Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File:                     12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier:          G5xoBRo6YgTuKhZ0r21xPuyS1QHstQadaWNkJNZb+i8=
Subject key identifier:   98:B9:8D:40:8F:9B:AC:E6:BB:C4:11:F6:59:F3:57:08:F3:D8:26:C8
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer:       /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial:       01962F3D56BAF64B173958BAE50DFE3AAF04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number:          04EA
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: X/lovti5/UVYBdER4R5Gs/hMIkfK03IzicSeZsA5ayk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:ba:f6:4b:17:39:58:ba:e5:0d:fe:3a:af:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=98b98d408f9bace6bbc411f659f35708f3d826c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:c5:75:d0:d2:bb:af:e5:b6:b1:d7:0e:bf:
                    2a:dd:bb:d9:c0:31:72:67:d6:f9:a6:fd:86:9b:c4:
                    b8:ea:f5:15:c6:c2:01:1b:3f:c8:d6:54:fa:eb:e7:
                    c8:34:d0:e9:54:5b:26:8c:71:90:a9:e4:e9:f4:1f:
                    7e:74:95:f7:52:db:04:3f:f5:d9:4a:68:5c:dd:88:
                    a8:75:fc:b7:46:6d:44:d0:b4:2f:82:91:34:ef:34:
                    be:a6:20:a0:de:90:69:ef:97:b3:75:32:02:73:9b:
                    8b:41:6a:c9:18:62:cb:23:1d:35:0b:12:f1:21:df:
                    c3:78:58:05:d7:16:fa:65:57:86:4a:ab:9c:67:29:
                    55:e4:5b:18:71:2f:40:2d:9f:b6:15:cc:0c:96:c1:
                    8a:d5:8a:70:43:27:57:5a:21:75:54:de:b5:5e:32:
                    31:1a:0b:13:4d:a8:4b:c2:2d:8b:7c:cc:64:fc:62:
                    e0:c6:b9:e6:27:9b:c3:62:2f:89:c4:b8:98:18:6d:
                    e0:de:b7:d8:39:a9:2f:69:1a:04:9b:61:a8:b7:bd:
                    42:b8:f0:c1:27:19:28:be:41:b9:69:67:7d:34:79:
                    be:89:94:5e:34:64:44:11:57:45:25:b0:8b:ff:6f:
                    5f:91:46:59:cd:f4:4f:82:ba:8c:40:61:ba:1f:fd:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B9:8D:40:8F:9B:AC:E6:BB:C4:11:F6:59:F3:57:08:F3:D8:26:C8
            X509v3 Authority Key Identifier:
                keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:96:c2:9f:5a:a3:8d:e4:f1:2b:7a:3d:3c:48:25:65:38:
         37:10:26:65:d6:36:26:42:b9:01:5d:46:4f:52:d6:77:1b:06:
         5f:03:b9:57:48:c8:75:0b:7e:14:fe:84:39:36:e4:20:6a:cf:
         2c:0e:76:63:3a:14:de:a9:dc:0f:65:54:92:92:4a:ad:ec:41:
         fa:a0:87:f2:9e:3e:70:10:10:32:22:1c:a6:b0:fc:e1:2f:6b:
         d0:9d:8a:9d:23:3d:dc:25:3b:39:9a:f2:6d:85:58:eb:5b:06:
         d9:7c:4f:5f:4c:a4:3c:3a:fe:4f:fa:72:6e:97:66:5b:46:01:
         38:0b:99:6a:d7:9c:bd:3c:ab:20:78:6a:bb:56:a0:11:79:e4:
         66:5a:8e:0f:ae:cb:3d:b9:8f:e0:43:8d:38:1c:4f:ea:f1:f7:
         5f:a3:89:27:b8:16:77:bb:cb:39:94:99:84:fa:17:f6:af:6f:
         7d:ec:b1:b1:7a:09:20:04:59:d8:82:cc:db:ad:ba:5d:03:ab:
         69:8e:5c:00:b8:d5:c4:23:ff:bf:33:10:d8:3c:2c:67:27:65:
         07:c4:70:ee:67:64:47:ea:e1:25:aa:95:95:7a:8b:1c:70:86:
         e8:dc:a3:0e:56:dc:77:19:d4:45:71:f2:2d:e1:f3:f2:c6:59:
         57:3f:19:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVa69ksXOVi65Q3+Oq8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjRjN2YzZjc4Yjg3NmQ2YjA0M2MxNmNkZGJkZGViMWU3
OTViOWMwHhcNMjUwNDEzMTMwMTEwWhcNMjUwNDE0MTMwMTEwWjAzMTEwLwYDVQQD
Eyg5OGI5OGQ0MDhmOWJhY2U2YmJjNDExZjY1OWYzNTcwOGYzZDgyNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW7FddDSu6/ltrHXDr8q3bvZwDFy
Z9b5pv2Gm8S46vUVxsIBGz/I1lT66+fINNDpVFsmjHGQqeTp9B9+dJX3UtsEP/XZ
Smhc3Yiodfy3Rm1E0LQvgpE07zS+piCg3pBp75ezdTICc5uLQWrJGGLLIx01CxLx
Id/DeFgF1xb6ZVeGSqucZylV5FsYcS9ALZ+2FcwMlsGK1YpwQydXWiF1VN61XjIx
GgsTTahLwi2LfMxk/GLgxrnmJ5vDYi+JxLiYGG3g3rfYOakvaRoEm2Got71CuPDB
JxkovkG5aWd9NHm+iZReNGREEVdFJbCL/29fkUZZzfRPgrqMQGG6H/3d9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi5jUCPm6zmu8QR9lnzVwjz2CbIMB8GA1UdIwQY
MBaAFNdkx/P3i4dtawQ8Fs3b3eseeVucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDIt
NWUyY2JmOTQyNDA1LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDItNWUyY2JmOTQyNDA1
LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACieWwp9a
o43k8St6PTxIJWU4NxAmZdY2JkK5AV1GT1LWdxsGXwO5V0jIdQt+FP6EOTbkIGrP
LA52YzoU3qncD2VUkpJKrexB+qCH8p4+cBAQMiIcprD84S9r0J2KnSM93CU7OZry
bYVY61sG2XxPX0ykPDr+T/pybpdmW0YBOAuZatecvTyrIHhqu1agEXnkZlqOD67L
PbmP4EONOBxP6vH3X6OJJ7gWd7vLOZSZhPoX9q9vfeyxsXoJIARZ2ILM2626XQOr
aY5cALjVxCP/vzMQ2DwsZydlB8Rw7mdkR+rhJaqVlXqLHHCG6NyjDlbcdxnURXHy
LeHz8sZZVz8ZAw==
-----END CERTIFICATE-----