Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft
File:                     oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft (raw, json)
Hash identifier:          qjrCoiP57cUt6ZF0l3AxXo/x70CRoQOze7H7bOKju8I=
Subject key identifier:   F5:56:9D:DB:5D:E1:DA:36:36:87:A2:6B:17:82:B1:C5:A7:BC:D9:2D
Authority key identifier: A1:35:7A:7D:0F:03:2E:9C:DD:4A:03:1D:52:D3:B4:04:7C:03:94:1A
Certificate issuer:       /CN=a1357a7d0f032e9cdd4a031d52d3b4047c03941a
Certificate serial:       01962DF3F65F6C45816874D3B19B721E5EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: oTV6fQ8DLpzdSgMdUtO0BHwDlBo.crl (hash: vQ3OWrBFI0V+73yn/dVn9fVcPK3kRU46t0+Y9MhZ89k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f6:5f:6c:45:81:68:74:d3:b1:9b:72:1e:5e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1357a7d0f032e9cdd4a031d52d3b4047c03941a
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=f5569ddb5de1da363687a26b1782b1c5a7bcd92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:44:90:ac:6f:5c:d4:e3:9e:f4:5b:bd:de:
                    85:8a:93:f9:e5:fd:70:1b:95:4e:95:12:7e:2e:6a:
                    ac:2a:eb:3d:fe:59:00:7c:f9:ba:31:5f:7b:c4:b3:
                    4d:88:89:23:b2:ec:2b:e6:cb:47:9c:2a:01:47:0c:
                    5e:aa:0f:2b:a7:7f:9c:20:8d:eb:1a:78:64:35:96:
                    ea:ed:6a:77:0c:54:65:b9:53:3f:e9:33:ac:bb:49:
                    2b:0a:8e:9a:fd:cc:cf:3b:31:66:67:b1:42:46:bd:
                    df:e0:8a:18:0b:38:b2:7e:07:3f:f6:ef:dc:88:1a:
                    c4:c4:47:2e:4b:b6:f3:5c:99:ce:66:26:e4:ce:37:
                    b7:5d:b2:78:2c:b8:c7:e4:fa:39:f1:5b:e5:a2:c8:
                    6f:de:f5:cd:87:e2:82:da:5f:4e:fc:d8:f6:da:95:
                    1a:26:23:55:fc:e0:e5:46:87:7f:d2:b7:a6:ac:89:
                    f2:94:3c:79:3c:17:3d:0b:cf:47:9d:50:ae:f0:09:
                    9f:d5:10:0e:01:4f:d1:89:59:e0:ff:d8:71:d4:0c:
                    2f:bc:84:e7:99:25:14:60:10:ff:69:48:da:ad:df:
                    4f:5e:11:cb:cf:4e:62:92:c8:30:8f:1c:a4:d7:73:
                    a4:50:11:40:b9:97:03:7c:6d:0c:11:ed:08:38:75:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:56:9D:DB:5D:E1:DA:36:36:87:A2:6B:17:82:B1:C5:A7:BC:D9:2D
            X509v3 Authority Key Identifier:
                keyid:A1:35:7A:7D:0F:03:2E:9C:DD:4A:03:1D:52:D3:B4:04:7C:03:94:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:35:da:b0:47:57:b3:27:69:30:3d:d3:78:67:2b:a4:7b:43:
         c2:73:e5:52:7e:93:27:aa:46:90:6a:e6:ca:74:77:ef:26:7e:
         74:14:d0:20:a5:24:5e:5b:97:b6:9e:c0:8f:e9:cb:a5:e5:4c:
         fb:63:ff:26:b1:6e:87:5b:68:46:47:94:1b:17:85:22:42:73:
         91:26:1c:ba:84:e0:29:97:be:c2:7d:3b:d4:ea:a4:07:65:ae:
         fb:47:81:39:f3:4c:dc:8e:ef:7e:73:e3:ca:3c:d4:3d:1b:99:
         be:13:6f:8f:03:09:d3:55:8a:23:21:05:d0:75:8c:7f:3e:f6:
         93:d3:8e:9e:c3:83:d0:6d:a8:85:0f:4f:ba:7d:e8:36:41:62:
         8f:d3:22:96:f3:9d:06:dd:65:e2:29:bf:d1:38:45:1d:61:03:
         92:97:a6:94:fd:b0:45:36:97:01:7e:6b:3b:54:86:04:83:1c:
         e6:55:2d:d7:2b:7b:9e:08:51:39:06:00:e1:64:c2:93:ca:4a:
         3c:54:56:15:bc:db:ce:df:55:08:c9:d7:52:3e:ab:31:39:c0:
         10:85:3d:23:e0:5f:c9:2b:61:d7:eb:59:a6:43:ba:1a:13:0d:
         25:c3:bd:18:97:25:80:a5:3e:b6:94:1a:2c:c7:f3:e0:95:32:
         13:bc:fc:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/ZfbEWBaHTTsZtyHl60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzU3YTdkMGYwMzJlOWNkZDRhMDMxZDUyZDNiNDA0N2Mw
Mzk0MWEwHhcNMjUwNDEzMDcwMTI1WhcNMjUwNDE0MDcwMTI1WjAzMTEwLwYDVQQD
EyhmNTU2OWRkYjVkZTFkYTM2MzY4N2EyNmIxNzgyYjFjNWE3YmNkOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAlEkKxvXNTjnvRbvd6FipP55f1w
G5VOlRJ+LmqsKus9/lkAfPm6MV97xLNNiIkjsuwr5stHnCoBRwxeqg8rp3+cII3r
GnhkNZbq7Wp3DFRluVM/6TOsu0krCo6a/czPOzFmZ7FCRr3f4IoYCziyfgc/9u/c
iBrExEcuS7bzXJnOZibkzje3XbJ4LLjH5Po58Vvloshv3vXNh+KC2l9O/Nj22pUa
JiNV/ODlRod/0remrInylDx5PBc9C89HnVCu8Amf1RAOAU/RiVng/9hx1AwvvITn
mSUUYBD/aUjard9PXhHLz05iksgwjxyk13OkUBFAuZcDfG0MEe0IOHVmpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVWndtd4do2NoeiaxeCscWnvNktMB8GA1UdIwQY
MBaAFKE1en0PAy6c3UoDHVLTtAR8A5QaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RWNmZROERMcHpkU2dNZFV0TzBCSHdEbEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lODQwNjAtYTJkNC00OGEzLWEwOTYt
YTBiNmFkNjcxZWUzLzEvb1RWNmZROERMcHpkU2dNZFV0TzBCSHdEbEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9lODQwNjAtYTJkNC00OGEzLWEwOTYtYTBiNmFkNjcxZWUz
LzEvb1RWNmZROERMcHpkU2dNZFV0TzBCSHdEbEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDXasEdX
sydpMD3TeGcrpHtDwnPlUn6TJ6pGkGrmynR37yZ+dBTQIKUkXluXtp7Aj+nLpeVM
+2P/JrFuh1toRkeUGxeFIkJzkSYcuoTgKZe+wn071OqkB2Wu+0eBOfNM3I7vfnPj
yjzUPRuZvhNvjwMJ01WKIyEF0HWMfz72k9OOnsOD0G2ohQ9Pun3oNkFij9MilvOd
Bt1l4im/0ThFHWEDkpemlP2wRTaXAX5rO1SGBIMc5lUt1yt7nghROQYA4WTCk8pK
PFRWFbzbzt9VCMnXUj6rMTnAEIU9I+BfySth1+tZpkO6GhMNJcO9GJclgKU+tpQa
LMfz4JUyE7z8CA==
-----END CERTIFICATE-----