Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File:                     sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier:          ZIpiYIJ+r4jS3MSY6SCLGpPta1esr5UeBe0UkB8Tv5M=
Subject key identifier:   AC:70:D5:DA:2D:F8:24:A2:B0:2C:46:83:64:63:8B:7B:2A:2D:5A:7C
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer:       /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial:       01962E98D8E42631DA7D2F5CB3F2F933CEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number:          1200
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: 4IDHjiEwuL9HM1UH4IK2h3xHNztCyLuf15CpDaqlVh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:e4:26:31:da:7d:2f:5c:b3:f2:f9:33:ce:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=ac70d5da2df824a2b02c468364638b7b2a2d5a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:fd:2e:46:0b:75:7d:eb:58:85:9d:73:6b:
                    9b:07:9b:0f:df:0e:e2:8c:68:42:7c:6c:1d:2d:c4:
                    6f:8e:e7:b6:e9:a5:cd:4f:2a:41:bd:37:64:e1:55:
                    e5:d1:a0:37:38:9c:6b:dc:7e:00:31:a4:fc:b0:b1:
                    59:dc:d7:11:9e:3a:8a:7c:94:a7:5a:53:7c:b2:49:
                    99:c4:15:bc:5d:cd:cf:94:3d:68:b6:28:36:64:ef:
                    e8:97:e9:89:a7:ff:9d:50:28:8e:57:b3:39:97:ad:
                    ed:c7:78:3e:57:1f:3a:6e:a9:16:f4:f1:43:c6:c7:
                    b6:ed:f3:5f:87:df:ac:53:de:5e:4a:62:1f:f7:7d:
                    46:e9:33:6d:84:27:12:4f:df:55:91:b5:ac:17:8f:
                    18:5b:2d:0e:93:43:65:f6:11:13:e1:4f:8f:45:c5:
                    0a:a3:69:21:10:8a:33:34:d9:41:4d:98:dc:2c:8a:
                    1e:bc:87:25:e1:6f:ac:c6:c3:63:79:ad:f6:5c:6f:
                    93:bc:f2:18:1d:2c:5f:f7:ef:6b:1f:d7:1d:08:c4:
                    0f:74:bf:3b:13:59:10:83:88:45:b1:69:e2:58:ce:
                    f3:01:a1:98:74:5f:b9:7b:3c:01:a4:f0:03:31:da:
                    d8:f4:35:1e:94:85:4e:98:87:a4:f5:ad:45:35:18:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:70:D5:DA:2D:F8:24:A2:B0:2C:46:83:64:63:8B:7B:2A:2D:5A:7C
            X509v3 Authority Key Identifier:
                keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:98:4a:b9:11:34:6a:ec:ba:b6:06:1c:d6:4a:b1:81:d9:
         4b:1b:93:06:a8:ee:df:89:57:a6:b0:eb:2f:ea:36:ec:49:ab:
         8f:13:80:10:7b:ed:e2:a5:81:cf:03:b2:b7:82:15:9c:70:9f:
         e1:36:4e:87:5f:6d:c2:a0:68:d1:32:b1:c3:6f:65:23:ae:e4:
         7f:61:8d:27:9e:89:97:b7:75:0a:53:65:79:7e:3b:4b:45:e3:
         5c:fc:e4:96:bd:7f:19:30:2a:58:c0:62:d8:f2:8f:a6:34:0d:
         35:3c:f3:0c:b7:08:8e:c3:14:c2:e4:01:74:bb:a5:23:40:3d:
         46:14:f7:74:76:58:cd:98:dc:52:ca:9a:5a:07:90:60:41:c8:
         9e:dd:74:b7:bd:3a:ef:7f:a2:55:eb:d5:1c:fd:80:1f:62:f5:
         d6:45:89:98:88:86:cc:62:12:d3:1e:6b:43:17:a1:81:ea:77:
         c6:c4:e4:1f:35:8d:9a:4d:2c:29:04:32:3b:dd:54:86:76:88:
         5a:16:29:e0:d7:5d:6d:15:81:09:c4:5f:48:e5:6e:8c:87:19:
         b2:5f:27:e7:09:3b:a6:b8:40:2e:bf:16:5c:43:6b:a0:ec:74:
         6a:d7:83:57:85:93:a3:d5:d3:bd:5b:9f:4c:08:d2:3e:b2:20:
         aa:ac:75:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNjkJjHafS9cs/L5M87hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDcxMzE2NWFjNjI4NGZiNDFkNWRmYzgyNjU3N2ZjMWRh
MGI3MzAwHhcNMjUwNDEzMTAwMTMxWhcNMjUwNDE0MTAwMTMxWjAzMTEwLwYDVQQD
EyhhYzcwZDVkYTJkZjgyNGEyYjAyYzQ2ODM2NDYzOGI3YjJhMmQ1YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4T9LkYLdX3rWIWdc2ubB5sP3w7i
jGhCfGwdLcRvjue26aXNTypBvTdk4VXl0aA3OJxr3H4AMaT8sLFZ3NcRnjqKfJSn
WlN8skmZxBW8Xc3PlD1otig2ZO/ol+mJp/+dUCiOV7M5l63tx3g+Vx86bqkW9PFD
xse27fNfh9+sU95eSmIf931G6TNthCcST99VkbWsF48YWy0Ok0Nl9hET4U+PRcUK
o2khEIozNNlBTZjcLIoevIcl4W+sxsNjea32XG+TvPIYHSxf9+9rH9cdCMQPdL87
E1kQg4hFsWniWM7zAaGYdF+5ezwBpPADMdrY9DUelIVOmIek9a1FNRiQVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxw1dot+CSisCxGg2Rji3sqLVp8MB8GA1UdIwQY
MBaAFLDXExZaxihPtB1d/IJld/wdoLcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05jVEZsckdLRS0wSFYzOGdtVjNfQjJndHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yODRiM2UtMmQ0Zi00MTJhLTg4NjIt
NTM5ZTFhYzgyMWQ3LzEvc05jVEZsckdLRS0wSFYzOGdtVjNfQjJndHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yODRiM2UtMmQ0Zi00MTJhLTg4NjItNTM5ZTFhYzgyMWQ3
LzEvc05jVEZsckdLRS0wSFYzOGdtVjNfQjJndHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg+YSrkR
NGrsurYGHNZKsYHZSxuTBqju34lXprDrL+o27EmrjxOAEHvt4qWBzwOyt4IVnHCf
4TZOh19twqBo0TKxw29lI67kf2GNJ56Jl7d1ClNleX47S0XjXPzklr1/GTAqWMBi
2PKPpjQNNTzzDLcIjsMUwuQBdLulI0A9RhT3dHZYzZjcUsqaWgeQYEHInt10t706
73+iVevVHP2AH2L11kWJmIiGzGIS0x5rQxehgep3xsTkHzWNmk0sKQQyO91UhnaI
WhYp4NddbRWBCcRfSOVujIcZsl8n5wk7prhALr8WXENroOx0ateDV4WTo9XTvVuf
TAjSPrIgqqx1mA==
-----END CERTIFICATE-----