Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft
File:                     V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft (raw, json)
Hash identifier:          wfbM5b0PPNk7HCCfg84fkyE310aglA2yk6xzdiVb4Nc=
Subject key identifier:   57:50:54:06:4F:4E:ED:5F:78:7B:EA:B4:D9:A3:96:18:7D:F1:9E:0D
Authority key identifier: 57:D7:8A:DA:84:36:53:6B:80:69:93:A9:02:1D:76:58:F1:4D:B8:83
Certificate issuer:       /CN=57d78ada8436536b806993a9021d7658f14db883
Certificate serial:       019619C7CE7A811C9AC048B76BA7B9CDC8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9eK2oQ2U2uAaZOpAh12WPFNuIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft
Manifest number:          0823
Signing time:             Wed 09 Apr 2025 09:00:47 +0000
Manifest this update:     Wed 09 Apr 2025 09:00:47 +0000
Manifest next update:     Thu 10 Apr 2025 09:00:47 +0000
Files and hashes:         1: V9eK2oQ2U2uAaZOpAh12WPFNuIM.crl (hash: qvfpCWLFU//8OsRE90RUWY9ruHU67NEm8ICbmQg71l8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:19:c7:ce:7a:81:1c:9a:c0:48:b7:6b:a7:b9:cd:c8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d78ada8436536b806993a9021d7658f14db883
        Validity
            Not Before: Apr  9 09:00:47 2025 GMT
            Not After : Apr 10 09:00:47 2025 GMT
        Subject: CN=575054064f4eed5f787beab4d9a396187df19e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b9:00:a4:a0:01:75:00:f8:2b:09:73:10:22:
                    79:56:fc:e5:76:c4:0c:28:b4:ab:b5:aa:9e:9f:d2:
                    ee:5b:58:2b:1b:42:3d:b3:80:82:ec:aa:fc:b3:e3:
                    21:7e:96:7e:6f:5c:4e:80:99:9f:b8:1c:cc:a2:8f:
                    41:ea:d1:d9:11:a1:07:58:e7:d2:7f:25:86:aa:a6:
                    59:f8:58:cc:6d:47:e1:28:54:99:a9:54:2a:f6:e7:
                    96:44:11:20:8a:4d:81:df:ad:c4:d9:68:20:dc:99:
                    f9:27:01:0e:19:1e:12:f9:de:e5:0c:b1:13:0d:db:
                    b7:bd:f8:76:ef:d9:02:50:97:24:1d:60:59:22:d6:
                    65:d8:16:4f:6b:27:94:72:a8:d0:da:e1:9c:00:b1:
                    94:70:65:33:dc:34:d8:7c:67:20:b3:90:0b:3d:87:
                    84:bb:81:1d:5d:ae:46:90:53:85:77:eb:af:2e:5f:
                    8a:74:94:96:2a:ac:a1:44:de:86:d1:50:a5:38:dd:
                    4e:53:99:d0:59:2c:99:8a:e1:2f:44:39:89:78:43:
                    2f:94:99:30:99:2f:8f:20:1b:74:22:f2:b7:d8:40:
                    ef:ef:e7:4b:a6:55:51:21:e0:bd:55:3f:12:de:37:
                    34:48:bb:73:76:ce:87:b1:d1:d0:da:c6:2c:17:fa:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:54:06:4F:4E:ED:5F:78:7B:EA:B4:D9:A3:96:18:7D:F1:9E:0D
            X509v3 Authority Key Identifier:
                keyid:57:D7:8A:DA:84:36:53:6B:80:69:93:A9:02:1D:76:58:F1:4D:B8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9eK2oQ2U2uAaZOpAh12WPFNuIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1b:70:3f:00:06:52:c8:2a:39:44:69:52:fa:99:97:e4:2d:
         0c:7d:3f:49:3e:3e:3b:22:f1:81:e3:01:90:f4:ff:51:70:9f:
         a2:ef:a4:ae:23:38:47:e8:1a:18:bf:54:7e:10:32:e7:80:7d:
         cf:9c:21:d7:85:2e:96:e6:2f:9e:6b:d7:28:89:c9:3d:21:a3:
         e8:86:b8:00:85:16:8f:10:27:b1:fa:93:61:73:bd:0d:22:3a:
         8b:be:7a:09:5f:f2:6a:d6:bb:48:f9:52:a1:3c:fd:61:4a:9e:
         e0:52:04:41:da:45:e5:65:82:a3:5d:6c:91:61:2f:82:0e:15:
         bc:86:72:4c:e6:5a:16:3e:8b:3f:c4:7c:17:5f:f5:19:57:2c:
         29:db:f1:a1:8c:13:29:0f:e1:f5:7a:88:de:13:eb:7a:4f:35:
         fd:5b:88:4f:2b:df:a5:09:4d:1b:fa:8b:35:b7:f9:bf:a4:4b:
         77:d1:8f:22:58:ec:8d:c3:c4:16:dc:20:44:16:cf:a7:a9:f8:
         6c:22:9d:75:e8:33:08:d6:bb:58:13:63:f8:ff:72:3c:11:1f:
         89:66:c8:79:a8:91:d8:bc:5e:bb:60:8b:cd:f3:37:1b:0e:9c:
         2e:43:a5:a4:dd:90:44:b3:fd:0e:ca:51:e6:e1:d9:28:48:95:
         d0:ad:b5:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYZx856gRyawEi3a6e5zcjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDc4YWRhODQzNjUzNmI4MDY5OTNhOTAyMWQ3NjU4ZjE0
ZGI4ODMwHhcNMjUwNDA5MDkwMDQ3WhcNMjUwNDEwMDkwMDQ3WjAzMTEwLwYDVQQD
Eyg1NzUwNTQwNjRmNGVlZDVmNzg3YmVhYjRkOWEzOTYxODdkZjE5ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67kApKABdQD4KwlzECJ5VvzldsQM
KLSrtaqen9LuW1grG0I9s4CC7Kr8s+MhfpZ+b1xOgJmfuBzMoo9B6tHZEaEHWOfS
fyWGqqZZ+FjMbUfhKFSZqVQq9ueWRBEgik2B363E2Wgg3Jn5JwEOGR4S+d7lDLET
Ddu3vfh279kCUJckHWBZItZl2BZPayeUcqjQ2uGcALGUcGUz3DTYfGcgs5ALPYeE
u4EdXa5GkFOFd+uvLl+KdJSWKqyhRN6G0VClON1OU5nQWSyZiuEvRDmJeEMvlJkw
mS+PIBt0IvK32EDv7+dLplVRIeC9VT8S3jc0SLtzds6HsdHQ2sYsF/o4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdQVAZPTu1feHvqtNmjlhh98Z4NMB8GA1UdIwQY
MBaAFFfXitqENlNrgGmTqQIddljxTbiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjllSzJvUTJVMnVBYVpPcEFoMTJXUEZOdUlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yMDllODctNGJkOS00OTUwLThjZDIt
YTJiNjE0MjI1MGU0LzEvVjllSzJvUTJVMnVBYVpPcEFoMTJXUEZOdUlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yMDllODctNGJkOS00OTUwLThjZDItYTJiNjE0MjI1MGU0
LzEvVjllSzJvUTJVMnVBYVpPcEFoMTJXUEZOdUlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRtwPwAG
UsgqOURpUvqZl+QtDH0/ST4+OyLxgeMBkPT/UXCfou+kriM4R+gaGL9UfhAy54B9
z5wh14UuluYvnmvXKInJPSGj6Ia4AIUWjxAnsfqTYXO9DSI6i756CV/yata7SPlS
oTz9YUqe4FIEQdpF5WWCo11skWEvgg4VvIZyTOZaFj6LP8R8F1/1GVcsKdvxoYwT
KQ/h9XqI3hPrek81/VuITyvfpQlNG/qLNbf5v6RLd9GPIljsjcPEFtwgRBbPp6n4
bCKddegzCNa7WBNj+P9yPBEfiWbIeaiR2Lxeu2CLzfM3Gw6cLkOlpN2QRLP9DspR
5uHZKEiV0K21GA==
-----END CERTIFICATE-----
Generated at Thu May 1 02:52:28 2025 by rpki-client