Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File:                     Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier:          JBY4trQju3GG4W01okfeAFtkdLnoVTWkhSHbkMapMDE=
Subject key identifier:   36:F2:4B:D0:DF:79:11:E5:42:36:65:48:B0:1C:FB:62:42:B0:9B:59
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       01962ECFE49946FDB7616663A6E406124772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number:          1503
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: Wn0UQfkj8UkRF/ajJffWK64UwzzwMNYiiU7hVcXelzQ=)
                          2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=)
                          3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=)
                          4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e4:99:46:fd:b7:61:66:63:a6:e4:06:12:47:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=36f24bd0df7911e542366548b01cfb6242b09b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e6:55:85:94:46:7d:be:89:fe:a1:9d:43:91:
                    ad:77:ba:5d:8e:08:4c:3b:5a:ff:08:d2:4b:68:0f:
                    bd:fb:13:8f:4d:af:58:f6:7e:fa:79:a8:e8:b0:1c:
                    e9:73:59:21:5d:01:8d:b2:17:24:32:45:2d:fd:b9:
                    f3:7e:41:57:8f:21:d7:d3:81:16:42:1d:8e:39:ee:
                    f7:ec:09:a8:06:11:03:0f:9b:da:29:f9:b9:67:7c:
                    f6:27:be:f5:4e:33:e2:aa:e5:49:e6:64:c2:a6:25:
                    0c:93:c2:59:86:24:38:0d:c7:fd:8e:31:8b:45:76:
                    46:cb:65:df:ed:cc:b1:bb:62:bb:58:24:a0:57:7b:
                    c6:ff:d2:7e:13:54:84:78:2d:78:88:40:2d:db:2a:
                    50:1e:49:ac:93:40:73:cd:d6:cb:95:c4:92:83:fa:
                    84:98:a9:56:b0:e7:b6:42:e0:89:8d:03:4c:45:5b:
                    6c:86:e8:5b:10:81:f7:4a:e9:25:88:af:05:a9:fd:
                    08:5b:61:14:e2:e9:00:8b:16:04:6a:b4:75:ea:0f:
                    8e:c4:a7:59:8f:d5:21:12:ae:d8:05:cc:11:3e:e7:
                    63:94:71:d4:a5:f8:f8:a6:f0:dc:62:35:8b:7c:c2:
                    b7:f8:ed:ee:5f:df:ae:6a:94:ce:6a:58:ee:5a:f1:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F2:4B:D0:DF:79:11:E5:42:36:65:48:B0:1C:FB:62:42:B0:9B:59
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:fc:ac:5a:70:64:dd:aa:b0:e3:25:22:2d:e3:54:e5:3e:
         1b:3f:07:6d:82:e9:d3:05:ad:77:8c:63:d1:ff:40:eb:6f:2b:
         c1:03:77:6f:b0:4d:38:8d:e5:00:03:6f:f7:9d:59:67:59:c8:
         50:cf:6d:d2:bd:13:5e:87:9c:f9:09:51:a8:c8:16:d5:22:fe:
         12:f5:4f:d2:1f:6f:3e:7b:01:9d:cf:41:a9:ad:8e:fa:33:f0:
         51:51:f5:cd:37:1f:a4:27:4b:9f:17:c9:74:d5:be:76:bd:8e:
         6f:cc:98:41:09:72:75:cc:a5:e1:d2:47:54:67:51:53:64:68:
         ff:ce:d7:fd:fe:68:32:fa:44:ba:09:a9:92:a1:3e:1b:dc:22:
         6c:95:98:e8:92:67:fb:ff:57:17:44:df:cc:55:b6:c2:a0:46:
         5f:ce:5f:98:93:e7:14:8f:0c:b0:9a:d5:0a:04:c5:1f:4d:ed:
         31:97:41:c1:7a:92:48:33:0c:fa:4f:2d:d5:0f:75:74:16:df:
         a2:76:94:a1:8b:1d:28:e1:32:0d:d7:77:49:5f:d3:94:c0:26:
         44:bc:5f:66:5c:0f:c0:fb:fe:f7:7b:58:ca:93:b9:d0:1b:42:
         94:b3:fc:82:c2:0b:26:49:18:37:d4:51:f5:3d:09:ee:36:36:
         a7:54:55:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz+SZRv23YWZjpuQGEkdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWViYjliMDUxYWQ1ZWM3YTM2OTg5ZmMzZmNjOTRjMWNh
YmNjNzQwHhcNMjUwNDEzMTEwMTM4WhcNMjUwNDE0MTEwMTM4WjAzMTEwLwYDVQQD
EygzNmYyNGJkMGRmNzkxMWU1NDIzNjY1NDhiMDFjZmI2MjQyYjA5YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OZVhZRGfb6J/qGdQ5Gtd7pdjghM
O1r/CNJLaA+9+xOPTa9Y9n76eajosBzpc1khXQGNshckMkUt/bnzfkFXjyHX04EW
Qh2OOe737AmoBhEDD5vaKfm5Z3z2J771TjPiquVJ5mTCpiUMk8JZhiQ4Dcf9jjGL
RXZGy2Xf7cyxu2K7WCSgV3vG/9J+E1SEeC14iEAt2ypQHkmsk0BzzdbLlcSSg/qE
mKlWsOe2QuCJjQNMRVtshuhbEIH3SukliK8Fqf0IW2EU4ukAixYEarR16g+OxKdZ
j9UhEq7YBcwRPudjlHHUpfj4pvDcYjWLfMK3+O3uX9+uapTOaljuWvGw7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbyS9DfeRHlQjZlSLAc+2JCsJtZMB8GA1UdIwQY
MBaAFE5eu5sFGtXsejaYn8P8yUwcq8x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUt
YzJmZDBmOTU4ZDRiLzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUtYzJmZDBmOTU4ZDRi
LzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcb8rFpw
ZN2qsOMlIi3jVOU+Gz8HbYLp0wWtd4xj0f9A628rwQN3b7BNOI3lAANv951ZZ1nI
UM9t0r0TXoec+QlRqMgW1SL+EvVP0h9vPnsBnc9Bqa2O+jPwUVH1zTcfpCdLnxfJ
dNW+dr2Ob8yYQQlydcyl4dJHVGdRU2Ro/87X/f5oMvpEugmpkqE+G9wibJWY6JJn
+/9XF0TfzFW2wqBGX85fmJPnFI8MsJrVCgTFH03tMZdBwXqSSDMM+k8t1Q91dBbf
onaUoYsdKOEyDdd3SV/TlMAmRLxfZlwPwPv+93tYypO50BtClLP8gsILJkkYN9RR
9T0J7jY2p1RV7Q==
-----END CERTIFICATE-----