Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File:                     ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier:          Xskx/lkk6B6b8yDC0XWG0nM4yB6UaVqiuATh+gIXk7M=
Subject key identifier:   BC:55:B1:8C:6A:32:28:26:E8:F0:AC:D9:B5:CA:B8:12:DA:46:B2:A6
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer:       /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial:       01962FAB620BA4D8A4959359632B9662878D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: tjnYOgcssdz1x6uiaOGWWDulP0ganZ27SmFCT3cc6L4=)
                          2: dTuqgfHkWKRx6zDRFyr7wfbH78A.roa (hash: 2z0kuCT+rZ4YZMUscZu87PyQoyge5s4ineDLZLosNXs=)
                          3: ev4qAZxPyDVe1fzvmsra_eujOoU.roa (hash: HFLW2F6W7JxQUwoPI2JmRMt/NzyrebxUZlSAcm1ib6I=)
                          4: fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa (hash: FiX7MCMvjPDZE/cImOvH2wlf9CnqJcDrYSZ+kARwu7c=)
                          5: pERg8oiWPMLUHsmGEshAuW_aqRs.roa (hash: zmESXdehojS6eaz2GF04+HNwgLED8OdvpzfNZhfer0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:0b:a4:d8:a4:95:93:59:63:2b:96:62:87:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=bc55b18c6a322826e8f0acd9b5cab812da46b2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:a5:45:53:62:f4:b6:57:b2:2a:81:60:33:
                    cb:d6:8f:34:b0:93:88:48:17:88:20:db:d9:57:0b:
                    76:7a:45:43:58:f4:3d:6a:60:bf:e1:ed:f7:8e:34:
                    bb:17:bb:87:d8:86:c3:a5:4f:02:c1:c8:4b:83:67:
                    4d:e5:d1:13:5c:cd:2c:e7:3e:af:07:9e:04:f4:9a:
                    9d:e4:f0:9e:e5:d4:ac:73:9f:e8:0f:88:c3:d9:a0:
                    e2:89:67:1d:bc:8a:89:37:ac:f6:5c:c8:d9:77:c5:
                    18:d7:d7:c2:38:e7:11:26:1d:b5:53:99:94:29:2f:
                    d2:c4:6a:7c:fb:b8:fd:54:6e:1e:82:17:b8:6c:fe:
                    ab:13:3d:3a:50:10:e9:93:fa:85:e8:4a:f9:9d:fd:
                    30:bc:0a:f4:9c:64:59:cd:03:06:70:06:fe:ac:d1:
                    7a:fb:87:a1:43:91:c9:20:76:c4:c6:9a:a5:6e:ee:
                    55:95:5b:11:ac:50:ff:7c:78:35:55:21:68:c5:ac:
                    ee:51:95:78:7c:b8:5e:5b:38:5d:8b:bf:c0:26:f4:
                    f2:67:ea:d6:0a:42:dc:f8:ea:e5:dd:a3:c6:28:4d:
                    92:d3:cf:3a:e7:2e:7e:00:87:73:42:67:7a:ee:0c:
                    96:52:13:dd:99:c3:60:a2:8e:c3:03:a3:f8:09:be:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:55:B1:8C:6A:32:28:26:E8:F0:AC:D9:B5:CA:B8:12:DA:46:B2:A6
            X509v3 Authority Key Identifier:
                keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:9c:9c:b7:1f:72:b0:43:04:25:f6:b4:63:83:1e:d4:33:7f:
         5e:de:8f:a3:45:4b:cc:f8:c2:c9:ae:c5:c7:74:6e:cf:3c:5b:
         7a:a3:ce:22:65:8a:cd:9f:68:da:a6:f9:3e:89:42:39:1d:b6:
         fb:76:c4:db:be:6a:92:26:9f:bd:b2:60:2f:a6:75:b0:75:7e:
         16:f3:0f:a5:c9:7a:e9:a7:ed:c6:f4:0f:61:a2:df:f8:19:e5:
         37:83:4d:f0:fb:09:85:91:36:4f:0e:da:0b:df:d5:fb:47:92:
         5c:5c:b3:6b:9a:e9:a8:5c:60:74:27:37:19:d4:fb:5d:36:76:
         b3:a1:8f:a2:70:22:de:82:ca:46:a3:5a:c5:c5:5a:89:21:bd:
         85:94:df:32:e6:32:53:98:15:7a:40:93:1e:91:06:7e:25:25:
         db:36:e4:5d:a5:42:d8:9d:f9:cc:f3:3a:4f:97:47:d0:63:4f:
         b9:91:08:ff:6e:86:1e:85:d8:c4:fd:25:1a:20:4f:19:56:53:
         9e:ac:8f:50:76:27:b1:94:1f:3d:69:69:be:71:9d:48:f4:5b:
         99:7d:9d:3d:0e:93:9b:94:5b:fe:5f:e7:25:b3:f9:c5:2b:ac:
         27:35:6a:0b:46:3f:a6:61:e8:18:ba:0f:65:64:1b:08:54:32:
         95:46:89:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2ILpNiklZNZYyuWYoeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZjQ3Yzk4NDQwZjEwMzgyNWM4ZWE1MDc0Mjk4YjE4Y2Mx
MTNlMjAwHhcNMjUwNDEzMTUwMTIyWhcNMjUwNDE0MTUwMTIyWjAzMTEwLwYDVQQD
EyhiYzU1YjE4YzZhMzIyODI2ZThmMGFjZDliNWNhYjgxMmRhNDZiMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotilRVNi9LZXsiqBYDPL1o80sJOI
SBeIINvZVwt2ekVDWPQ9amC/4e33jjS7F7uH2IbDpU8CwchLg2dN5dETXM0s5z6v
B54E9Jqd5PCe5dSsc5/oD4jD2aDiiWcdvIqJN6z2XMjZd8UY19fCOOcRJh21U5mU
KS/SxGp8+7j9VG4eghe4bP6rEz06UBDpk/qF6Er5nf0wvAr0nGRZzQMGcAb+rNF6
+4ehQ5HJIHbExpqlbu5VlVsRrFD/fHg1VSFoxazuUZV4fLheWzhdi7/AJvTyZ+rW
CkLc+Orl3aPGKE2S08865y5+AIdzQmd67gyWUhPdmcNgoo7DA6P4Cb5QxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxVsYxqMigm6PCs2bXKuBLaRrKmMB8GA1UdIwQY
MBaAFGT0fJhEDxA4JcjqUHQpixjMET4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYt
Mzg0NDc4NTVkNjY5LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYtMzg0NDc4NTVkNjY5
LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5yctx9y
sEMEJfa0Y4Me1DN/Xt6Po0VLzPjCya7Fx3RuzzxbeqPOImWKzZ9o2qb5PolCOR22
+3bE275qkiafvbJgL6Z1sHV+FvMPpcl66aftxvQPYaLf+BnlN4NN8PsJhZE2Tw7a
C9/V+0eSXFyza5rpqFxgdCc3GdT7XTZ2s6GPonAi3oLKRqNaxcVaiSG9hZTfMuYy
U5gVekCTHpEGfiUl2zbkXaVC2J35zPM6T5dH0GNPuZEI/26GHoXYxP0lGiBPGVZT
nqyPUHYnsZQfPWlpvnGdSPRbmX2dPQ6Tm5Rb/l/nJbP5xSusJzVqC0Y/pmHoGLoP
ZWQbCFQylUaJwg==
-----END CERTIFICATE-----