Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File:                     dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier:          FzrZGUQgQ+iIDRn0sbxxKvmU+1bu3VOe+5i/WmKeyq4=
Subject key identifier:   BE:B8:9E:DB:42:01:2D:BC:A1:81:A9:57:78:7F:F2:10:27:17:38:CE
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer:       /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial:       01962F0671BA57CD3C764748A525B241FD73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: kqxxjj2GDw0WNAKQZaToxydDghhOqlxEfRG13lJO3s8=)
                          2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=)
                          3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:71:ba:57:cd:3c:76:47:48:a5:25:b2:41:fd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=beb89edb42012dbca181a957787ff210271738ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:64:0d:ce:80:c7:a6:ba:c4:8f:be:a8:d5:
                    31:8d:36:c7:04:5a:e1:1a:68:d7:4b:10:ff:6d:68:
                    3a:4b:c3:42:5f:fb:0f:ea:fe:a6:65:0c:f8:23:fb:
                    0e:9d:88:21:34:0c:d8:dd:2d:4c:10:77:49:ab:b9:
                    31:5a:30:81:f2:7a:81:19:be:07:73:36:79:25:3a:
                    e1:b3:05:c3:27:e2:67:e0:9a:39:f2:c9:92:ad:0d:
                    88:24:8a:e9:28:c4:ea:5b:0d:b9:02:53:99:6f:73:
                    81:a7:9e:06:5d:27:a8:37:f4:53:48:c1:3f:e3:69:
                    2e:ca:0a:2c:9c:b8:11:82:90:b9:b4:10:a1:69:b8:
                    c2:e1:86:82:3c:2e:a2:40:ba:4c:6f:5f:21:0c:83:
                    da:89:0a:c9:4f:2b:36:10:8f:26:fe:b1:df:94:7e:
                    ab:f9:14:da:41:c4:18:90:e1:63:e6:6d:03:67:18:
                    81:a0:66:5a:3c:94:ae:78:64:87:84:60:30:95:a6:
                    78:2f:e4:2c:b3:a3:90:3c:49:de:3a:fa:3e:d0:8d:
                    0b:bd:8a:5a:fc:83:7b:8e:5c:b3:dc:c1:2e:a3:09:
                    39:07:53:a3:54:23:33:9b:7c:1b:ac:f5:11:09:a9:
                    db:48:2c:7d:be:fc:70:c1:ba:47:2f:0b:c0:52:2b:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:9E:DB:42:01:2D:BC:A1:81:A9:57:78:7F:F2:10:27:17:38:CE
            X509v3 Authority Key Identifier:
                keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:42:ed:ca:7c:14:6b:1c:74:22:91:d1:aa:f7:98:d7:c9:
         89:dc:11:e6:1d:c1:97:97:93:a2:af:c6:3d:f0:e6:6d:54:e5:
         e1:c1:c5:ef:1d:09:03:5d:c7:d2:1f:54:40:1b:8b:0c:91:17:
         1f:56:64:66:8c:d1:37:af:09:90:04:23:15:d8:98:29:6d:d9:
         a3:a2:be:4e:ca:6b:4b:62:8d:b8:0c:86:02:b1:f5:4a:4c:7d:
         bc:ce:4b:a3:32:9b:84:0d:99:ad:30:f4:32:93:28:39:38:c8:
         58:50:a2:65:be:75:8a:10:67:c0:24:a6:0d:95:37:7e:83:ad:
         3e:f9:a8:7b:ac:53:2b:91:77:69:d2:54:e0:56:73:fb:4e:9c:
         cd:5a:32:08:3f:d2:37:dd:76:97:80:d7:82:9b:05:ee:df:e2:
         97:86:29:de:6f:08:db:00:0a:0e:03:4c:48:f8:1f:3a:c6:40:
         73:0e:cf:a2:42:55:5c:4b:df:e9:07:cd:56:8c:67:e7:6d:d1:
         b3:8f:04:58:4d:6c:44:99:26:87:d1:ee:fc:cc:fa:be:2e:92:
         26:32:b5:0a:62:7c:0a:04:ca:c0:3e:09:54:a1:13:b6:9d:18:
         8c:ea:fd:5c:f5:91:cc:41:04:8b:5d:21:76:15:4f:e1:d3:cb:
         a8:37:37:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnG6V808dkdIpSWyQf1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk
ZmVjZmEwHhcNMjUwNDEzMTIwMTEzWhcNMjUwNDE0MTIwMTEzWjAzMTEwLwYDVQQD
EyhiZWI4OWVkYjQyMDEyZGJjYTE4MWE5NTc3ODdmZjIxMDI3MTczOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGtkDc6Ax6a6xI++qNUxjTbHBFrh
GmjXSxD/bWg6S8NCX/sP6v6mZQz4I/sOnYghNAzY3S1MEHdJq7kxWjCB8nqBGb4H
czZ5JTrhswXDJ+Jn4Jo58smSrQ2IJIrpKMTqWw25AlOZb3OBp54GXSeoN/RTSME/
42kuygosnLgRgpC5tBChabjC4YaCPC6iQLpMb18hDIPaiQrJTys2EI8m/rHflH6r
+RTaQcQYkOFj5m0DZxiBoGZaPJSueGSHhGAwlaZ4L+Qss6OQPEneOvo+0I0LvYpa
/IN7jlyz3MEuowk5B1OjVCMzm3wbrPURCanbSCx9vvxwwbpHLwvAUisNJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL64nttCAS28oYGpV3h/8hAnFzjOMB8GA1UdIwQY
MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt
MWYxNGVjODA1MzkwLzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw
LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKpC7cp8
FGscdCKR0ar3mNfJidwR5h3Bl5eToq/GPfDmbVTl4cHF7x0JA13H0h9UQBuLDJEX
H1ZkZozRN68JkAQjFdiYKW3Zo6K+TsprS2KNuAyGArH1Skx9vM5LozKbhA2ZrTD0
MpMoOTjIWFCiZb51ihBnwCSmDZU3foOtPvmoe6xTK5F3adJU4FZz+06czVoyCD/S
N912l4DXgpsF7t/il4Yp3m8I2wAKDgNMSPgfOsZAcw7PokJVXEvf6QfNVoxn523R
s48EWE1sRJkmh9Hu/Mz6vi6SJjK1CmJ8CgTKwD4JVKETtp0YjOr9XPWRzEEEi10h
dhVP4dPLqDc3ng==
-----END CERTIFICATE-----