Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File:                     Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier:          AS/G3K5/cPOhlqs2gxvcpwbiGRcREP6K/RzhtEOWjKc=
Subject key identifier:   7A:69:EB:C4:FB:32:0C:88:83:1E:5F:D8:86:FA:81:7C:14:43:CB:59
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer:       /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial:       01962F74B6B08D077FEE4A5B65DDA0C9A0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
                          2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: D6Cb+V8cwuCqeOjTbKPCxjCed43haf6EXZVm8J24S1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b6:b0:8d:07:7f:ee:4a:5b:65:dd:a0:c9:a0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=7a69ebc4fb320c88831e5fd886fa817c1443cb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:25:6c:55:70:02:08:39:db:29:c7:0d:20:
                    8d:1b:79:3b:a4:f4:90:77:2c:46:77:80:3d:14:20:
                    7f:eb:5f:61:b4:52:f1:85:22:6b:8b:62:76:eb:cf:
                    e9:82:8c:e1:54:f4:88:4f:16:80:22:a3:90:79:67:
                    70:71:78:b6:70:e0:9e:28:f3:59:5e:b5:c8:cf:e2:
                    89:4d:12:4f:73:8d:5b:6f:d0:03:36:cb:74:23:1c:
                    ea:8f:72:81:1d:d7:4b:22:55:9a:e1:c6:19:77:62:
                    60:26:88:1d:ad:a2:56:78:7c:0a:0b:da:97:40:aa:
                    a3:73:b8:65:d9:39:49:5a:a7:24:18:ce:51:e4:1f:
                    b4:4c:0f:ac:11:8a:f1:9a:62:51:0b:8f:5d:87:39:
                    43:a2:59:3c:41:cf:d2:9a:d6:67:9c:1a:23:b3:6c:
                    47:66:c8:00:8f:05:c5:73:41:50:cd:02:bd:4e:64:
                    a3:3a:fb:12:a6:dc:06:e6:05:2a:70:28:d0:85:fb:
                    38:c7:bc:1e:9a:ff:b1:45:f0:0f:65:ee:43:71:3f:
                    6a:9c:0c:2e:8e:bb:07:0c:7a:ee:b9:49:d4:a0:70:
                    eb:67:c6:60:e3:80:32:a8:42:68:1c:c3:61:73:36:
                    e0:a9:f8:19:c4:2b:39:90:9c:41:51:06:f1:ba:8f:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:69:EB:C4:FB:32:0C:88:83:1E:5F:D8:86:FA:81:7C:14:43:CB:59
            X509v3 Authority Key Identifier:
                keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:82:f5:01:12:00:35:69:ef:d7:a4:69:34:21:87:bb:77:
         8f:08:07:75:ac:03:8d:6e:68:54:18:8a:73:2b:da:df:63:95:
         91:88:84:67:60:78:73:e2:1c:17:3d:fa:90:a1:7a:14:03:52:
         8c:14:28:19:10:45:96:28:46:28:00:cd:77:7a:a3:a9:97:10:
         9f:35:89:83:54:b2:75:1a:10:a3:f1:fb:7d:c3:3e:a8:da:27:
         1e:c5:97:aa:f9:fd:89:f0:13:fb:dd:48:3b:19:34:6e:d2:69:
         f9:8f:57:37:ce:45:c5:f9:35:61:5b:9a:41:9c:ed:46:e4:75:
         26:ca:cc:56:a5:9a:4c:3a:ed:5b:21:fe:9b:56:44:4f:07:5f:
         ff:ee:19:e5:ba:25:1a:ef:8e:19:da:4a:8c:40:65:e8:75:01:
         10:96:32:5e:e1:be:3a:49:f3:4b:7f:60:95:03:73:f3:d8:60:
         3d:d9:66:d8:f8:9c:76:38:f2:d3:af:1e:39:03:37:c1:db:c3:
         6d:9c:54:de:c6:6c:49:8c:d0:ec:ff:1a:4f:8b:e1:44:14:0d:
         3b:c8:9e:1d:9d:f2:27:54:bf:b6:eb:e3:a2:a2:0d:4c:33:23:
         e7:e8:3b:62:17:40:8d:3c:5d:53:e9:e6:a1:90:73:72:ca:4d:
         af:5d:84:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLawjQd/7kpbZd2gyaDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0
OGExYzQwHhcNMjUwNDEzMTQwMTQwWhcNMjUwNDE0MTQwMTQwWjAzMTEwLwYDVQQD
Eyg3YTY5ZWJjNGZiMzIwYzg4ODMxZTVmZDg4NmZhODE3YzE0NDNjYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDclbFVwAgg52ynHDSCNG3k7pPSQ
dyxGd4A9FCB/619htFLxhSJri2J268/pgozhVPSITxaAIqOQeWdwcXi2cOCeKPNZ
XrXIz+KJTRJPc41bb9ADNst0Ixzqj3KBHddLIlWa4cYZd2JgJogdraJWeHwKC9qX
QKqjc7hl2TlJWqckGM5R5B+0TA+sEYrxmmJRC49dhzlDolk8Qc/SmtZnnBojs2xH
ZsgAjwXFc0FQzQK9TmSjOvsSptwG5gUqcCjQhfs4x7wemv+xRfAPZe5DcT9qnAwu
jrsHDHruuUnUoHDrZ8Zg44AyqEJoHMNhczbgqfgZxCs5kJxBUQbxuo/IdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpp68T7MgyIgx5f2Ib6gXwUQ8tZMB8GA1UdIwQY
MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt
ODA1MzJkZDc0ZDRkLzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk
LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu6C9QES
ADVp79ekaTQhh7t3jwgHdawDjW5oVBiKcyva32OVkYiEZ2B4c+IcFz36kKF6FANS
jBQoGRBFlihGKADNd3qjqZcQnzWJg1SydRoQo/H7fcM+qNonHsWXqvn9ifAT+91I
Oxk0btJp+Y9XN85Fxfk1YVuaQZztRuR1JsrMVqWaTDrtWyH+m1ZETwdf/+4Z5bol
Gu+OGdpKjEBl6HUBEJYyXuG+OknzS39glQNz89hgPdlm2Picdjjy068eOQM3wdvD
bZxU3sZsSYzQ7P8aT4vhRBQNO8ieHZ3yJ1S/tuvjoqINTDMj5+g7YhdAjTxdU+nm
oZBzcspNr12ELA==
-----END CERTIFICATE-----