Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File:                     RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier:          y8bY1wOc3XpQ/5K3AZ6qvAg0s4ItQYdSx/ECIm/RF4c=
Subject key identifier:   49:B3:2A:8B:C8:FE:52:BF:E7:BF:B5:25:AE:32:93:54:F3:71:D6:90
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer:       /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial:       01962E2B28F5BE3D63ACB7FD4A20DAE7AD27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number:          0DEB
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 6Bshfk7eSJEEOjCWrz2TQF0ATCtHmyAF6pX+UYkZJ/0=)
                          2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
                          3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:28:f5:be:3d:63:ac:b7:fd:4a:20:da:e7:ad:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=49b32a8bc8fe52bfe7bfb525ae329354f371d690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:e7:80:5f:fe:50:e4:12:a1:b6:2d:f2:60:
                    37:cb:ff:5c:7f:0a:c1:08:e8:df:5f:b9:81:5b:04:
                    1f:18:e2:97:0f:0a:22:e7:83:4a:07:90:d7:e5:b2:
                    d5:e2:3f:fc:90:52:10:e2:a7:c3:07:f5:18:b0:d0:
                    09:97:9b:fb:ae:c2:21:0e:1d:d7:94:57:d0:c2:75:
                    73:c5:f5:4b:a9:26:52:b5:27:fa:0d:9c:10:d9:eb:
                    39:4a:1b:12:bb:16:d3:52:c7:b9:f7:8e:ee:9a:27:
                    84:a7:68:88:3c:80:32:29:aa:35:4a:d8:28:b9:f3:
                    08:0f:e1:92:14:a2:5c:b6:01:94:ea:d2:0f:05:5d:
                    e7:21:15:6f:39:cb:41:a7:cb:91:d8:f8:75:cc:f5:
                    dd:74:ea:a9:c5:fa:3f:b9:5e:68:78:39:22:ca:11:
                    7c:47:2e:47:ec:5a:81:eb:a1:b8:fa:1c:7b:57:5f:
                    13:ef:eb:7d:13:1b:6e:cf:81:ca:8b:18:47:5c:a6:
                    c1:46:b6:23:5c:c5:1e:6d:a4:7a:3c:7f:60:20:46:
                    66:99:98:32:c6:e0:19:a3:66:c2:65:58:6f:e7:de:
                    5e:54:cd:41:53:e8:26:c5:22:d8:35:f6:fe:2c:2f:
                    d6:83:e3:54:c2:d7:99:8f:81:33:99:75:3f:3f:17:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:2A:8B:C8:FE:52:BF:E7:BF:B5:25:AE:32:93:54:F3:71:D6:90
            X509v3 Authority Key Identifier:
                keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:e9:b9:93:d9:6d:95:ae:90:f9:0c:26:4b:4c:6a:1c:79:
         68:38:91:d0:ec:59:14:ff:42:14:8f:ae:02:51:ce:6a:a7:4b:
         af:c0:8f:92:2d:46:bf:a1:66:e0:30:02:fa:2c:e9:a7:db:2b:
         88:79:54:16:28:ea:22:c5:fa:32:04:44:96:3d:2c:9c:b9:84:
         c0:8a:ff:05:33:19:10:53:58:da:24:bd:b7:db:8d:59:4e:a6:
         a3:2c:37:b5:69:e0:a4:a3:9a:5c:b2:91:b7:18:f9:1e:a2:54:
         86:97:fd:4a:5d:1f:fa:02:2f:c5:d4:34:b0:af:40:59:7e:b1:
         30:97:c9:92:d8:ac:10:ae:41:b5:ae:8f:38:8e:6a:33:5c:6e:
         d7:1e:cc:77:cd:fb:f3:64:9a:13:ad:7c:fd:55:60:4c:30:bb:
         9e:28:bf:06:65:49:53:38:f6:ea:5b:18:82:0f:2e:fc:91:59:
         0d:ce:37:dd:fc:f2:2e:fa:b7:83:30:b4:b0:78:8a:65:4a:77:
         46:52:05:26:c3:a1:f6:30:0b:90:50:a1:bc:ab:c2:1a:0b:ef:
         ae:72:2e:3e:fa:d5:14:09:b7:b0:0d:34:02:46:37:64:55:8c:
         6a:fa:be:ed:c8:ba:58:c5:41:7f:ca:da:65:ab:cd:59:e9:64:
         9d:4f:9f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKyj1vj1jrLf9SiDa560nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
Eyg0OWIzMmE4YmM4ZmU1MmJmZTdiZmI1MjVhZTMyOTM1NGYzNzFkNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJbngF/+UOQSobYt8mA3y/9cfwrB
COjfX7mBWwQfGOKXDwoi54NKB5DX5bLV4j/8kFIQ4qfDB/UYsNAJl5v7rsIhDh3X
lFfQwnVzxfVLqSZStSf6DZwQ2es5ShsSuxbTUse5947umieEp2iIPIAyKao1Stgo
ufMID+GSFKJctgGU6tIPBV3nIRVvOctBp8uR2Ph1zPXddOqpxfo/uV5oeDkiyhF8
Ry5H7FqB66G4+hx7V18T7+t9Extuz4HKixhHXKbBRrYjXMUebaR6PH9gIEZmmZgy
xuAZo2bCZVhv595eVM1BU+gmxSLYNfb+LC/Wg+NUwteZj4EzmXU/PxdYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmzKovI/lK/57+1Ja4yk1TzcdaQMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3/puZPZ
bZWukPkMJktMahx5aDiR0OxZFP9CFI+uAlHOaqdLr8CPki1Gv6Fm4DAC+izpp9sr
iHlUFijqIsX6MgRElj0snLmEwIr/BTMZEFNY2iS9t9uNWU6moyw3tWngpKOaXLKR
txj5HqJUhpf9Sl0f+gIvxdQ0sK9AWX6xMJfJktisEK5Bta6POI5qM1xu1x7Md837
82SaE618/VVgTDC7nii/BmVJUzj26lsYgg8u/JFZDc433fzyLvq3gzC0sHiKZUp3
RlIFJsOh9jALkFChvKvCGgvvrnIuPvrVFAm3sA00AkY3ZFWMavq+7ci6WMVBf8ra
ZavNWelknU+fQQ==
-----END CERTIFICATE-----