Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File:                     Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier:          UVjEoMQoPfqHnAz0pWQ5yuSa/iYmjCRXYGBA4xbk8QI=
Subject key identifier:   82:23:E3:20:90:B5:0A:D8:54:06:DC:A6:24:E4:47:0F:30:AC:C3:57
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer:       /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial:       01962F749267D46C7DB2C22F60B6C9B296D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: CruTO4aveeS4+CUfPb0Df26jARMTjNytcFYPXikZgWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:92:67:d4:6c:7d:b2:c2:2f:60:b6:c9:b2:96:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=8223e32090b50ad85406dca624e4470f30acc357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:21:3a:b9:58:dd:20:8c:cb:5c:c3:d3:26:
                    48:b3:a4:9f:85:67:05:01:92:c2:87:4f:a4:c2:f6:
                    12:ed:52:57:47:13:a5:0b:4d:16:94:8c:df:ca:47:
                    4f:96:e4:22:13:34:b5:70:f6:1e:df:ca:20:31:f9:
                    82:ea:65:15:e3:7f:02:d3:8d:f8:cd:6d:e6:d0:5b:
                    f8:e2:70:9a:38:1d:21:f3:c6:ff:fc:96:2b:6c:14:
                    e2:ab:d8:99:6a:d6:59:44:ad:ce:5e:32:e1:91:56:
                    ec:53:5e:89:ed:22:3f:a5:70:eb:9f:45:8a:77:01:
                    8a:a2:6f:2a:75:64:70:94:d7:4d:b1:99:4b:71:0f:
                    b6:1b:b1:a6:07:85:c6:c1:da:54:6e:4e:9a:f1:16:
                    71:d3:0d:55:5b:05:20:3c:d6:77:0e:f2:b2:c6:03:
                    bd:34:6a:64:f6:fc:1b:2b:2f:9d:b2:f9:79:a5:0b:
                    8d:7c:40:0a:9b:da:05:5c:a8:22:6c:67:43:a5:7c:
                    82:7e:bf:19:81:81:71:f8:61:83:d1:55:c0:6c:76:
                    74:63:04:df:d6:70:8b:df:9f:3e:f5:d5:0f:2e:96:
                    ec:61:01:af:84:35:af:e5:3b:28:25:47:cf:64:ef:
                    e1:53:26:31:5d:94:1f:64:cc:a4:fa:a0:d4:48:b1:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:23:E3:20:90:B5:0A:D8:54:06:DC:A6:24:E4:47:0F:30:AC:C3:57
            X509v3 Authority Key Identifier:
                keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:89:0b:e6:47:27:ef:91:43:19:cf:41:f4:06:d2:42:54:93:
         a4:a9:23:bc:20:a1:f7:1e:0f:ca:40:d9:b3:cd:47:2f:b1:26:
         70:64:d2:15:9c:3a:d4:58:13:f6:4c:71:3d:a4:d8:fe:a0:9d:
         2f:1e:11:90:1f:96:cb:9c:14:44:e6:31:94:ad:60:7b:63:af:
         7b:de:5e:79:b4:91:f4:3c:30:91:9f:46:62:2e:b3:36:17:92:
         8e:80:71:d1:0a:ab:a8:8a:bb:4a:7b:47:77:22:ae:40:25:fb:
         a1:96:60:29:be:b5:38:ae:1e:52:db:a4:40:99:ed:b9:ef:36:
         68:14:e0:46:31:fe:e1:0d:bc:39:cb:c9:a6:8a:59:fc:04:21:
         0f:a9:e6:c1:07:52:6e:46:73:68:7f:69:df:46:cf:fe:1b:23:
         c9:2b:66:ab:6a:6a:4d:76:c9:7b:7e:79:cc:a3:e7:5f:c5:b3:
         b7:8d:4a:ae:0d:ab:8f:bc:7b:6a:b6:3d:22:70:9a:65:89:f8:
         6e:e3:2d:ff:b0:78:47:6f:b4:88:d4:d5:fa:fa:68:25:27:29:
         e0:ab:72:64:7b:4d:16:cb:dc:7d:39:82:d2:6b:24:86:5f:e7:
         32:9b:82:c4:0c:24:85:67:66:89:55:25:d7:d3:02:22:71:40:
         f6:96:58:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJJn1Gx9ssIvYLbJspbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWQzZGVlNjM3ZGUzNGIxM2M3NGJhNmNmYjRkMjA1YmU1
NTYyN2UwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
Eyg4MjIzZTMyMDkwYjUwYWQ4NTQwNmRjYTYyNGU0NDcwZjMwYWNjMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFwhOrlY3SCMy1zD0yZIs6SfhWcF
AZLCh0+kwvYS7VJXRxOlC00WlIzfykdPluQiEzS1cPYe38ogMfmC6mUV438C0434
zW3m0Fv44nCaOB0h88b//JYrbBTiq9iZatZZRK3OXjLhkVbsU16J7SI/pXDrn0WK
dwGKom8qdWRwlNdNsZlLcQ+2G7GmB4XGwdpUbk6a8RZx0w1VWwUgPNZ3DvKyxgO9
NGpk9vwbKy+dsvl5pQuNfEAKm9oFXKgibGdDpXyCfr8ZgYFx+GGD0VXAbHZ0YwTf
1nCL358+9dUPLpbsYQGvhDWv5TsoJUfPZO/hUyYxXZQfZMyk+qDUSLGDBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIj4yCQtQrYVAbcpiTkRw8wrMNXMB8GA1UdIwQY
MBaAFE8dPe5jfeNLE8dLps+00gW+VWJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2Ut
MWYxYjI0MTE4ZDg1LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2UtMWYxYjI0MTE4ZDg1
LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYkL5kcn
75FDGc9B9AbSQlSTpKkjvCCh9x4PykDZs81HL7EmcGTSFZw61FgT9kxxPaTY/qCd
Lx4RkB+Wy5wUROYxlK1ge2Ove95eebSR9DwwkZ9GYi6zNheSjoBx0QqrqIq7SntH
dyKuQCX7oZZgKb61OK4eUtukQJntue82aBTgRjH+4Q28OcvJpopZ/AQhD6nmwQdS
bkZzaH9p30bP/hsjyStmq2pqTXbJe355zKPnX8Wzt41Krg2rj7x7arY9InCaZYn4
buMt/7B4R2+0iNTV+vpoJScp4KtyZHtNFsvcfTmC0mskhl/nMpuCxAwkhWdmiVUl
19MCInFA9pZYBw==
-----END CERTIFICATE-----