Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
File:                     TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft (raw, json)
Hash identifier:          e0vmz8Lta4ENkHpuSTGJiXbuNaQDwjNadc5wm9f4B0Y=
Subject key identifier:   DC:0F:4E:75:E8:07:6E:04:E8:D0:6E:FC:16:78:A1:7F:0F:40:55:EE
Authority key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Certificate issuer:       /CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Certificate serial:       01962ECF5B68FE61452AF12D6DD86809E64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl (hash: GxbYAwcbqCJzgmKBppDZ/m3tKqEVdZ2SFLp1zwqCKmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5b:68:fe:61:45:2a:f1:2d:6d:d8:68:09:e6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=dc0f4e75e8076e04e8d06efc1678a17f0f4055ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:c7:20:eb:60:b2:db:aa:de:04:00:bc:22:
                    72:7b:6c:10:47:a2:b3:40:04:c0:da:e4:da:24:12:
                    12:e9:f3:9f:25:58:d0:69:3b:d3:09:e1:e5:05:00:
                    f5:05:57:36:bf:ff:13:f6:03:2d:f6:4d:1c:75:c1:
                    39:33:f4:e8:e6:7a:f0:cc:dc:3b:4c:f1:a0:0f:ec:
                    64:84:7f:0c:ba:2e:c7:4c:4d:36:85:7e:02:0f:6a:
                    43:48:9e:75:cd:06:b1:6c:73:bd:87:08:4a:27:b4:
                    8a:79:9f:43:a9:a3:28:b5:ae:12:fe:54:9c:d1:24:
                    c9:0f:c8:5b:5f:24:66:07:ed:b3:e0:fc:e6:b1:ca:
                    8e:78:03:ad:61:9b:aa:ca:21:39:02:b6:84:61:83:
                    97:7d:bb:77:a9:f3:8e:ee:3b:66:d5:92:92:f4:e3:
                    b5:e1:1d:ad:17:e3:73:a5:42:9b:c2:3d:a4:8b:49:
                    05:b1:e7:2e:1f:f7:61:ef:62:e2:c4:11:4e:d4:e3:
                    01:d0:6b:9c:19:8a:b0:49:d6:04:a5:62:f1:71:ce:
                    50:30:5c:fb:b6:9e:6d:8c:eb:e4:ee:59:c5:98:31:
                    aa:49:0b:44:9d:7b:85:f9:a1:78:2e:4e:e7:35:03:
                    06:49:eb:92:d1:67:07:62:b5:21:22:4c:d4:e9:99:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0F:4E:75:E8:07:6E:04:E8:D0:6E:FC:16:78:A1:7F:0F:40:55:EE
            X509v3 Authority Key Identifier:
                keyid:4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:15:cf:dc:d3:a4:02:30:9f:ba:5f:5b:ad:4a:64:ca:41:2c:
         9b:68:33:7f:fe:53:e5:8c:69:2b:4f:28:40:5d:ca:ea:76:30:
         60:bf:96:d6:f3:fc:ba:fa:38:d8:86:66:d7:d0:32:30:8a:f9:
         7f:49:84:c8:e5:f8:8a:8b:e6:62:dd:97:22:22:16:62:ee:02:
         83:61:11:6b:37:98:50:39:71:ec:fa:23:82:9e:f3:6f:d5:f6:
         09:2b:ef:97:5d:dd:80:34:d8:54:8e:c0:90:7d:04:3c:18:85:
         62:98:c2:95:f0:3d:91:cf:e7:d9:12:06:ef:44:5d:ad:96:f0:
         31:b9:cc:b1:22:04:20:7a:00:8b:ac:61:0d:27:80:83:1e:a2:
         e7:0b:7e:78:42:28:21:5e:96:cd:2e:47:c1:9f:8e:43:6d:4a:
         2c:45:35:c8:7a:2a:21:dd:15:40:41:35:6f:e6:52:c7:37:69:
         fc:25:e2:f9:7e:dd:96:d2:d6:ad:cb:de:38:d7:c0:7c:49:f0:
         d0:28:3f:3f:0b:23:89:3c:f3:e9:0c:1d:23:0b:10:ee:59:29:
         2a:ed:2c:28:5f:75:5c:01:43:a6:dc:08:59:41:7b:5b:0d:0f:
         b8:7a:a5:76:0d:fc:0f:0c:ff:f7:0f:05:64:a1:2a:36:ea:4e:
         5a:6b:34:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1to/mFFKvEtbdhoCeZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTk2NjM4M2UwNzhlZjQwYjVlZDgyMmU2ZTJhMzAxYjA1
MTBlY2UwHhcNMjUwNDEzMTEwMTAzWhcNMjUwNDE0MTEwMTAzWjAzMTEwLwYDVQQD
EyhkYzBmNGU3NWU4MDc2ZTA0ZThkMDZlZmMxNjc4YTE3ZjBmNDA1NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHbHIOtgstuq3gQAvCJye2wQR6Kz
QATA2uTaJBIS6fOfJVjQaTvTCeHlBQD1BVc2v/8T9gMt9k0cdcE5M/To5nrwzNw7
TPGgD+xkhH8Mui7HTE02hX4CD2pDSJ51zQaxbHO9hwhKJ7SKeZ9DqaMota4S/lSc
0STJD8hbXyRmB+2z4PzmscqOeAOtYZuqyiE5AraEYYOXfbt3qfOO7jtm1ZKS9OO1
4R2tF+NzpUKbwj2ki0kFsecuH/dh72LixBFO1OMB0GucGYqwSdYEpWLxcc5QMFz7
tp5tjOvk7lnFmDGqSQtEnXuF+aF4Lk7nNQMGSeuS0WcHYrUhIkzU6ZmbwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwPTnXoB24E6NBu/BZ4oX8PQFXuMB8GA1UdIwQY
MBaAFEzpZjg+B470C17YIubiowGwUQ7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9sbU9ENEhqdlFMWHRnaTV1S2pBYkJSRHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82NmJiOGItY2MwZC00ZDMzLThiNDct
MzcyM2Q2ZTZiNmVmLzEvVE9sbU9ENEhqdlFMWHRnaTV1S2pBYkJSRHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82NmJiOGItY2MwZC00ZDMzLThiNDctMzcyM2Q2ZTZiNmVm
LzEvVE9sbU9ENEhqdlFMWHRnaTV1S2pBYkJSRHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRXP3NOk
AjCful9brUpkykEsm2gzf/5T5YxpK08oQF3K6nYwYL+W1vP8uvo42IZm19AyMIr5
f0mEyOX4iovmYt2XIiIWYu4Cg2ERazeYUDlx7Pojgp7zb9X2CSvvl13dgDTYVI7A
kH0EPBiFYpjClfA9kc/n2RIG70RdrZbwMbnMsSIEIHoAi6xhDSeAgx6i5wt+eEIo
IV6WzS5HwZ+OQ21KLEU1yHoqId0VQEE1b+ZSxzdp/CXi+X7dltLWrcveONfAfEnw
0Cg/PwsjiTzz6QwdIwsQ7lkpKu0sKF91XAFDptwIWUF7Ww0PuHqldg38Dwz/9w8F
ZKEqNupOWms08A==
-----END CERTIFICATE-----