Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File:                     F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier:          H3P3o2F1tSMXfsRwmtDjhPyk5HGKDqYPXytlCbOPJbs=
Subject key identifier:   4A:A9:6B:CD:41:17:20:66:A9:F6:7F:98:43:B2:FA:53:0A:93:25:79
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer:       /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial:       01962F74E8B71FDA3E228A8CABC18B2D7A81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number:          07B9
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: p2X48f2kqp1nnC4yIB4VotYckrt4y9P0XltRaGCVLUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e8:b7:1f:da:3e:22:8a:8c:ab:c1:8b:2d:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=4aa96bcd41172066a9f67f9843b2fa530a932579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:89:42:38:95:42:1f:7b:5e:a0:5a:aa:98:
                    87:af:ac:e1:eb:ab:fa:cf:33:39:de:42:21:71:2a:
                    94:fb:87:8c:c8:0c:e6:13:d8:75:e4:41:2c:2d:34:
                    18:10:89:50:e7:99:a3:5c:f7:a9:d9:e4:9b:ae:41:
                    a6:38:a2:23:fc:e8:28:77:ce:66:e0:08:19:41:7e:
                    f7:98:d0:21:b6:22:08:c7:66:a2:9e:2d:b5:f8:58:
                    33:23:d1:a5:a8:4b:c5:32:37:d6:b6:81:ce:3f:8e:
                    43:8e:a1:aa:ab:3a:22:b8:8c:37:5e:7d:a8:1a:4d:
                    a0:d0:b7:c2:46:44:a7:01:39:2a:02:08:4e:29:34:
                    e9:a3:ab:00:b4:12:1f:e4:8b:4f:d2:f1:fc:02:ee:
                    a2:61:e3:9c:b5:28:0f:12:73:9b:dd:99:13:94:11:
                    93:95:73:46:fc:5f:3d:09:89:39:6f:fa:0d:fe:0f:
                    5c:32:e7:5f:68:67:f7:f6:bc:72:41:ed:e9:17:b5:
                    7e:47:c1:08:0f:22:78:18:76:9f:d7:82:2b:af:e5:
                    54:81:7e:75:24:49:ba:1f:61:92:0c:2a:a7:87:b0:
                    c5:91:ba:bd:58:ea:cc:a8:1a:e4:a5:bc:45:f9:49:
                    36:bf:c7:9b:29:c3:07:2b:a4:4a:cd:3e:34:b9:df:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:6B:CD:41:17:20:66:A9:F6:7F:98:43:B2:FA:53:0A:93:25:79
            X509v3 Authority Key Identifier:
                keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:06:f8:c7:49:81:4f:04:a2:9d:db:a5:8b:e6:a1:54:ae:6b:
         4d:8f:43:e7:7d:78:b2:d5:4f:48:28:42:56:fb:0a:14:c6:ca:
         50:97:55:fa:15:0f:1c:41:3a:7d:c2:96:21:88:6d:ad:61:9e:
         ff:33:1a:c2:31:78:78:c8:11:97:7c:8f:db:82:dd:71:28:58:
         1e:3a:7f:55:e2:fe:1c:fd:56:fe:d0:7b:2e:b8:83:4f:0f:4f:
         db:90:3a:09:91:a3:08:a3:9f:04:c5:18:8e:db:30:fe:d2:cc:
         ad:2d:75:cd:b3:c5:6e:13:1a:ae:c7:15:1d:32:ec:98:fc:f7:
         19:94:68:97:9a:e1:93:61:b0:20:6d:90:76:d3:14:45:a3:d1:
         97:ab:4e:c7:c8:7a:23:41:8e:ea:1f:02:1b:14:64:f1:ba:69:
         41:76:3c:09:04:bb:6a:45:0e:14:47:b0:8d:73:05:14:83:9e:
         9f:f6:3e:5c:b4:2a:66:e3:40:73:a0:66:b5:a5:bf:9f:16:12:
         3c:2a:90:c2:50:c0:84:ce:d8:84:b1:7c:4e:5e:64:03:e2:ef:
         4e:81:db:e2:28:5e:87:6b:09:b7:54:81:e9:e8:87:84:24:17:
         dc:29:8b:66:f1:ba:13:0c:7b:fb:65:10:bc:55:87:5f:d7:9f:
         d9:d3:8c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOi3H9o+IoqMq8GLLXqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmNlZjlmYTFmM2IxMzg0MjEzM2FhZDRmN2I0MDFlZGM5
OGUwNDgwHhcNMjUwNDEzMTQwMTUyWhcNMjUwNDE0MTQwMTUyWjAzMTEwLwYDVQQD
Eyg0YWE5NmJjZDQxMTcyMDY2YTlmNjdmOTg0M2IyZmE1MzBhOTMyNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLOJQjiVQh97XqBaqpiHr6zh66v6
zzM53kIhcSqU+4eMyAzmE9h15EEsLTQYEIlQ55mjXPep2eSbrkGmOKIj/Ogod85m
4AgZQX73mNAhtiIIx2aini21+FgzI9GlqEvFMjfWtoHOP45DjqGqqzoiuIw3Xn2o
Gk2g0LfCRkSnATkqAghOKTTpo6sAtBIf5ItP0vH8Au6iYeOctSgPEnOb3ZkTlBGT
lXNG/F89CYk5b/oN/g9cMudfaGf39rxyQe3pF7V+R8EIDyJ4GHaf14Irr+VUgX51
JEm6H2GSDCqnh7DFkbq9WOrMqBrkpbxF+Uk2v8ebKcMHK6RKzT40ud8rlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqpa81BFyBmqfZ/mEOy+lMKkyV5MB8GA1UdIwQY
MBaAFBe875+h87E4QhM6rU97QB7cmOBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUt
Zjg0MTlmZTU4NzJiLzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUtZjg0MTlmZTU4NzJi
LzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgb4x0mB
TwSinduli+ahVK5rTY9D5314stVPSChCVvsKFMbKUJdV+hUPHEE6fcKWIYhtrWGe
/zMawjF4eMgRl3yP24LdcShYHjp/VeL+HP1W/tB7LriDTw9P25A6CZGjCKOfBMUY
jtsw/tLMrS11zbPFbhMarscVHTLsmPz3GZRol5rhk2GwIG2QdtMURaPRl6tOx8h6
I0GO6h8CGxRk8bppQXY8CQS7akUOFEewjXMFFIOen/Y+XLQqZuNAc6BmtaW/nxYS
PCqQwlDAhM7YhLF8Tl5kA+LvToHb4iheh2sJt1SB6eiHhCQX3CmLZvG6Ewx7+2UQ
vFWHX9ef2dOMxg==
-----END CERTIFICATE-----