Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File:                     C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier:          J9bXBxRUosisWJ+xpYbxuYvdsl/ewC5Hu9g2+w5A9hI=
Subject key identifier:   75:09:EF:AD:87:15:BD:18:31:59:8E:64:B3:29:BD:D3:56:94:BA:24
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer:       /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial:       01962DF3D515B93329A324DFF681FAF1E742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number:          0BC9
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: 1j/79/fhuFh9K6fF4jcu3JkddzMr3ZE1Ey7I20h//es=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d5:15:b9:33:29:a3:24:df:f6:81:fa:f1:e7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=7509efad8715bd1831598e64b329bdd35694ba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:36:ae:9b:8b:d5:42:39:85:ba:9d:18:7c:
                    4c:4b:12:cf:f2:93:4d:87:0e:46:44:89:3e:bd:56:
                    96:8f:44:34:68:be:69:82:e1:6f:3d:9a:bf:56:ea:
                    cf:0a:fd:47:29:f7:20:9f:d9:96:12:2e:01:b4:ed:
                    62:e3:81:ff:c1:c3:af:68:70:c8:a9:bc:37:6c:3a:
                    a7:cb:5d:76:a7:a2:9e:c4:33:b1:09:93:05:9f:d1:
                    4f:07:e0:7f:0e:8c:c6:94:1f:f4:09:57:06:5f:af:
                    c5:5f:99:e9:d9:a5:8d:91:af:c4:76:27:dc:e3:78:
                    e3:e2:ea:b2:de:91:66:e1:61:92:4d:b9:3d:ce:7c:
                    60:92:68:d5:c8:3a:84:36:8b:3d:67:6d:ff:4a:b6:
                    61:7a:fd:33:87:93:40:23:96:ef:21:15:22:76:87:
                    63:16:88:7a:e5:b3:9c:6f:27:0d:6e:b7:7a:7b:ed:
                    bb:d6:b1:10:af:f2:e3:13:55:4b:e5:46:a4:53:36:
                    64:7c:ab:f3:5e:e0:fe:0b:9f:9b:1a:7c:82:ce:71:
                    23:e0:0a:3e:2b:e0:a6:e6:92:98:b0:49:d9:7a:01:
                    47:85:a8:2d:d1:25:40:64:c5:f4:80:05:1c:53:55:
                    42:1b:a6:bf:20:ce:5d:74:28:98:9c:3e:a9:47:7a:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:09:EF:AD:87:15:BD:18:31:59:8E:64:B3:29:BD:D3:56:94:BA:24
            X509v3 Authority Key Identifier:
                keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:aa:71:89:64:26:de:9e:52:70:ae:f7:58:96:49:05:19:69:
         65:95:23:de:c9:51:c6:96:5c:09:70:2f:05:e4:0f:f5:b3:48:
         c1:61:ec:35:9e:1f:ba:9a:97:cf:7b:04:91:11:6f:31:06:12:
         b6:69:74:33:52:c3:23:a5:f9:bf:43:f9:43:ed:8b:b6:37:7f:
         2e:d6:64:ae:d0:c1:2d:4b:ae:24:df:67:bb:ef:e7:8b:40:51:
         e3:ee:47:28:84:83:14:ff:53:21:86:e1:2a:97:8c:77:22:47:
         98:11:ed:c8:4f:d4:54:c5:32:82:26:d4:c6:04:ad:28:f0:e3:
         d8:2c:72:bf:4e:98:94:4d:f8:70:d6:c5:30:62:e3:e4:42:08:
         d5:bd:8b:e5:d6:49:0b:87:14:3f:d3:32:9b:f1:0d:37:e0:ea:
         e1:65:6b:fa:f7:27:a7:b8:83:be:35:21:ee:73:25:04:83:b1:
         9c:d8:fe:c6:16:80:1a:e9:8e:03:a2:14:39:da:ff:66:f5:35:
         84:f3:8f:b3:de:ac:ae:b2:75:c9:b2:47:99:2d:9c:89:ac:1d:
         18:5c:62:b2:df:7a:c0:77:60:bf:57:55:e5:03:c9:3d:32:06:
         21:a4:0b:1a:93:bf:e5:10:34:69:79:b6:99:95:69:2c:46:02:
         1b:75:34:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89UVuTMpoyTf9oH68edCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTBiZTA5NGE1YTkzZDA3Y2UxOWU0NmJlNjJmOWZmY2U2
MzQ1ODMwHhcNMjUwNDEzMDcwMTE2WhcNMjUwNDE0MDcwMTE2WjAzMTEwLwYDVQQD
Eyg3NTA5ZWZhZDg3MTViZDE4MzE1OThlNjRiMzI5YmRkMzU2OTRiYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNM2rpuL1UI5hbqdGHxMSxLP8pNN
hw5GRIk+vVaWj0Q0aL5pguFvPZq/VurPCv1HKfcgn9mWEi4BtO1i44H/wcOvaHDI
qbw3bDqny112p6KexDOxCZMFn9FPB+B/DozGlB/0CVcGX6/FX5np2aWNka/Edifc
43jj4uqy3pFm4WGSTbk9znxgkmjVyDqENos9Z23/SrZhev0zh5NAI5bvIRUidodj
Foh65bOcbycNbrd6e+271rEQr/LjE1VL5UakUzZkfKvzXuD+C5+bGnyCznEj4Ao+
K+Cm5pKYsEnZegFHhagt0SVAZMX0gAUcU1VCG6a/IM5ddCiYnD6pR3rHDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUJ762HFb0YMVmOZLMpvdNWlLokMB8GA1UdIwQY
MBaAFAugvglKWpPQfOGeRr5i+f/OY0WDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEt
YmZjYWIzMmRhZmM2LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEtYmZjYWIzMmRhZmM2
LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqpxiWQm
3p5ScK73WJZJBRlpZZUj3slRxpZcCXAvBeQP9bNIwWHsNZ4fupqXz3sEkRFvMQYS
tml0M1LDI6X5v0P5Q+2Ltjd/LtZkrtDBLUuuJN9nu+/ni0BR4+5HKISDFP9TIYbh
KpeMdyJHmBHtyE/UVMUygibUxgStKPDj2Cxyv06YlE34cNbFMGLj5EII1b2L5dZJ
C4cUP9Mym/ENN+Dq4WVr+vcnp7iDvjUh7nMlBIOxnNj+xhaAGumOA6IUOdr/ZvU1
hPOPs96srrJ1ybJHmS2ciawdGFxist96wHdgv1dV5QPJPTIGIaQLGpO/5RA0aXm2
mZVpLEYCG3U0FA==
-----END CERTIFICATE-----