Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File:                     3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier:          zakq18dWY6KPABqKkrFaNPS2SBg02trqiUrJo3wfHpo=
Subject key identifier:   00:0E:38:F8:74:44:DE:C9:A5:6C:8C:78:C7:FD:DF:DE:39:55:AB:9B
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer:       /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial:       01962E995BE5CC341315766D8453E37981A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number:          079E
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: 9h/53MNLoR3Zss5MFktR6Lu+3ZeA5N9rmuqwzlBa3js=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5b:e5:cc:34:13:15:76:6d:84:53:e3:79:81:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=000e38f87444dec9a56c8c78c7fddfde3955ab9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:dd:1b:03:ee:a2:1b:4d:34:0e:6d:c0:4e:
                    3d:2c:62:b2:2d:4e:8d:02:80:7e:d2:1e:af:13:5d:
                    14:33:40:3e:30:f0:12:51:48:a8:86:5c:fa:29:b2:
                    b1:6c:6f:1c:c8:57:ca:12:2f:d6:e9:87:d4:9f:64:
                    e3:fa:8f:32:f1:d4:f3:8f:81:cb:e7:64:e4:48:b4:
                    e3:f0:35:cd:5b:ad:2f:2a:ee:26:3e:0e:f7:e5:cf:
                    84:60:78:1b:d0:d4:af:39:aa:9b:f5:31:59:77:97:
                    90:e4:f7:fe:c9:97:3a:a8:ae:c2:c0:eb:18:d2:15:
                    85:82:7c:99:45:5b:8e:d5:12:77:51:20:4b:5a:4a:
                    f6:71:68:c4:c2:eb:05:8e:50:3f:8a:dc:54:3c:fa:
                    f4:a3:e2:63:fd:bf:f9:3b:2b:d8:75:45:77:bf:8f:
                    c1:9d:a3:d9:9c:a2:b2:ff:d4:46:f6:7d:8b:0e:80:
                    e4:b8:d8:61:c6:aa:17:d0:6f:77:41:a8:ec:4e:a7:
                    6a:75:32:27:a4:db:5f:ae:15:e3:00:6e:cb:ee:c2:
                    30:6e:d0:f3:6e:d6:65:02:0c:92:a0:f6:bf:ab:7b:
                    c9:1b:0d:c5:1d:52:79:ae:ca:eb:0a:98:fe:77:93:
                    13:69:5f:1c:4b:45:b6:fb:dd:34:02:e4:4b:a3:5b:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:38:F8:74:44:DE:C9:A5:6C:8C:78:C7:FD:DF:DE:39:55:AB:9B
            X509v3 Authority Key Identifier:
                keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:af:a3:2e:67:a3:98:fa:97:71:6c:e4:14:6e:1b:e9:a2:6c:
         8f:17:26:89:d8:84:a0:d3:c6:5f:c3:db:55:42:55:ff:40:b5:
         67:4a:94:52:48:6b:0a:9b:6c:4f:a6:43:67:61:fa:50:9c:5b:
         6f:8c:0f:db:a4:48:1d:bb:a2:6d:24:d2:a9:0a:18:a4:a2:a5:
         2b:9a:f4:d4:4b:5d:f6:12:8a:a9:84:8c:60:e6:4e:e3:5f:d1:
         f1:d6:5b:4e:b0:db:8f:c5:6d:29:c3:70:7d:e0:3c:0d:37:2f:
         86:a8:04:c5:90:f8:9e:03:d5:74:11:14:f1:03:74:1b:8d:17:
         91:76:af:1f:70:44:0f:64:66:6c:62:e0:b9:6c:6b:59:2d:27:
         e9:00:68:e2:73:a3:67:c7:c5:a9:90:18:2c:73:74:8d:1c:c6:
         07:df:26:5f:2e:63:37:65:48:cf:6b:6e:d6:43:57:d9:2a:36:
         de:36:69:e0:d6:37:ba:fe:7c:52:5c:2a:36:18:ed:9d:e8:74:
         08:b6:9d:35:42:df:d6:33:f0:e1:b5:48:31:52:24:e3:1b:e6:
         a6:37:8b:3b:76:e7:6b:19:9a:8e:f3:c9:35:46:19:c4:ec:6d:
         4e:26:56:f6:1a:59:4a:70:b7:2d:ca:1e:c8:c6:9f:18:dc:8c:
         d6:07:75:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVvlzDQTFXZthFPjeYGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGJlMjUzNzU5NDIyNzZiMjY0NDA5N2RjM2Q1YTg3NWFm
YjhhZjEwHhcNMjUwNDEzMTAwMjA0WhcNMjUwNDE0MTAwMjA0WjAzMTEwLwYDVQQD
EygwMDBlMzhmODc0NDRkZWM5YTU2YzhjNzhjN2ZkZGZkZTM5NTVhYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYTdGwPuohtNNA5twE49LGKyLU6N
AoB+0h6vE10UM0A+MPASUUiohlz6KbKxbG8cyFfKEi/W6YfUn2Tj+o8y8dTzj4HL
52TkSLTj8DXNW60vKu4mPg735c+EYHgb0NSvOaqb9TFZd5eQ5Pf+yZc6qK7CwOsY
0hWFgnyZRVuO1RJ3USBLWkr2cWjEwusFjlA/itxUPPr0o+Jj/b/5OyvYdUV3v4/B
naPZnKKy/9RG9n2LDoDkuNhhxqoX0G93QajsTqdqdTInpNtfrhXjAG7L7sIwbtDz
btZlAgySoPa/q3vJGw3FHVJ5rsrrCpj+d5MTaV8cS0W2+900AuRLo1uTsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAOOPh0RN7JpWyMeMf93945VaubMB8GA1UdIwQY
MBaAFNxL4lN1lCJ2smRAl9w9Woda+4rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81M2QxMDAtOTk3Ni00OTRiLWFlMjEt
MGI4NTEwMzhhNWRlLzEvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81M2QxMDAtOTk3Ni00OTRiLWFlMjEtMGI4NTEwMzhhNWRl
LzEvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK+jLmej
mPqXcWzkFG4b6aJsjxcmidiEoNPGX8PbVUJV/0C1Z0qUUkhrCptsT6ZDZ2H6UJxb
b4wP26RIHbuibSTSqQoYpKKlK5r01Etd9hKKqYSMYOZO41/R8dZbTrDbj8VtKcNw
feA8DTcvhqgExZD4ngPVdBEU8QN0G40XkXavH3BED2RmbGLguWxrWS0n6QBo4nOj
Z8fFqZAYLHN0jRzGB98mXy5jN2VIz2tu1kNX2So23jZp4NY3uv58UlwqNhjtneh0
CLadNULf1jPw4bVIMVIk4xvmpjeLO3bnaxmajvPJNUYZxOxtTiZW9hpZSnC3Lcoe
yMafGNyM1gd16Q==
-----END CERTIFICATE-----