Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File:                     DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier:          ccLx0iWNeIioezw/ebuG6Egbjg012qZ5YDI7voD4zHk=
Subject key identifier:   6C:AA:D7:4C:67:47:3F:DC:35:16:E5:F4:59:0E:D5:55:E5:03:A5:FD
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer:       /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial:       01962DF3DB0173B6E373728F75CDFF28CDFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=)
                          2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=)
                          3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: mzQVnG/EMBPwZ4uNessotlhhAOfe6+P3NGiyezNEWu8=)
                          4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=)
                          5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:db:01:73:b6:e3:73:72:8f:75:cd:ff:28:cd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=6caad74c67473fdc3516e5f4590ed555e503a5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d5:42:e2:d2:42:2f:2f:08:fe:3e:c9:84:3d:
                    c4:c6:d5:7e:b5:c6:33:5a:ba:a7:34:88:03:e4:ae:
                    b9:b4:2a:8f:33:89:68:0e:44:75:c9:d9:6e:55:a2:
                    e3:82:52:3e:5b:d0:ae:37:59:ee:ff:3b:80:4c:b4:
                    43:75:9a:52:4f:af:94:1a:d2:0b:5e:2f:8d:5f:3a:
                    35:9f:2f:f4:72:64:d4:46:68:09:fe:45:37:c8:f2:
                    28:c7:fe:e9:06:49:e1:eb:98:79:bb:f1:8d:95:e2:
                    a9:2a:ce:12:02:20:58:fb:56:21:e0:e6:c1:67:22:
                    27:52:7f:e6:58:ad:81:c7:de:87:95:f8:a3:a5:c1:
                    65:da:d8:4d:41:8b:53:44:84:e4:21:73:bb:b3:29:
                    a7:91:09:24:f0:1e:8e:b7:95:54:e0:0e:b1:46:7e:
                    69:06:9a:da:b2:a4:c3:86:d8:60:a6:29:2c:74:59:
                    38:3f:90:65:36:36:75:c8:98:a3:bd:2d:68:09:8d:
                    79:b9:5c:f7:97:36:d0:22:1a:32:60:e7:70:8e:e4:
                    93:dc:c1:a8:53:d5:75:0b:25:fc:b8:0a:32:31:c3:
                    05:1b:17:f7:92:31:cf:d9:bb:d6:43:c9:d2:96:15:
                    4c:02:3c:2d:3b:9d:de:68:c6:b6:5d:ff:ea:f2:21:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AA:D7:4C:67:47:3F:DC:35:16:E5:F4:59:0E:D5:55:E5:03:A5:FD
            X509v3 Authority Key Identifier:
                keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:0c:f5:44:04:24:a3:b8:4d:25:35:cf:0a:93:61:9d:cb:
         8d:ca:e4:27:b5:7b:b3:c1:2c:ac:d9:47:21:0d:6d:6f:9f:12:
         86:21:e7:41:c9:18:49:87:d2:ed:82:e3:0e:f9:b2:10:19:05:
         28:51:cb:43:cf:5f:d0:ce:80:02:fa:b8:ac:20:c3:69:3d:b5:
         82:f1:12:40:ae:92:59:bd:1d:aa:b4:b3:09:b4:ab:36:f2:61:
         73:42:24:4e:bb:30:49:22:cc:e8:7c:ef:9d:a5:f9:77:ca:c8:
         12:c2:4b:df:d5:d9:d3:bb:db:5e:fd:f6:d2:5e:d2:ae:c5:05:
         27:29:5b:68:0c:aa:d3:81:89:53:e7:d9:18:5c:fb:aa:a4:fe:
         da:d7:72:a7:e7:ae:e5:03:82:4c:9b:f1:4a:80:84:af:c3:fc:
         ac:c0:d8:0a:64:d3:5a:b1:f0:2c:89:b1:74:38:57:f9:a9:81:
         4f:b3:eb:68:c8:e5:6a:8d:fc:c4:bf:b9:2d:35:2f:d6:3d:89:
         da:71:c9:fc:7d:ae:b3:a2:a6:33:ac:bd:95:b0:c5:49:89:90:
         b1:a4:27:9c:d7:f5:47:03:b2:71:29:6c:dc:45:fd:fd:4b:89:
         79:85:bc:4d:e2:8b:1b:8b:45:e2:c8:5d:7c:83:fe:0b:66:4b:
         e9:92:22:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89sBc7bjc3KPdc3/KM36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj
OGJjZDUwHhcNMjUwNDEzMDcwMTE4WhcNMjUwNDE0MDcwMTE4WjAzMTEwLwYDVQQD
Eyg2Y2FhZDc0YzY3NDczZmRjMzUxNmU1ZjQ1OTBlZDU1NWU1MDNhNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tVC4tJCLy8I/j7JhD3ExtV+tcYz
WrqnNIgD5K65tCqPM4loDkR1ydluVaLjglI+W9CuN1nu/zuATLRDdZpST6+UGtIL
Xi+NXzo1ny/0cmTURmgJ/kU3yPIox/7pBknh65h5u/GNleKpKs4SAiBY+1Yh4ObB
ZyInUn/mWK2Bx96HlfijpcFl2thNQYtTRITkIXO7symnkQkk8B6Ot5VU4A6xRn5p
BprasqTDhthgpiksdFk4P5BlNjZ1yJijvS1oCY15uVz3lzbQIhoyYOdwjuST3MGo
U9V1CyX8uAoyMcMFGxf3kjHP2bvWQ8nSlhVMAjwtO53eaMa2Xf/q8iHvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyq10xnRz/cNRbl9FkO1VXlA6X9MB8GA1UdIwQY
MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt
NGJlZjQzZDNmYjE3LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3
LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASC8M9UQE
JKO4TSU1zwqTYZ3LjcrkJ7V7s8EsrNlHIQ1tb58ShiHnQckYSYfS7YLjDvmyEBkF
KFHLQ89f0M6AAvq4rCDDaT21gvESQK6SWb0dqrSzCbSrNvJhc0IkTrswSSLM6Hzv
naX5d8rIEsJL39XZ07vbXv320l7SrsUFJylbaAyq04GJU+fZGFz7qqT+2tdyp+eu
5QOCTJvxSoCEr8P8rMDYCmTTWrHwLImxdDhX+amBT7PraMjlao38xL+5LTUv1j2J
2nHJ/H2us6KmM6y9lbDFSYmQsaQnnNf1RwOycSls3EX9/UuJeYW8TeKLG4tF4shd
fIP+C2ZL6ZIiuQ==
-----END CERTIFICATE-----