Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File:                     UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier:          rE538ofVOmBe9xTkMBNg3g7b2BoRp4jourRTQ41pNsY=
Subject key identifier:   D9:34:CA:1F:22:50:AC:6C:4C:A9:8C:45:95:F9:82:B0:51:11:C5:3D
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer:       /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial:       01962E2B378C3837CC3CE2A0AFA4B6DBEAAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number:          0271
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: J1m37tgE2JK8utwOB3voyJ65b01XkiAiQIui4GUHWCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:37:8c:38:37:cc:3c:e2:a0:af:a4:b6:db:ea:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=d934ca1f2250ac6c4ca98c4595f982b05111c53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:ec:6c:3b:18:c4:d8:f7:77:0e:e4:cb:be:
                    22:cf:00:0a:0a:70:9b:71:17:b2:a7:de:0f:93:14:
                    75:b9:d5:86:29:27:00:b2:0b:5a:b5:91:4d:9d:de:
                    69:7f:0b:32:59:ec:06:85:0a:6f:97:3c:9e:de:d7:
                    b0:5f:ef:6d:5e:ec:f6:38:5e:54:ba:98:38:1c:75:
                    88:86:63:8d:c5:4b:d3:b2:09:b2:0e:0d:51:02:87:
                    c2:f9:f7:a4:4b:87:02:b0:52:84:73:7a:1c:d2:d9:
                    70:e7:0f:e1:13:b4:6c:85:da:de:e3:e4:7e:dc:72:
                    47:6d:62:89:2e:56:38:86:63:2b:05:dc:72:72:8a:
                    d5:b9:31:4a:47:af:6f:c5:d2:eb:20:86:16:a8:c8:
                    96:52:3b:18:ca:67:22:43:d1:34:6f:87:c6:53:5f:
                    bf:14:22:3c:9a:45:7d:de:c2:dd:72:e6:e9:17:ae:
                    53:26:25:76:72:fc:7b:f5:51:1e:88:43:42:47:a5:
                    07:b8:e3:98:98:62:e6:81:27:7a:e3:92:bb:5c:6f:
                    dd:e2:f1:9b:ac:ba:a1:4c:c3:f8:0a:6e:9d:0b:1e:
                    74:91:cd:f7:36:5a:7d:18:2b:22:1e:27:2d:e8:14:
                    3e:36:e3:f0:84:c2:41:7b:f6:96:26:36:0e:d0:fb:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:CA:1F:22:50:AC:6C:4C:A9:8C:45:95:F9:82:B0:51:11:C5:3D
            X509v3 Authority Key Identifier:
                keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:8e:90:73:f6:60:c8:6d:86:8d:54:f8:48:25:b2:79:ff:
         42:f8:53:96:13:38:38:52:aa:a0:7b:a2:6f:6f:1c:38:ff:d8:
         dc:9b:8d:b0:4c:06:5e:c7:e1:13:4e:8c:b2:c4:96:1a:41:79:
         4b:f6:e5:3c:42:3e:25:44:aa:8e:43:cf:2a:3d:7c:24:03:69:
         92:f0:c2:0d:f8:f8:3f:6a:a4:21:34:85:db:70:c2:f7:4b:a8:
         c8:6e:ee:38:2c:50:be:4c:0a:0a:69:e7:5e:3a:1a:02:f3:fa:
         75:57:75:56:d7:80:65:38:6e:37:c0:e6:62:ce:a0:af:c4:ce:
         13:b6:88:5e:cd:ac:dd:2a:fc:53:2a:ee:81:28:55:c3:17:c8:
         ce:23:bd:3f:2d:24:89:18:36:32:48:2f:e9:83:91:45:b1:ed:
         a3:d1:17:92:11:d8:e2:01:74:3d:36:03:be:f9:59:0f:38:06:
         82:b5:3e:07:f7:e2:44:97:da:16:09:96:d1:5a:af:1d:f2:8b:
         0c:4e:5f:72:6d:5a:e0:d6:59:60:e9:18:e3:ce:e3:c8:02:23:
         fe:b2:bb:f0:fc:59:bd:52:85:0e:39:18:c7:a6:5e:16:e7:d2:
         c0:00:ef:6e:73:c8:d9:e5:5c:47:8d:9c:dd:76:41:2c:60:96:
         d0:4e:8f:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzeMODfMPOKgr6S22+qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwODI2OTZmYmM0MWQ5MDYxNjhhNjBjZTA5NDk0OTAyMmNm
NjI5ZTgwHhcNMjUwNDEzMDgwMTQ2WhcNMjUwNDE0MDgwMTQ2WjAzMTEwLwYDVQQD
EyhkOTM0Y2ExZjIyNTBhYzZjNGNhOThjNDU5NWY5ODJiMDUxMTFjNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4afsbDsYxNj3dw7ky74izwAKCnCb
cReyp94PkxR1udWGKScAsgtatZFNnd5pfwsyWewGhQpvlzye3tewX+9tXuz2OF5U
upg4HHWIhmONxUvTsgmyDg1RAofC+fekS4cCsFKEc3oc0tlw5w/hE7Rshdre4+R+
3HJHbWKJLlY4hmMrBdxycorVuTFKR69vxdLrIIYWqMiWUjsYymciQ9E0b4fGU1+/
FCI8mkV93sLdcubpF65TJiV2cvx79VEeiENCR6UHuOOYmGLmgSd645K7XG/d4vGb
rLqhTMP4Cm6dCx50kc33Nlp9GCsiHict6BQ+NuPwhMJBe/aWJjYO0Puj8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk0yh8iUKxsTKmMRZX5grBREcU9MB8GA1UdIwQY
MBaAFFCCaW+8QdkGFopgzglJSQIs9inoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUlKcGI3eEIyUVlXaW1ET0NVbEpBaXoyS2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hOWYwYmItODZmNi00Y2EzLWE1M2Yt
MmU5NzIxZDg2YzNkLzEvVUlKcGI3eEIyUVlXaW1ET0NVbEpBaXoyS2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hOWYwYmItODZmNi00Y2EzLWE1M2YtMmU5NzIxZDg2YzNk
LzEvVUlKcGI3eEIyUVlXaW1ET0NVbEpBaXoyS2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADySOkHP2
YMhtho1U+Eglsnn/QvhTlhM4OFKqoHuib28cOP/Y3JuNsEwGXsfhE06MssSWGkF5
S/blPEI+JUSqjkPPKj18JANpkvDCDfj4P2qkITSF23DC90uoyG7uOCxQvkwKCmnn
XjoaAvP6dVd1VteAZThuN8DmYs6gr8TOE7aIXs2s3Sr8UyrugShVwxfIziO9Py0k
iRg2Mkgv6YORRbHto9EXkhHY4gF0PTYDvvlZDzgGgrU+B/fiRJfaFgmW0VqvHfKL
DE5fcm1a4NZZYOkY487jyAIj/rK78PxZvVKFDjkYx6ZeFufSwADvbnPI2eVcR42c
3XZBLGCW0E6P+A==
-----END CERTIFICATE-----