Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File:                     dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier:          0XGd5Vib5e2S/9vzkXIjD4313uHQjXs/Riv6eeEePa8=
Subject key identifier:   A4:15:98:90:DE:54:83:3A:72:E0:06:EB:2B:66:5B:F7:D3:F0:95:F7
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer:       /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial:       01962F07449B9D65980B2FEC6DC6B434C39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number:          0CC1
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: K714ukQeF1RDoXlLV7AZ52u6J/Q8r5oFtwyqAKS9f4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:9b:9d:65:98:0b:2f:ec:6d:c6:b4:34:c3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=a4159890de54833a72e006eb2b665bf7d3f095f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:a5:2c:b6:d2:c8:fd:91:4f:99:e9:45:d4:
                    fb:87:ef:40:3a:4b:18:04:83:61:48:69:53:08:7c:
                    12:ef:14:b6:25:f7:bc:c5:93:3c:c1:2c:29:43:c4:
                    d3:86:39:45:46:b1:d9:53:54:48:98:91:61:35:96:
                    8c:e0:d6:68:85:48:b7:ed:5f:27:74:8d:8c:10:d5:
                    5f:cf:81:68:b3:4a:be:66:dd:e1:02:75:c2:83:fd:
                    e4:65:3d:bc:10:47:3f:89:b9:b2:09:e5:ec:bc:11:
                    27:d3:16:82:9b:ca:5a:0c:b2:f1:d7:5d:a6:c1:b7:
                    b1:2c:7f:c4:2a:6a:ff:cf:61:34:92:2e:c6:0d:f0:
                    57:a2:af:60:c7:ec:8f:ee:69:ed:2a:d5:b4:04:26:
                    39:6f:a4:57:11:40:26:6e:75:21:cc:4a:af:50:d3:
                    03:58:69:50:4e:79:83:e8:d1:ba:92:fd:96:58:e8:
                    b2:d8:81:76:55:c6:e6:58:51:2f:cf:84:8b:1a:be:
                    8e:64:16:03:ff:ec:13:88:31:26:86:72:1a:0b:0f:
                    e1:c8:fd:23:8f:ca:27:0d:2d:96:57:04:ef:8c:c2:
                    49:51:62:81:ea:0d:bd:4c:f9:e1:52:a4:b6:7f:c3:
                    0b:0c:49:cb:e9:53:9a:de:b7:e6:3f:9d:b4:4d:31:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:98:90:DE:54:83:3A:72:E0:06:EB:2B:66:5B:F7:D3:F0:95:F7
            X509v3 Authority Key Identifier:
                keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:de:0f:cc:26:f3:cf:38:6d:4b:c5:8b:71:ec:82:5a:b8:2e:
         a1:35:e0:49:29:6f:22:3e:ec:ee:2f:dd:b9:cc:ef:fc:4d:01:
         11:fa:40:71:13:cc:50:62:50:16:5c:a5:66:34:a7:15:a5:a6:
         f1:6f:f9:e1:ff:d5:12:d1:16:10:95:6a:1b:85:3a:42:8d:6f:
         6b:43:18:d3:22:2e:31:23:bc:2b:ac:ef:d0:53:5c:91:f0:e2:
         94:d8:4e:7a:a1:55:f2:9b:04:e0:f1:db:33:d5:a2:91:da:2b:
         df:b7:29:f7:7e:26:5c:1c:64:2a:b0:fa:7d:1f:3e:e5:09:43:
         28:f9:40:2f:13:86:c7:d4:97:46:ce:52:cf:77:bd:1c:84:c5:
         4d:0c:51:7c:73:67:0e:b8:6c:25:8c:a8:19:e6:22:5e:d9:0a:
         f5:e9:c5:bb:3c:b8:61:16:c2:6c:5f:ce:9a:cd:13:ed:e9:ad:
         2a:22:4c:59:c1:b3:ec:a3:dd:50:17:b4:df:bb:6b:ad:16:e0:
         20:ba:d5:12:9a:1a:1b:12:7a:07:65:7d:16:5a:5f:b0:bd:3b:
         05:86:d1:3c:ce:a9:ff:a2:1a:9d:d1:26:ad:a1:6a:6a:a7:94:
         bd:42:55:c0:c5:24:0b:59:30:37:19:08:ad:7e:b6:e9:d4:e6:
         56:32:9b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0SbnWWYCy/sbca0NMOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3
MDNlY2YwHhcNMjUwNDEzMTIwMjA3WhcNMjUwNDE0MTIwMjA3WjAzMTEwLwYDVQQD
EyhhNDE1OTg5MGRlNTQ4MzNhNzJlMDA2ZWIyYjY2NWJmN2QzZjA5NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2alLLbSyP2RT5npRdT7h+9AOksY
BINhSGlTCHwS7xS2Jfe8xZM8wSwpQ8TThjlFRrHZU1RImJFhNZaM4NZohUi37V8n
dI2MENVfz4Fos0q+Zt3hAnXCg/3kZT28EEc/ibmyCeXsvBEn0xaCm8paDLLx112m
wbexLH/EKmr/z2E0ki7GDfBXoq9gx+yP7mntKtW0BCY5b6RXEUAmbnUhzEqvUNMD
WGlQTnmD6NG6kv2WWOiy2IF2VcbmWFEvz4SLGr6OZBYD/+wTiDEmhnIaCw/hyP0j
j8onDS2WVwTvjMJJUWKB6g29TPnhUqS2f8MLDEnL6VOa3rfmP520TTH7RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQVmJDeVIM6cuAG6ytmW/fT8JX3MB8GA1UdIwQY
MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt
NjIxMDY0MWU1MmQ2LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2
LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd4PzCbz
zzhtS8WLceyCWrguoTXgSSlvIj7s7i/duczv/E0BEfpAcRPMUGJQFlylZjSnFaWm
8W/54f/VEtEWEJVqG4U6Qo1va0MY0yIuMSO8K6zv0FNckfDilNhOeqFV8psE4PHb
M9Wikdor37cp934mXBxkKrD6fR8+5QlDKPlALxOGx9SXRs5Sz3e9HITFTQxRfHNn
DrhsJYyoGeYiXtkK9enFuzy4YRbCbF/Oms0T7emtKiJMWcGz7KPdUBe037trrRbg
ILrVEpoaGxJ6B2V9FlpfsL07BYbRPM6p/6IandEmraFqaqeUvUJVwMUkC1kwNxkI
rX626dTmVjKb8Q==
-----END CERTIFICATE-----