Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File:                     dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier:          AZCcs6KfuHZBm0AYyaipJ5eK+D8H5y86xcfduuVbXRY=
Subject key identifier:   E9:EF:59:69:77:52:AF:DF:96:11:49:4B:79:5F:9D:5E:E8:1D:B2:3B
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer:       /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial:       01962E98C7A8CDA0E6221EF73CF0F23AB7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: ASqTqMemVWZ1r1Zb7tO/L/JKWSUsFhT/RU+9/L+z/QE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:a8:cd:a0:e6:22:1e:f7:3c:f0:f2:3a:b7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=e9ef59697752afdf9611494b795f9d5ee81db23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:f5:1c:df:d8:44:85:41:70:a0:57:1d:76:
                    17:32:a1:c7:dc:0d:45:64:05:7c:18:b5:b9:46:d3:
                    fa:d7:8b:99:e3:66:7a:dd:8f:60:f3:dc:b3:f3:66:
                    29:1e:42:3a:00:8c:66:87:78:dd:ec:64:73:15:d5:
                    40:f4:ea:4f:03:8b:43:f3:23:63:68:21:ee:d0:ba:
                    0f:84:68:79:ca:4f:96:03:44:a0:0f:f5:e8:39:f6:
                    05:59:4a:27:f9:9a:4c:75:e2:20:f8:5e:d5:e9:8b:
                    89:d9:55:b4:dc:cc:13:b7:e4:37:e9:71:20:f5:2a:
                    85:c6:1d:9d:c2:ff:3b:dd:3b:fd:d0:e9:c0:57:96:
                    c7:ab:e4:b8:a4:c9:e3:88:93:7d:e9:ac:35:56:79:
                    eb:fa:04:f1:34:6a:af:e9:2a:1f:46:1d:2b:19:26:
                    19:c7:50:60:57:2d:f5:5d:0f:c5:31:73:d7:b4:ff:
                    87:ef:ef:22:35:68:82:92:13:78:25:f8:01:f8:5f:
                    42:ce:83:7e:93:10:1a:e4:54:e9:f6:c3:34:12:d0:
                    cd:ed:84:5e:9c:f3:63:5e:75:2b:6d:95:25:d8:c7:
                    d3:aa:b7:f3:f1:e7:1f:78:f2:e2:1c:1c:e0:a9:58:
                    9e:47:cc:65:5a:95:5a:28:46:7e:ed:bd:7f:fb:3d:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:59:69:77:52:AF:DF:96:11:49:4B:79:5F:9D:5E:E8:1D:B2:3B
            X509v3 Authority Key Identifier:
                keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6f:7d:59:4b:89:f8:e8:2b:e1:9e:09:e6:37:66:54:83:b9:
         b3:ff:70:5c:60:58:b1:f3:a7:63:f5:3c:ca:a9:49:e1:63:33:
         c6:0d:ec:06:a3:c9:8a:38:72:d4:07:9d:91:4b:1c:3c:98:3d:
         0e:26:21:5f:ec:ed:61:55:02:7c:97:4c:fc:a8:a9:ff:53:b6:
         f2:a3:ea:82:eb:46:c1:20:06:e6:e0:09:48:af:67:70:6f:54:
         65:6b:aa:b2:2e:7b:c9:82:29:58:d6:d4:5f:f2:e5:ac:a4:38:
         8a:83:87:4a:97:86:b2:cd:f7:e0:46:13:2c:ac:26:cb:0a:57:
         5d:50:ad:8c:00:ef:02:d8:93:77:45:b7:24:3c:35:dc:21:3f:
         28:72:f1:77:4e:bb:05:bf:64:e6:e3:29:e6:49:b0:bb:f1:8e:
         95:f8:10:e9:72:50:ff:13:21:95:44:31:91:11:b5:72:1a:9f:
         b7:36:d0:a9:be:8d:29:8e:f7:76:c9:fc:23:4c:cb:54:70:18:
         07:df:ef:56:66:43:7b:18:9d:26:e7:e6:14:af:3c:c6:05:d4:
         d2:00:13:f8:39:0c:d8:2c:48:52:ce:2f:2a:8a:7b:50:5c:d4:
         ec:50:90:b5:c1:fd:24:cc:d2:a3:67:61:73:48:61:ab:b3:00:
         59:f9:41:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMeozaDmIh73PPDyOrf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZDAyZDhmOWViOGVmYWQ1ODM4ZWY5MzE4ODU0OTZmY2Zh
ZjFjNjEwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
EyhlOWVmNTk2OTc3NTJhZmRmOTYxMTQ5NGI3OTVmOWQ1ZWU4MWRiMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jr1HN/YRIVBcKBXHXYXMqHH3A1F
ZAV8GLW5RtP614uZ42Z63Y9g89yz82YpHkI6AIxmh3jd7GRzFdVA9OpPA4tD8yNj
aCHu0LoPhGh5yk+WA0SgD/XoOfYFWUon+ZpMdeIg+F7V6YuJ2VW03MwTt+Q36XEg
9SqFxh2dwv873Tv90OnAV5bHq+S4pMnjiJN96aw1Vnnr+gTxNGqv6SofRh0rGSYZ
x1BgVy31XQ/FMXPXtP+H7+8iNWiCkhN4JfgB+F9CzoN+kxAa5FTp9sM0EtDN7YRe
nPNjXnUrbZUl2MfTqrfz8ecfePLiHBzgqVieR8xlWpVaKEZ+7b1/+z22jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnvWWl3Uq/flhFJS3lfnV7oHbI7MB8GA1UdIwQY
MBaAFHbQLY+euO+tWDjvkxiFSW/PrxxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHRBdGo1NjQ3NjFZT08tVEdJVkpiOC12SEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8yMzI3NjMtMjZmOC00NDFiLTk2Yjgt
MDUxNjFmZjcxZDgwLzEvZHRBdGo1NjQ3NjFZT08tVEdJVkpiOC12SEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8yMzI3NjMtMjZmOC00NDFiLTk2YjgtMDUxNjFmZjcxZDgw
LzEvZHRBdGo1NjQ3NjFZT08tVEdJVkpiOC12SEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm99WUuJ
+Ogr4Z4J5jdmVIO5s/9wXGBYsfOnY/U8yqlJ4WMzxg3sBqPJijhy1AedkUscPJg9
DiYhX+ztYVUCfJdM/Kip/1O28qPqgutGwSAG5uAJSK9ncG9UZWuqsi57yYIpWNbU
X/LlrKQ4ioOHSpeGss334EYTLKwmywpXXVCtjADvAtiTd0W3JDw13CE/KHLxd067
Bb9k5uMp5kmwu/GOlfgQ6XJQ/xMhlUQxkRG1chqftzbQqb6NKY73dsn8I0zLVHAY
B9/vVmZDexidJufmFK88xgXU0gAT+DkM2CxIUs4vKop7UFzU7FCQtcH9JMzSo2dh
c0hhq7MAWflBxw==
-----END CERTIFICATE-----