Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File:                     crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier:          2IPoOAT+NjD64E51dlQ71ZuqYbSKYAh7ZCXrK6JYG7w=
Subject key identifier:   1B:19:08:D3:95:7C:A0:BD:08:84:D6:10:D7:12:27:56:60:D8:53:F5
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer:       /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial:       01962DF41A82C092C40F045F48A982F48ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number:          07D8
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: bp0mzG5cfZC2X7vp1CdTIED4e9GaNawDrPmHC8PrKj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1a:82:c0:92:c4:0f:04:5f:48:a9:82:f4:8e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=1b1908d3957ca0bd0884d610d712275660d853f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:a9:23:e3:29:70:35:7c:d6:25:85:c5:64:
                    cf:28:28:f2:54:c3:44:01:f5:8c:65:3d:7e:a8:de:
                    06:19:df:5e:5e:c3:fc:b1:c8:fa:5d:82:75:b8:1f:
                    5d:ac:74:a3:b8:ee:3e:fe:e1:70:d4:a9:89:43:c6:
                    87:02:10:59:c7:47:b9:9e:22:a7:7d:2a:b4:fb:43:
                    bd:40:0b:6e:59:54:81:ae:e6:cb:5c:2e:58:ec:d9:
                    d0:55:bb:58:c4:73:aa:62:cb:c8:6a:c8:79:ab:2e:
                    6e:26:d9:d1:51:d3:74:99:fb:8f:3a:28:16:8c:6c:
                    03:a3:16:64:ff:16:2b:0c:26:ba:40:c7:87:06:33:
                    7f:4f:6e:28:35:9f:64:c2:1c:03:57:6d:ff:85:a6:
                    9f:7b:a1:b8:36:fd:ce:d0:4d:a0:70:e2:f9:5f:13:
                    39:68:61:b5:6e:5b:db:6c:6c:6f:b5:ac:d1:eb:0d:
                    b3:99:70:4c:25:44:16:10:83:c0:8d:99:73:10:97:
                    c3:28:37:ac:80:8a:fd:47:9c:12:f8:5b:ba:fd:d8:
                    5b:3e:b0:d1:bf:18:db:5a:07:b8:47:7d:e7:42:41:
                    f8:cd:0b:a3:db:f4:78:fb:bd:e3:2d:3f:a2:f5:8c:
                    b4:7b:d0:48:54:e2:01:72:3f:9d:0c:c0:ff:83:93:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:19:08:D3:95:7C:A0:BD:08:84:D6:10:D7:12:27:56:60:D8:53:F5
            X509v3 Authority Key Identifier:
                keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:79:25:4a:86:ed:db:34:ed:32:a8:3d:f0:52:d4:80:fe:c4:
         3f:18:ac:34:ce:46:89:39:46:2d:91:6b:4f:95:66:46:f5:2c:
         d8:9e:a8:13:af:0e:4c:e2:3a:1a:5a:02:3f:58:3c:dc:8a:4b:
         be:17:c1:ee:41:35:72:0d:2e:4f:92:f3:65:f0:42:4b:d8:e8:
         1f:24:01:dd:56:aa:55:ff:94:be:68:d0:67:2b:f9:60:8f:09:
         dc:76:6f:17:75:8b:31:04:08:40:16:d1:94:10:56:04:2b:d3:
         9a:64:e8:09:92:bb:c9:6c:08:7b:04:44:02:a3:a8:c3:04:06:
         58:ca:8c:b4:9e:7b:3a:06:7c:b3:33:ef:13:9f:0d:8f:8c:09:
         26:9f:84:4b:65:24:ec:aa:3f:b7:11:ca:98:e6:6e:57:46:66:
         77:af:71:7a:f3:26:04:27:1f:1c:e6:c7:18:7d:86:54:9f:08:
         d3:ff:cd:ad:6c:4c:85:11:6e:51:2e:88:cd:b2:e2:b0:84:91:
         09:e7:0e:87:02:19:17:df:07:7e:d1:98:0a:6f:39:c7:d8:88:
         5a:cf:6a:94:66:ca:78:28:3e:49:79:fc:bf:d2:5f:d6:3f:87:
         da:d8:d1:95:2f:6a:0d:5a:9b:58:19:a8:94:2a:57:7a:16:a2:
         26:3e:c4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BqCwJLEDwRfSKmC9I7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmIxZGM5OTZiOWUwYTNmYTY2MzJjZjgwN2E3YzIwNTA5
NDljNDYwHhcNMjUwNDEzMDcwMTM0WhcNMjUwNDE0MDcwMTM0WjAzMTEwLwYDVQQD
EygxYjE5MDhkMzk1N2NhMGJkMDg4NGQ2MTBkNzEyMjc1NjYwZDg1M2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVWpI+MpcDV81iWFxWTPKCjyVMNE
AfWMZT1+qN4GGd9eXsP8scj6XYJ1uB9drHSjuO4+/uFw1KmJQ8aHAhBZx0e5niKn
fSq0+0O9QAtuWVSBrubLXC5Y7NnQVbtYxHOqYsvIash5qy5uJtnRUdN0mfuPOigW
jGwDoxZk/xYrDCa6QMeHBjN/T24oNZ9kwhwDV23/haafe6G4Nv3O0E2gcOL5XxM5
aGG1blvbbGxvtazR6w2zmXBMJUQWEIPAjZlzEJfDKDesgIr9R5wS+Fu6/dhbPrDR
vxjbWge4R33nQkH4zQuj2/R4+73jLT+i9Yy0e9BIVOIBcj+dDMD/g5McfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsZCNOVfKC9CITWENcSJ1Zg2FP1MB8GA1UdIwQY
MBaAFHK7HcmWueCj+mYyz4B6fCBQlJxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUt
ZmE1OWRjMmE0NjNiLzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUtZmE1OWRjMmE0NjNi
LzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXklSobt
2zTtMqg98FLUgP7EPxisNM5GiTlGLZFrT5VmRvUs2J6oE68OTOI6GloCP1g83IpL
vhfB7kE1cg0uT5LzZfBCS9joHyQB3VaqVf+UvmjQZyv5YI8J3HZvF3WLMQQIQBbR
lBBWBCvTmmToCZK7yWwIewREAqOowwQGWMqMtJ57OgZ8szPvE58Nj4wJJp+ES2Uk
7Ko/txHKmOZuV0Zmd69xevMmBCcfHObHGH2GVJ8I0//NrWxMhRFuUS6IzbLisISR
CecOhwIZF98HftGYCm85x9iIWs9qlGbKeCg+SXn8v9Jf1j+H2tjRlS9qDVqbWBmo
lCpXehaiJj7EzA==
-----END CERTIFICATE-----