Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
File:                     FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json)
Hash identifier:          ZLoN/6SzKnrexAp+8J88LnMIms0urBURcwCmb9y5+28=
Subject key identifier:   92:1F:8C:DC:F5:E2:0E:FF:5E:0A:1E:E5:B2:9F:EA:68:35:08:5F:44
Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
Certificate issuer:       /CN=17271603fa8f06afa44a8782065f35f9659c7edd
Certificate serial:       01962F7506DF072581966E1C68EB29D5A5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
Manifest number:          86
Signing time:             Sun 13 Apr 2025 14:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:00 +0000
Files and hashes:         1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: f8G8SqwT/1LS/LcJ7Ibkh46G52CiG1KcCuk5XqJPsbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:06:df:07:25:81:96:6e:1c:68:eb:29:d5:a5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd
        Validity
            Not Before: Apr 13 14:02:00 2025 GMT
            Not After : Apr 14 14:02:00 2025 GMT
        Subject: CN=921f8cdcf5e20eff5e0a1ee5b29fea6835085f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:5b:34:5a:47:81:01:40:77:ca:fa:06:fb:
                    44:8d:e4:13:24:12:33:c0:42:1a:2f:24:16:a3:58:
                    3d:71:be:84:b1:b0:5d:7c:42:fe:cd:84:fc:2c:1a:
                    f1:9f:37:72:d1:48:0c:dc:f3:ed:ab:86:f8:5c:fb:
                    9d:26:cd:e8:60:db:cb:04:bf:6f:25:7d:76:27:14:
                    5e:39:b0:4e:08:91:21:27:10:a0:85:aa:5b:d6:ee:
                    c6:0e:fc:7f:7d:e7:76:65:b1:60:17:cb:e9:b8:36:
                    17:2b:d5:f2:e7:f2:cc:e1:75:28:53:c2:9e:a7:3e:
                    10:d8:a8:3e:ba:7a:eb:88:ed:b2:f5:0b:2f:52:86:
                    a9:77:a4:e9:ff:e5:b4:d7:2f:f4:0d:02:0a:e7:7d:
                    93:ed:a1:a2:0c:62:2b:35:71:eb:6c:99:15:e9:d1:
                    57:07:26:c1:e2:d6:31:e0:a5:35:90:54:c8:6d:85:
                    a5:1d:ca:64:71:7e:95:9c:fe:28:79:b6:c5:05:53:
                    b4:30:64:c2:18:7c:f6:fb:3f:91:87:a6:9e:39:46:
                    4d:fa:9d:a4:db:60:ef:66:44:49:5c:99:15:af:26:
                    fc:5e:6c:80:c8:08:36:b4:dc:e8:f5:ec:e0:e7:ce:
                    36:d3:50:4a:43:a1:a7:62:58:39:43:a5:dc:70:4e:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:8C:DC:F5:E2:0E:FF:5E:0A:1E:E5:B2:9F:EA:68:35:08:5F:44
            X509v3 Authority Key Identifier:
                keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:28:16:d3:9d:51:0a:d1:d6:91:3d:b5:98:c3:10:a9:29:84:
         d1:80:a1:46:85:38:65:af:7f:d4:f7:7e:ee:98:8a:10:dd:6c:
         c2:a7:cd:22:6c:b9:d2:8a:82:4b:38:9b:e0:71:be:2c:9d:95:
         56:ef:25:bb:be:4c:11:d0:3f:74:10:c3:02:16:5a:5f:31:ea:
         5d:af:c6:7a:3f:64:a8:f2:ef:5b:51:09:22:7f:67:b6:76:42:
         fa:fb:8b:c5:de:af:f8:61:bd:fa:f1:f0:18:c8:62:21:ea:49:
         19:b1:5c:e1:e1:c5:e7:6b:00:1d:ac:b5:40:a9:46:8b:66:5a:
         7b:15:c1:81:11:9a:f5:ef:c2:b7:d3:07:73:af:10:b6:e2:a2:
         6a:70:db:d0:13:e7:72:5f:cc:ab:26:6d:73:12:54:d5:96:e6:
         31:99:00:5d:86:5f:69:8e:62:ea:55:f2:56:09:d1:b4:70:71:
         95:49:bf:db:97:e3:ea:0a:d1:ee:e3:ac:39:7e:eb:65:aa:49:
         c0:64:0f:cf:22:be:d1:be:5d:5e:dc:ef:f7:63:2e:41:ce:95:
         31:7e:87:2c:c8:55:3d:7b:8f:f3:e8:15:1b:d0:2c:97:7a:46:
         58:1a:d0:36:50:f9:45:e9:1e:04:02:83:76:98:f7:39:a4:9d:
         13:9e:f8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdQbfByWBlm4caOsp1aXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjcxNjAzZmE4ZjA2YWZhNDRhODc4MjA2NWYzNWY5NjU5
YzdlZGQwHhcNMjUwNDEzMTQwMjAwWhcNMjUwNDE0MTQwMjAwWjAzMTEwLwYDVQQD
Eyg5MjFmOGNkY2Y1ZTIwZWZmNWUwYTFlZTViMjlmZWE2ODM1MDg1ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PRbNFpHgQFAd8r6BvtEjeQTJBIz
wEIaLyQWo1g9cb6EsbBdfEL+zYT8LBrxnzdy0UgM3PPtq4b4XPudJs3oYNvLBL9v
JX12JxReObBOCJEhJxCghapb1u7GDvx/fed2ZbFgF8vpuDYXK9Xy5/LM4XUoU8Ke
pz4Q2Kg+unrriO2y9QsvUoapd6Tp/+W01y/0DQIK532T7aGiDGIrNXHrbJkV6dFX
BybB4tYx4KU1kFTIbYWlHcpkcX6VnP4oebbFBVO0MGTCGHz2+z+Rh6aeOUZN+p2k
22DvZkRJXJkVryb8XmyAyAg2tNzo9ezg584201BKQ6GnYlg5Q6XccE5TKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIfjNz14g7/Xgoe5bKf6mg1CF9EMB8GA1UdIwQY
MBaAFBcnFgP6jwavpEqHggZfNfllnH7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zN2U4ODQtYjk5ZS00Mjk4LTk3ODkt
NTNjZTAxNjU1MzIyLzEvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zN2U4ODQtYjk5ZS00Mjk4LTk3ODktNTNjZTAxNjU1MzIy
LzEvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASgW051R
CtHWkT21mMMQqSmE0YChRoU4Za9/1Pd+7piKEN1swqfNImy50oqCSzib4HG+LJ2V
Vu8lu75MEdA/dBDDAhZaXzHqXa/Gej9kqPLvW1EJIn9ntnZC+vuLxd6v+GG9+vHw
GMhiIepJGbFc4eHF52sAHay1QKlGi2ZaexXBgRGa9e/Ct9MHc68QtuKianDb0BPn
cl/MqyZtcxJU1ZbmMZkAXYZfaY5i6lXyVgnRtHBxlUm/25fj6grR7uOsOX7rZapJ
wGQPzyK+0b5dXtzv92MuQc6VMX6HLMhVPXuP8+gVG9Asl3pGWBrQNlD5RekeBAKD
dpj3OaSdE574bw==
-----END CERTIFICATE-----