Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File:                     Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier:          Lv0M0WHiL2fj1pV3VkEuZ1OGxqMer0fmI2isNdxwAFU=
Subject key identifier:   00:33:DF:E0:42:AF:1C:D2:46:6B:74:DA:A5:05:10:30:F2:77:FA:14
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer:       /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial:       01962F743731A68459B75D651215257BCB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number:          0513
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 69EZo_UvSYLCIwLzPyqCblCyZzI.roa (hash: 2naW8CuEgpZKAi+BoeweFMMKRLa2fsvkiMt8udbwEtM=)
                          2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: cJVdVJNsq3YBAK+//x6sE37PHpw387642jAW7rgAZa4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:37:31:a6:84:59:b7:5d:65:12:15:25:7b:cb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=0033dfe042af1cd2466b74daa5051030f277fa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:1a:2f:c6:47:79:fb:80:9d:45:a1:6d:f7:
                    49:e4:39:8b:9e:71:c0:5c:34:aa:5d:20:ce:58:ff:
                    b6:c8:e1:4d:52:03:4b:91:bb:f5:6f:6b:c2:c4:2c:
                    32:fe:7e:94:a6:6f:25:92:cc:99:33:69:af:0a:57:
                    5f:31:4e:6d:31:51:17:fe:40:28:5f:b9:39:55:bc:
                    51:30:a7:5b:3b:22:a4:8c:83:20:38:c0:cc:99:40:
                    ce:23:1e:67:ef:e5:5b:55:3a:49:f5:d8:46:bf:5c:
                    8b:97:9f:c0:ae:8d:08:f5:6e:65:40:f5:67:6e:8c:
                    a6:53:e9:86:b6:37:4a:c5:7a:6d:6e:cd:fb:71:bb:
                    76:cb:55:09:07:75:ff:39:90:45:b1:0f:1b:07:bf:
                    1f:57:55:05:c5:6b:bb:87:01:e2:93:a2:b4:c6:44:
                    1b:f5:d0:b1:8b:b7:81:16:5a:71:2f:c1:17:67:0f:
                    85:75:5e:46:63:85:aa:10:18:81:66:54:13:50:3f:
                    f4:d3:ed:1b:23:19:c7:e9:c9:6d:e4:33:52:b4:4e:
                    85:da:d3:4e:c5:df:ce:57:1b:94:6e:17:37:7a:f2:
                    eb:11:90:eb:22:0b:d5:51:b5:f4:19:cb:29:1b:bc:
                    b3:0d:49:c8:bb:5f:82:5e:b9:f9:43:4b:82:27:e7:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:33:DF:E0:42:AF:1C:D2:46:6B:74:DA:A5:05:10:30:F2:77:FA:14
            X509v3 Authority Key Identifier:
                keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:39:e3:a1:25:35:cf:5b:58:f9:87:1d:c6:b1:59:9a:c2:
         46:90:2d:19:f2:d4:11:29:70:cb:9e:21:52:73:a3:29:b5:0b:
         a2:e6:41:2f:1e:a0:71:c4:ef:9b:ce:bd:56:ce:5e:a8:e3:1b:
         05:79:e8:d7:7b:0a:f8:86:d6:9d:6b:22:cd:d9:8a:5d:3b:5b:
         8e:58:35:3d:d2:56:ad:b4:8c:cb:c1:b1:25:6f:db:b4:3a:d4:
         9c:b3:6f:8b:7b:08:a7:1f:b1:c5:d2:24:9d:1d:8e:d4:a0:40:
         35:69:c1:e9:e2:d5:26:5b:31:0d:fd:52:08:bf:37:4f:46:cc:
         97:3a:4f:94:01:f3:d1:f7:4e:a6:8d:09:d0:25:fb:d1:97:d3:
         7b:08:a0:a4:b9:b3:e3:d5:e3:6c:b9:55:b0:21:fe:dd:d0:a0:
         1e:26:22:07:b1:17:c8:e6:28:bc:10:9e:f1:8b:af:b9:c8:ac:
         ab:d4:85:c6:b2:80:e8:54:ef:08:ba:2d:52:78:9c:09:ab:53:
         83:61:c6:67:d8:9b:a0:b9:47:79:ad:3d:0c:da:f1:4a:4c:68:
         26:39:50:ae:c2:f4:cd:6d:e0:70:cc:47:85:87:dd:bc:1d:5c:
         43:91:cf:ae:fd:73:29:3d:ad:2a:57:d1:89:0b:f7:68:79:58:
         0b:25:7f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDcxpoRZt11lEhUle8uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2U1OTZhMjRkNDM2NTBjYjYwZThmY2M5ZTQ0ZDZmOGM5
MjlkMzUwHhcNMjUwNDEzMTQwMTA3WhcNMjUwNDE0MTQwMTA3WjAzMTEwLwYDVQQD
EygwMDMzZGZlMDQyYWYxY2QyNDY2Yjc0ZGFhNTA1MTAzMGYyNzdmYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuogaL8ZHefuAnUWhbfdJ5DmLnnHA
XDSqXSDOWP+2yOFNUgNLkbv1b2vCxCwy/n6Upm8lksyZM2mvCldfMU5tMVEX/kAo
X7k5VbxRMKdbOyKkjIMgOMDMmUDOIx5n7+VbVTpJ9dhGv1yLl5/Aro0I9W5lQPVn
boymU+mGtjdKxXptbs37cbt2y1UJB3X/OZBFsQ8bB78fV1UFxWu7hwHik6K0xkQb
9dCxi7eBFlpxL8EXZw+FdV5GY4WqEBiBZlQTUD/00+0bIxnH6clt5DNStE6F2tNO
xd/OVxuUbhc3evLrEZDrIgvVUbX0GcspG7yzDUnIu1+CXrn5Q0uCJ+eZ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAz3+BCrxzSRmt02qUFEDDyd/oUMB8GA1UdIwQY
MBaAFEs+WWok1DZQy2Do/MnkTW+Mkp01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3o1WmFpVFVObERMWU9qOHllUk5iNHlTblRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YjJmYjItYzBhYi00ZWVjLThkMDEt
MzNkMThiZjZkZjU1LzEvU3o1WmFpVFVObERMWU9qOHllUk5iNHlTblRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YjJmYjItYzBhYi00ZWVjLThkMDEtMzNkMThiZjZkZjU1
LzEvU3o1WmFpVFVObERMWU9qOHllUk5iNHlTblRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhk546El
Nc9bWPmHHcaxWZrCRpAtGfLUESlwy54hUnOjKbULouZBLx6gccTvm869Vs5eqOMb
BXno13sK+IbWnWsizdmKXTtbjlg1PdJWrbSMy8GxJW/btDrUnLNvi3sIpx+xxdIk
nR2O1KBANWnB6eLVJlsxDf1SCL83T0bMlzpPlAHz0fdOpo0J0CX70ZfTewigpLmz
49XjbLlVsCH+3dCgHiYiB7EXyOYovBCe8Yuvucisq9SFxrKA6FTvCLotUnicCatT
g2HGZ9iboLlHea09DNrxSkxoJjlQrsL0zW3gcMxHhYfdvB1cQ5HPrv1zKT2tKlfR
iQv3aHlYCyV/ZQ==
-----END CERTIFICATE-----