Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File:                     ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier:          oiK6wlF00RvrOYDpN5fzWz55CxVINOTu274CLvvWUHs=
Subject key identifier:   05:65:61:8C:E2:1C:26:B3:BF:B3:4B:9C:C0:1E:1F:09:F0:CD:F7:46
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer:       /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial:       01962E990283A7204168DA2380A2CDBB990B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number:          061E
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=)
                          2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: asjA+Vbh5tqO+A6HZL292zYxGxrF0xDJV133jSpqKPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:83:a7:20:41:68:da:23:80:a2:cd:bb:99:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=0565618ce21c26b3bfb34b9cc01e1f09f0cdf746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:4a:5b:7b:6f:3d:78:24:a3:73:56:14:13:
                    2a:b2:dc:c2:90:f3:79:60:0b:d6:ee:5b:b7:07:6f:
                    10:4e:e8:cc:fd:cc:c9:f0:36:53:c0:54:d5:91:25:
                    78:5e:ef:35:44:7e:c0:7b:0f:7b:72:eb:b7:a5:79:
                    3d:e4:82:e8:fd:07:ba:ba:61:3d:f8:ba:87:96:92:
                    12:5a:71:37:59:d1:bc:00:29:61:2c:cd:73:34:06:
                    70:68:8d:c3:76:e0:fe:8f:c5:87:9b:60:eb:ae:5f:
                    8e:4a:9a:5b:1a:15:63:5e:2b:76:b6:c2:33:65:47:
                    e3:c4:39:d4:43:14:3e:7f:58:17:04:45:20:a9:60:
                    23:d4:ff:e9:e2:8d:78:3c:06:71:6b:70:16:da:39:
                    60:d1:34:0f:24:00:fc:78:3e:c7:74:b0:8d:15:e1:
                    7e:2d:6a:80:01:f5:27:11:44:28:b7:61:7e:69:69:
                    a3:98:c2:be:cb:32:50:03:36:c3:14:c5:1a:07:3d:
                    b3:bd:7b:59:c8:4a:be:cf:dc:48:6a:98:a4:fb:6f:
                    82:1b:ad:01:28:3c:7e:f0:5b:5d:a2:4d:1a:5f:30:
                    7e:08:f4:c9:96:4a:73:d5:de:63:76:02:6b:eb:25:
                    e2:1c:6d:bf:e6:4d:fe:cb:fc:06:a4:e1:ad:13:38:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:65:61:8C:E2:1C:26:B3:BF:B3:4B:9C:C0:1E:1F:09:F0:CD:F7:46
            X509v3 Authority Key Identifier:
                keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:36:aa:62:f7:ed:57:0b:b6:2d:b0:22:5b:fb:ba:6b:77:
         7c:7d:13:3d:b7:a9:66:6c:e2:01:6a:90:4a:10:a9:52:6e:61:
         c7:1c:0d:a7:a6:33:16:3f:c4:cc:d2:fc:3b:c4:c1:61:d3:e3:
         90:42:02:a8:74:83:3d:a2:fd:46:31:7f:6f:f1:d4:f2:c3:db:
         19:09:fe:cb:14:a7:73:1a:3a:b1:c6:c0:33:93:62:48:23:c8:
         89:3e:a2:f4:7a:c4:0a:64:72:89:2a:0a:05:93:de:2c:06:f7:
         30:9f:a8:5b:03:db:d7:e7:d2:40:45:1d:03:90:88:ec:39:cd:
         7a:58:2f:17:44:6c:37:76:6a:9c:8a:a2:59:d1:23:9f:57:be:
         f6:e8:a2:a8:18:c5:64:a3:48:97:d4:2d:61:2e:e5:46:b3:ad:
         5b:a4:3d:e6:9b:fa:ef:66:30:6e:29:4f:25:03:fa:b8:0f:6c:
         24:f9:32:20:3b:d1:91:99:50:7e:a5:56:8f:3c:f8:fb:d2:cd:
         ab:b5:e4:8f:96:71:ba:98:a7:ba:1f:44:7b:d3:ef:ff:d8:63:
         6e:77:91:95:de:bd:43:4e:3a:b3:91:66:11:b1:dd:0d:4e:f5:
         54:a2:41:03:85:2c:be:a7:1f:6a:fb:2e:32:41:ba:38:29:46:
         b4:3b:25:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQKDpyBBaNojgKLNu5kLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4
NDc0NjAwHhcNMjUwNDEzMTAwMTQxWhcNMjUwNDE0MTAwMTQxWjAzMTEwLwYDVQQD
EygwNTY1NjE4Y2UyMWMyNmIzYmZiMzRiOWNjMDFlMWYwOWYwY2RmNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L9KW3tvPXgko3NWFBMqstzCkPN5
YAvW7lu3B28QTujM/czJ8DZTwFTVkSV4Xu81RH7Aew97cuu3pXk95ILo/Qe6umE9
+LqHlpISWnE3WdG8AClhLM1zNAZwaI3DduD+j8WHm2Drrl+OSppbGhVjXit2tsIz
ZUfjxDnUQxQ+f1gXBEUgqWAj1P/p4o14PAZxa3AW2jlg0TQPJAD8eD7HdLCNFeF+
LWqAAfUnEUQot2F+aWmjmMK+yzJQAzbDFMUaBz2zvXtZyEq+z9xIapik+2+CG60B
KDx+8Ftdok0aXzB+CPTJlkpz1d5jdgJr6yXiHG2/5k3+y/wGpOGtEzh/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVlYYziHCazv7NLnMAeHwnwzfdGMB8GA1UdIwQY
MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt
MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl
LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfk2qmL3
7VcLti2wIlv7umt3fH0TPbepZmziAWqQShCpUm5hxxwNp6YzFj/EzNL8O8TBYdPj
kEICqHSDPaL9RjF/b/HU8sPbGQn+yxSncxo6scbAM5NiSCPIiT6i9HrECmRyiSoK
BZPeLAb3MJ+oWwPb1+fSQEUdA5CI7DnNelgvF0RsN3ZqnIqiWdEjn1e+9uiiqBjF
ZKNIl9QtYS7lRrOtW6Q95pv672YwbilPJQP6uA9sJPkyIDvRkZlQfqVWjzz4+9LN
q7Xkj5Zxupinuh9Ee9Pv/9hjbneRld69Q046s5FmEbHdDU71VKJBA4Usvqcfavsu
MkG6OClGtDslsw==
-----END CERTIFICATE-----