Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/0t9IuNxsKS7qjIBRd_2mdL8hlz4.mft
File:                     0t9IuNxsKS7qjIBRd_2mdL8hlz4.mft (raw, json)
Hash identifier:          SQc4OA1kBHEnfrTOpSVmtrut8mUN/Q5cV8r6pkIW450=
Subject key identifier:   C9:52:66:9B:C3:6A:6D:30:84:98:91:F3:C2:5A:CD:41:41:AF:D1:55
Authority key identifier: D2:DF:48:B8:DC:6C:29:2E:EA:8C:80:51:77:FD:A6:74:BF:21:97:3E
Certificate issuer:       /CN=d2df48b8dc6c292eea8c805177fda674bf21973e
Certificate serial:       019561759ECA30844590020F0D058E923E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t9IuNxsKS7qjIBRd_2mdL8hlz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/0t9IuNxsKS7qjIBRd_2mdL8hlz4.mft
Manifest number:          11
Signing time:             Tue 04 Mar 2025 14:00:53 +0000
Manifest this update:     Tue 04 Mar 2025 14:00:53 +0000
Manifest next update:     Wed 05 Mar 2025 14:00:53 +0000
Files and hashes:         1: 0t9IuNxsKS7qjIBRd_2mdL8hlz4.crl (hash: wGXjoHD5ib+0kyz7Kw5mvssqpCh6mFkDxA6QJ4h/uK8=)
                          2: kAJyr4_hSQqVhv1REaOoVWs2p6s.roa (hash: HuCxhO/IzzgViOiWxfA5fPeB/YVNacwaBMSbkDxulnc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:61:75:9e:ca:30:84:45:90:02:0f:0d:05:8e:92:3e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2df48b8dc6c292eea8c805177fda674bf21973e
        Validity
            Not Before: Mar  4 14:00:53 2025 GMT
            Not After : Mar  5 14:00:53 2025 GMT
        Subject: CN=c952669bc36a6d30849891f3c25acd4141afd155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:c7:d1:ed:da:b0:b2:b1:6a:92:83:f8:37:
                    48:3f:47:aa:ed:10:b3:d3:ee:21:d6:1f:ae:f6:af:
                    cc:18:9f:f1:e9:76:23:28:73:e0:a4:31:b1:1a:d5:
                    98:fe:f2:3a:02:3d:f9:3c:82:7f:d8:a4:99:4e:c7:
                    b2:0e:ea:58:ac:ed:3e:e8:57:aa:62:54:a9:86:6f:
                    03:f1:da:27:a8:c9:0e:6e:35:3a:16:d8:12:3d:e6:
                    3d:1f:cc:21:4e:b8:a6:cf:5f:cf:26:e4:cc:b4:91:
                    be:d3:e5:07:6a:6e:70:56:a6:e0:b4:af:62:7f:d6:
                    07:b9:e6:ca:fd:d2:53:22:35:3f:51:7f:ff:2f:1c:
                    7b:65:65:86:c6:23:1d:cd:3d:9d:d0:df:69:96:0a:
                    75:d7:ad:e6:68:70:bf:18:d2:dc:37:5b:40:7e:e3:
                    7b:3a:65:c0:76:52:e1:1e:46:b0:3e:48:d6:8c:4c:
                    b2:b6:9a:62:a2:d0:c9:08:e7:76:3f:45:9c:b4:bc:
                    db:16:f2:36:23:38:bb:de:98:5d:ec:e6:9c:1b:90:
                    98:c1:81:1e:48:ff:25:a4:c4:86:ce:f1:c8:42:95:
                    45:f5:89:6d:04:77:ae:9c:77:67:58:79:b7:d0:14:
                    21:07:a2:75:08:b3:ff:7a:5b:c2:16:c6:6a:85:10:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:52:66:9B:C3:6A:6D:30:84:98:91:F3:C2:5A:CD:41:41:AF:D1:55
            X509v3 Authority Key Identifier:
                keyid:D2:DF:48:B8:DC:6C:29:2E:EA:8C:80:51:77:FD:A6:74:BF:21:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t9IuNxsKS7qjIBRd_2mdL8hlz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/0t9IuNxsKS7qjIBRd_2mdL8hlz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c0e112-dfb2-44e8-8707-ffc6f0da4a9f/1/0t9IuNxsKS7qjIBRd_2mdL8hlz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3b:46:3f:73:02:e8:37:c3:83:72:72:c4:96:0e:05:79:68:
         81:1f:3a:04:ce:0b:18:6d:d1:d8:2d:c2:81:d5:e6:88:e4:81:
         d2:c7:db:f0:9b:35:06:51:c3:f3:e8:84:e8:55:ec:b6:06:75:
         ff:2e:63:b0:93:d0:f5:cc:27:6e:d7:42:eb:79:50:fc:c1:21:
         c6:27:fb:19:ed:fe:4a:a0:c5:72:fb:b6:b0:00:a7:0a:9c:1f:
         81:ae:76:60:46:79:f3:da:cc:89:d8:e9:9a:9d:3f:a6:cc:b6:
         60:59:00:64:fc:7b:88:9e:71:79:a6:09:86:6b:85:05:cf:d6:
         ab:e3:a4:07:c9:70:cb:3b:e9:63:b0:80:95:2e:60:0c:02:27:
         45:07:b6:4d:89:ef:cc:0b:1a:7a:9b:22:c3:ee:1a:6a:02:10:
         15:79:ee:1c:2a:97:81:b6:bb:67:75:b2:d6:df:ae:7d:4d:63:
         31:a4:eb:44:c6:34:49:65:27:82:79:b9:08:f6:09:73:66:66:
         39:e3:21:47:22:02:54:f6:f9:a9:bf:48:14:94:74:9e:74:92:
         b4:d5:d3:0d:dc:59:64:1a:4f:49:c8:ce:20:10:9d:90:53:c8:
         b1:01:7e:9f:75:2e:97:5d:27:eb:31:05:de:95:38:9c:db:d1:
         f9:0c:2f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVhdZ7KMIRFkAIPDQWOkj5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZGY0OGI4ZGM2YzI5MmVlYThjODA1MTc3ZmRhNjc0YmYy
MTk3M2UwHhcNMjUwMzA0MTQwMDUzWhcNMjUwMzA1MTQwMDUzWjAzMTEwLwYDVQQD
EyhjOTUyNjY5YmMzNmE2ZDMwODQ5ODkxZjNjMjVhY2Q0MTQxYWZkMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9PH0e3asLKxapKD+DdIP0eq7RCz
0+4h1h+u9q/MGJ/x6XYjKHPgpDGxGtWY/vI6Aj35PIJ/2KSZTseyDupYrO0+6Feq
YlSphm8D8donqMkObjU6FtgSPeY9H8whTrimz1/PJuTMtJG+0+UHam5wVqbgtK9i
f9YHuebK/dJTIjU/UX//Lxx7ZWWGxiMdzT2d0N9plgp1163maHC/GNLcN1tAfuN7
OmXAdlLhHkawPkjWjEyytppiotDJCOd2P0WctLzbFvI2Izi73phd7OacG5CYwYEe
SP8lpMSGzvHIQpVF9YltBHeunHdnWHm30BQhB6J1CLP/elvCFsZqhRCSFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlSZpvDam0whJiR88JazUFBr9FVMB8GA1UdIwQY
MBaAFNLfSLjcbCku6oyAUXf9pnS/IZc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHQ5SXVOeHNLUzdxaklCUmRfMm1kTDhobHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMGUxMTItZGZiMi00NGU4LTg3MDct
ZmZjNmYwZGE0YTlmLzEvMHQ5SXVOeHNLUzdxaklCUmRfMm1kTDhobHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jMGUxMTItZGZiMi00NGU4LTg3MDctZmZjNmYwZGE0YTlm
LzEvMHQ5SXVOeHNLUzdxaklCUmRfMm1kTDhobHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjtGP3MC
6DfDg3JyxJYOBXlogR86BM4LGG3R2C3CgdXmiOSB0sfb8Js1BlHD8+iE6FXstgZ1
/y5jsJPQ9cwnbtdC63lQ/MEhxif7Ge3+SqDFcvu2sACnCpwfga52YEZ589rMidjp
mp0/psy2YFkAZPx7iJ5xeaYJhmuFBc/Wq+OkB8lwyzvpY7CAlS5gDAInRQe2TYnv
zAsaepsiw+4aagIQFXnuHCqXgba7Z3Wy1t+ufU1jMaTrRMY0SWUngnm5CPYJc2Zm
OeMhRyICVPb5qb9IFJR0nnSStNXTDdxZZBpPScjOIBCdkFPIsQF+n3Uul10n6zEF
3pU4nNvR+QwvBw==
-----END CERTIFICATE-----
Generated at Sun May 11 04:26:35 2025 by rpki-client