
                    86:48:07:5a:0c:44:83:1a:9e:c2:e4:14:a5:01:4f:
                    05:4a:c2:96:59:96:cb:67:fc:d3:d2:a9:6f:ca:37:
                    a8:28:c5:3b:7f:71:42:5c:42:ef:80:77:ea:ba:c9:
                    3f:a4:f1:f2:f5:ce:c3:e1:73:9d:21:c7:a2:ef:e2:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:78:F4:00:B2:97:8C:D8:69:48:41:5A:FA:ED:CE:D7:B1:1E:2A
            X509v3 Authority Key Identifier:
                keyid:E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:da:0c:b1:f7:fc:2a:77:32:41:4d:f3:b6:fe:45:0b:a9:4b:
         61:0c:75:a3:bc:8b:48:bc:ec:b8:46:d4:43:54:f2:f1:69:c8:
         31:c9:ca:81:d6:35:5c:31:b3:97:b5:e6:08:53:2a:95:5e:14:
         de:a6:5f:93:3e:74:0c:a1:40:0c:63:cf:4b:fe:9d:df:ad:0d:
         8c:48:51:71:bd:b8:a9:90:e9:b1:7e:ae:08:d1:f1:96:b2:95:
         d4:25:29:be:ca:3c:ca:06:36:8f:92:b2:37:f8:9d:11:91:cc:
         ae:2e:83:57:b4:24:01:de:4b:3b:ca:2e:48:fc:b0:a4:02:b4:
         7e:90:64:09:4b:d7:9c:71:53:e6:7d:09:26:bc:8c:e6:8e:c4:
         67:c6:38:3d:eb:80:16:74:52:6f:0d:18:c1:8f:52:6c:60:db:
         69:f2:1e:11:f5:a8:85:6e:33:20:92:a3:37:bc:89:3e:9e:0d:
         7c:83:11:ce:8a:d5:1c:e0:89:f5:df:7e:1e:bd:ff:0e:6a:eb:
         5b:a4:66:b8:e9:52:5a:5b:49:5b:e2:f0:d5:00:66:ad:d4:54:
         3e:2c:0a:77:8f:0f:e5:17:5f:69:2e:57:dd:b3:7b:79:5a:99:
         8a:3c:88:b0:fc:9f:ff:de:9a:5e:65:fc:d3:7c:3f:37:27:f8:
         a2:c8:54:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwmve2BVmwHvEcIgWy+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MmYyY2E1M2YxYjMzZDFiNTM1NDZhMjMwOTVkMzg0ZmYy
Mzc3MDMwHhcNMjUwNDEzMTIwMTUyWhcNMjUwNDE0MTIwMTUyWjAzMTEwLwYDVQQD
Eyg5ODVlNzhmNDAwYjI5NzhjZDg2OTQ4NDE1YWZhZWRjZWQ3YjExZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMECVsy0MZKOBWtLcuNFrmj9rCOO
WIKVxnRSNjDIHNj76Jnglkc1o1wwGuytlyeNQJ1GpMMjZX0AwK8dYr4HZ22+XPaC
IBeGLifKFJMR5XhMc3Uwob+8Xi5ZG8EvG+Akpcwj9TjNWeLrk4Ka9B79TjkLurOd
+h7FGwJLK7FxtEKAoUURyYSNg9jPvwv8IEgo1XdZtbIOJEV9fLNtki0u/Qce1DdV
kgjYUQynenJntYSr0vk4vLsjg9X+nq4f3PifwiuGSAdaDESDGp7C5BSlAU8FSsKW
WZbLZ/zT0qlvyjeoKMU7f3FCXELvgHfqusk/pPHy9c7D4XOdIcei7+IuWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJheePQAspeM2GlIQVr67c7XsR4qMB8GA1UdIwQY
MBaAFOgvLKU/GzPRtTVGojCV04T/I3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUt
NWY5MjI5YjI2MWI1LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUtNWY5MjI5YjI2MWI1
LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdoMsff8
KncyQU3ztv5FC6lLYQx1o7yLSLzsuEbUQ1Ty8WnIMcnKgdY1XDGzl7XmCFMqlV4U
3qZfkz50DKFADGPPS/6d360NjEhRcb24qZDpsX6uCNHxlrKV1CUpvso8ygY2j5Ky
N/idEZHMri6DV7QkAd5LO8ouSPywpAK0fpBkCUvXnHFT5n0JJryM5o7EZ8Y4PeuA
FnRSbw0YwY9SbGDbafIeEfWohW4zIJKjN7yJPp4NfIMRzorVHOCJ9d9+Hr3/Dmrr
W6RmuOlSWltJW+Lw1QBmrdRUPiwKd48P5RdfaS5X3bN7eVqZijyIsPyf/96aXmX8
03w/Nyf4oshUEw==
-----END CERTIFICATE-----