Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
File:                     zNdhWb_Z4zdSPukw898RHWuucwY.mft (raw, json)
Hash identifier:          7ivI2UGuhwnEw7PkCGEmf3p4AyGbf6QC6w/buKJi8AU=
Subject key identifier:   9E:F1:E6:08:49:6B:82:48:1A:29:62:F0:0A:8C:A6:2B:60:55:7A:A0
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       01962FAB925486F512CBBFC82359BBDC3884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 1--eafx9NP-kEA5ohaXUtt-Yk1Ck.roa (hash: yPvV8tZDeTzipS9nbm/myDY2hHI1uGeW+fkO/Ib9714=)
                          2: 1-RGITW7t7RVjPIVDGK8sdPILfFw.roa (hash: P/HUFSepVVEwfEporYNsH1D4aGgLnKavmwTt0gggDZk=)
                          3: EHa5LRqYKQEP9dDWzSSuUw_ODMI.roa (hash: X93kxWz8I79L/YC44aaFE4KBmj3MgYuQCQWdh5JJRlU=)
                          4: GgcXjbFf8mlEuNVIAcHRErlG0DE.roa (hash: aU3/cIt29ulG37q/HnxD7KuB42acmRwvl4Q/yo0oLB4=)
                          5: HZHU7uNC18H1AiCx35Xk22FpOrU.roa (hash: uDPXdRRSpniPWDBDJpriTbwY3qugBu3+G959rzyvi4A=)
                          6: Ii99VBFRvfe6FkJM3eEVNVCel3Y.roa (hash: FSVc/S0WQeqtLnqBGn/Yt92ELKwsfGtg1h8aCQ4iu0g=)
                          7: JlVChhx5w07YmWd1S055Y6qWUPI.roa (hash: AAEqAdelZUxTW9gz6RGKSDhVYPfX12C8xhzyaBP5OQ8=)
                          8: Pp7lyfLi6Lq2OtSc1xsQ23XWPpY.roa (hash: 4Af36PXDN9h4nVNJg+AUmHgAlVjrGGi1+YXnj9QtxAk=)
                          9: QLs4MIyOkAWFAecUJKLtuPT3DAQ.roa (hash: 6RF7rF1or+rlfQcWUqqV0OVt2UQC1livPsP+kAkJD8U=)
                          10: QNMZFgzc1IGuipObCo1W0F0a3KI.roa (hash: wspjeJtpxVccGs7TUYeaDurUBNURQ6SaxH86WDgsNpw=)
                          11: R7bu8qG1cHrF1V4napoZJ_0ac8k.roa (hash: 8pYmbeMeyeatySY+kjjQRXHpXEhr/sxXhbrbgg45kZA=)
                          12: RK_-KObVrFqMwWpz_LD5ef7FHWs.roa (hash: bmPHbTt3nDXj4QFRJ1Kncj6MxmTt6z/dMwbg+mB+vFw=)
                          13: VLHCV6lr7BNgR2Fd1tKMBJvuTRQ.roa (hash: 0Btvt5ZHp2+JecRDRpyauwV1daoZIgA2l6uCdIeBx0Q=)
                          14: WDj-WX2TFdm1vGzea5zwWAKnmXg.roa (hash: +iMwOn3eQVj68GFHeC3/38BqQPjbYorhASbLudYfkZc=)
                          15: YyBxeqrqZnbMVWvNPGuJEhSJ6tc.roa (hash: +a+wpfnGbFw1MMOx7iCPa6kL+tOt/k8ymgsbVMZjRJg=)
                          16: ZYGYeQceaN7I_pfDtcAk40ZEq0M.roa (hash: OHgyaUYp8BdjJtUniornpY5cjOGkXbitG3jQOG7El8U=)
                          17: _8sr8aIwUZsEMoCeASgsdp-XKkc.roa (hash: 8xLJinv75Qe3kL2qr+hxBWBJs6ycaLqXPgI4od1LSpE=)
                          18: aJC0yUkxlvM9RnP05jgyhL6Pd7s.roa (hash: +rnytwg9k8j3AteroTZGDkhSKj19xjyvaJoQbFN7G3M=)
                          19: il0Z-xW9MuWupg3xKoK8OOqM6vI.roa (hash: 568t2pWFvFlGkw3q0WeJ/X/pOg7idoqMsb9QqHlNyYU=)
                          20: jq7JjC5JOKczgNh0-VDgERIfMVc.roa (hash: qHhxF7rpHzpOHRvc61R6xhbjw9YekBuMSQGNdCoV4aI=)
                          21: jvEikcZJM5qpaNsK8tPGUjFP2do.roa (hash: iJUEXgdreyLiFDQJWmjKx7mfinwOmXASzQYJ3m5UoJg=)
                          22: zNdhWb_Z4zdSPukw898RHWuucwY.crl (hash: aVm1Q55sFapH7d9sQ1tVS2f4woBvlqBj9RF9H/ZCRWA=)
                          23: zQ3J3SswfafdRGQOuAZuGfrXzlA.roa (hash: y9aWaj3laOTggPgltzWq1nDdG/wljodW6OXlN6AXxY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:54:86:f5:12:cb:bf:c8:23:59:bb:dc:38:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=9ef1e608496b82481a2962f00a8ca62b60557aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:48:e8:0c:0e:9b:74:ff:51:da:53:04:cc:cd:
                    b0:c1:c3:85:9f:ed:bd:41:94:7f:1b:2f:57:e4:c9:
                    f3:7b:d9:eb:cf:4e:9b:db:81:a6:1a:bf:43:60:53:
                    d6:ba:e0:a7:e9:73:9b:4a:34:9c:d1:bc:10:7a:38:
                    dc:d3:35:e0:29:d3:15:c7:b7:25:35:98:a4:9b:be:
                    8f:b4:21:e6:7f:30:31:65:37:8f:d4:4e:9b:c0:7d:
                    96:09:5f:99:57:ae:35:86:a6:e8:f0:bc:0f:a0:9d:
                    de:18:09:a2:11:a0:45:7f:d5:08:c1:74:de:7b:8b:
                    1a:25:7b:91:db:27:f4:b7:9b:36:c3:68:d8:6f:4e:
                    5c:0d:1c:24:8f:48:0b:05:1e:ef:04:b0:04:3c:f1:
                    ed:af:72:12:6b:76:19:b4:a3:0e:a9:cb:bb:c9:c2:
                    17:fa:e2:0b:ee:9d:5c:10:8f:c4:67:bd:19:fd:8c:
                    a5:a0:69:e5:83:ba:b1:0e:a7:ec:cc:3b:27:fd:09:
                    b2:2f:30:7f:24:83:d4:a9:e4:c8:d1:9e:0e:63:20:
                    16:93:41:70:3a:0f:f5:60:11:f7:0d:29:c2:8d:c8:
                    e1:4e:6d:86:39:38:8e:5a:89:dd:45:70:40:a5:21:
                    01:3b:59:42:d9:11:aa:65:b2:9b:e4:e6:9f:ea:13:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F1:E6:08:49:6B:82:48:1A:29:62:F0:0A:8C:A6:2B:60:55:7A:A0
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:23:96:fe:d4:58:91:e4:ca:75:09:dd:b3:14:db:ca:43:0c:
         22:60:9d:d8:43:e1:a6:c8:a3:bc:3f:79:c7:66:10:42:73:a9:
         1f:78:2a:d6:6c:18:2b:ed:a1:d0:8c:70:8b:e4:e0:de:32:0b:
         6e:42:54:ff:6c:0c:ae:9d:26:bb:63:bd:31:69:7a:1e:c8:03:
         ef:04:09:50:f6:55:51:f2:60:4f:e1:db:c6:b2:87:26:83:f0:
         1b:63:6d:0e:13:e5:dd:55:48:d1:c4:99:02:bf:d0:92:ab:bc:
         91:d1:4a:86:bc:71:aa:77:3d:85:50:30:c7:7a:2a:24:cb:da:
         6b:ee:9b:ec:03:00:53:8b:04:aa:25:74:9c:95:2b:98:36:9d:
         d3:86:8c:4d:5a:ee:f7:43:3e:7b:9d:d5:06:e0:ee:b7:8d:fa:
         40:ed:49:8d:ad:c0:56:c4:87:14:16:21:5b:d3:d9:6e:fb:33:
         62:f8:42:2b:a8:59:4c:67:50:ff:ce:ba:a8:77:70:61:1d:66:
         ae:c5:98:ec:dc:d4:21:94:c2:11:77:7a:a9:63:20:4e:5e:8e:
         6c:ba:38:8d:f6:53:21:b7:9e:85:4b:c3:03:db:d5:1b:41:47:
         25:62:ec:f5:de:7e:22:78:a4:4f:9e:50:fb:c7:0b:17:71:0c:
         40:1f:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----