Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File:                     0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier:          4Ya/9HC5nWBKx3xkw4q/iO3hZkolN/SHKCUAoRyTbI0=
Subject key identifier:   85:5D:80:AF:22:15:25:8D:8C:95:0D:BF:16:5B:E6:BB:8E:5A:04:CB
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer:       /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial:       01962E999D05AFD30220C4C61CFE960BA6D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number:          0FE8
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: k+XOo3ivDqE0zZRMrsDK/xkBGJv9KmzlpEjSisF1/J8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9d:05:af:d3:02:20:c4:c6:1c:fe:96:0b:a6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=855d80af2215258d8c950dbf165be6bb8e5a04cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:2a:09:da:c6:95:e0:14:87:cd:ba:ff:eb:
                    4b:86:70:b9:94:7d:c8:40:88:cf:7a:57:10:34:80:
                    cb:66:64:9e:03:cc:e5:ff:66:9e:49:ec:ee:51:00:
                    7e:65:d3:be:95:d9:7c:ec:53:99:28:36:96:a5:4a:
                    d6:f7:c1:c5:0a:78:cb:86:d0:26:59:d9:5f:a3:a6:
                    b4:41:e4:3e:ef:47:fd:22:15:a5:90:92:96:cf:6d:
                    e5:f6:78:e6:19:55:6f:e7:c2:3d:13:21:ed:8e:04:
                    8d:66:0c:8e:33:22:7e:da:bf:64:5c:96:8d:f2:28:
                    8c:3d:aa:19:15:fb:a2:aa:95:62:5a:d0:f0:3e:7c:
                    60:05:df:0c:e8:58:a4:bb:c8:00:53:7b:e5:ba:92:
                    a2:5f:c9:d8:6a:84:40:17:2f:0f:54:3c:17:5a:35:
                    b1:5b:8b:92:59:8d:f8:14:56:35:cc:7a:7a:c2:69:
                    73:e1:2f:55:ff:40:84:19:9f:a6:18:31:c2:08:2e:
                    ab:09:79:3f:4c:49:a6:c5:ae:72:1c:4c:b6:ce:c9:
                    50:15:65:e4:4c:60:6c:f2:5b:fe:4a:ca:00:28:e1:
                    ae:f5:f3:29:f4:40:fb:48:21:6b:17:47:69:b4:07:
                    1a:3d:4f:92:a2:8a:f9:80:36:f2:a2:1d:cb:11:ee:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5D:80:AF:22:15:25:8D:8C:95:0D:BF:16:5B:E6:BB:8E:5A:04:CB
            X509v3 Authority Key Identifier:
                keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:69:61:17:14:ce:3a:df:28:1f:bc:16:e6:77:4d:4e:64:6b:
         33:e3:b9:64:9e:f3:ef:98:2c:6a:41:06:df:fa:65:25:f8:ae:
         bf:74:20:34:95:91:bc:61:49:ce:80:81:12:8b:aa:2c:5c:20:
         a2:a2:76:e9:c0:dd:aa:29:76:0a:39:82:5c:0a:70:cc:a7:10:
         ab:50:b9:56:6d:45:3c:93:b1:97:fc:90:e8:3b:b3:39:f6:9e:
         cb:f6:63:f0:4b:02:c7:d6:c5:fa:81:0e:9b:d2:c7:a0:be:7f:
         c5:a2:94:97:bb:e2:42:a4:1f:cb:8c:41:63:0a:4b:6d:bb:38:
         0f:f6:3b:55:cd:5e:c5:fd:74:06:ed:72:8a:0b:c5:da:ce:6b:
         56:14:95:39:74:a5:3b:52:8b:22:fd:03:1b:c0:91:cf:2a:8f:
         5b:81:65:77:b2:8f:77:8d:dc:e3:ae:45:01:85:8d:29:5e:8b:
         6c:25:e3:e8:c8:f4:84:ac:46:9d:33:d7:7b:5d:99:ce:c5:db:
         04:c7:6b:fc:23:3f:2e:b4:a2:da:61:d5:d9:c3:e4:1b:ce:d4:
         ac:51:65:6a:f5:be:7f:f2:5f:cc:11:c5:ff:3e:02:bd:89:5e:
         22:6e:01:f8:a6:e6:29:9b:12:0b:ce:62:e7:5c:fe:60:09:25:
         58:0a:0e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZ0Fr9MCIMTGHP6WC6bXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3
MWQ5NzYwHhcNMjUwNDEzMTAwMjIxWhcNMjUwNDE0MTAwMjIxWjAzMTEwLwYDVQQD
Eyg4NTVkODBhZjIyMTUyNThkOGM5NTBkYmYxNjViZTZiYjhlNWEwNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ8qCdrGleAUh826/+tLhnC5lH3I
QIjPelcQNIDLZmSeA8zl/2aeSezuUQB+ZdO+ldl87FOZKDaWpUrW98HFCnjLhtAm
Wdlfo6a0QeQ+70f9IhWlkJKWz23l9njmGVVv58I9EyHtjgSNZgyOMyJ+2r9kXJaN
8iiMPaoZFfuiqpViWtDwPnxgBd8M6Fiku8gAU3vlupKiX8nYaoRAFy8PVDwXWjWx
W4uSWY34FFY1zHp6wmlz4S9V/0CEGZ+mGDHCCC6rCXk/TEmmxa5yHEy2zslQFWXk
TGBs8lv+SsoAKOGu9fMp9ED7SCFrF0dptAcaPU+Soor5gDbyoh3LEe6/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVdgK8iFSWNjJUNvxZb5ruOWgTLMB8GA1UdIwQY
MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt
Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx
LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmlhFxTO
Ot8oH7wW5ndNTmRrM+O5ZJ7z75gsakEG3/plJfiuv3QgNJWRvGFJzoCBEouqLFwg
oqJ26cDdqil2CjmCXApwzKcQq1C5Vm1FPJOxl/yQ6DuzOfaey/Zj8EsCx9bF+oEO
m9LHoL5/xaKUl7viQqQfy4xBYwpLbbs4D/Y7Vc1exf10Bu1yigvF2s5rVhSVOXSl
O1KLIv0DG8CRzyqPW4Fld7KPd43c465FAYWNKV6LbCXj6Mj0hKxGnTPXe12ZzsXb
BMdr/CM/LrSi2mHV2cPkG87UrFFlavW+f/JfzBHF/z4CvYleIm4B+KbmKZsSC85i
51z+YAklWAoOIw==
-----END CERTIFICATE-----