Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File:                     zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier:          oX3/OdejOcPWkZAYmhRqWKS2s+uV+LtryEBY8BiCg6Q=
Subject key identifier:   69:97:4B:3C:2C:57:FE:79:2D:7E:B7:42:1F:C2:96:DA:0E:07:B0:67
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer:       /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial:       01962FAB8451203D0794899F9E8595A779D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number:          1485
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
                          2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: 4t7PdFRxXoQyNYs8chSqlJjIJ9LBaqVGyCKzAV39hsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:84:51:20:3d:07:94:89:9f:9e:85:95:a7:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=69974b3c2c57fe792d7eb7421fc296da0e07b067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:45:d8:88:87:9d:9b:8c:d0:8a:fa:2d:36:
                    ad:f0:23:55:a6:f9:6f:7f:f1:86:e5:ec:d6:7e:9e:
                    46:a7:e0:b4:e5:38:db:18:ed:71:a1:03:c6:93:e1:
                    f7:14:77:26:27:34:ce:26:d7:40:b9:83:22:f0:64:
                    3d:90:24:dc:5b:71:17:03:8a:cb:ff:d9:3c:11:bf:
                    b5:07:44:da:d2:4f:43:f6:dc:27:1a:b4:3d:6e:95:
                    39:24:7b:64:5c:96:c7:01:ad:37:d9:b0:4c:6e:50:
                    c0:22:73:f1:c9:39:b6:4a:5d:9c:cd:65:d1:6e:e6:
                    ac:85:0e:45:7d:9a:67:5d:72:40:ad:8d:80:cb:e2:
                    3a:57:ff:48:56:9a:bf:0e:f2:85:e9:7a:43:a3:1b:
                    f5:68:38:b3:dc:35:8a:cb:f6:b8:7e:22:86:bb:c9:
                    80:9c:e9:8b:e4:a0:e5:ba:3e:c3:0d:dd:a7:06:0c:
                    3e:aa:d8:fb:8f:bc:5a:12:df:f4:fb:16:d9:01:7c:
                    e2:a5:91:7d:32:df:59:96:a1:18:fa:90:9f:96:b0:
                    be:f6:47:4d:b1:6f:79:e4:d7:81:7c:ac:ff:e8:d9:
                    c1:b5:7f:60:37:03:af:99:fa:34:ab:e6:7e:81:66:
                    04:b6:2f:5f:c4:e6:28:5c:21:de:da:e1:3c:3a:fb:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:4B:3C:2C:57:FE:79:2D:7E:B7:42:1F:C2:96:DA:0E:07:B0:67
            X509v3 Authority Key Identifier:
                keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:22:ae:c5:e0:42:00:0b:be:c8:17:f1:da:47:10:a1:18:e4:
         93:40:dc:28:de:b9:85:8c:32:bc:81:3c:4c:07:fc:d7:8d:4f:
         d8:d4:f6:08:1f:24:68:c9:92:1c:21:97:be:49:7d:60:2a:da:
         f6:ce:7c:b9:64:6f:82:24:ac:ca:24:1d:bf:eb:69:59:ba:15:
         49:e8:94:ac:bc:59:ae:85:29:87:70:94:5c:64:9a:60:69:a7:
         94:06:bc:d2:a1:4b:99:4a:17:3e:81:67:29:88:e3:9a:f0:e6:
         70:c1:f0:41:eb:02:be:5f:91:c5:64:6f:36:87:5e:39:12:73:
         e0:70:9c:f3:6e:2e:4d:74:2a:2b:18:b4:2a:38:d7:63:9b:e6:
         2a:f6:55:d8:d5:ca:e7:55:b3:85:3c:db:7e:93:34:a2:99:af:
         5c:83:d4:e8:2a:78:40:a2:b8:ef:0b:91:f4:b9:fd:03:c5:72:
         a2:d6:4b:df:e3:a5:59:f5:af:c7:03:c7:b2:86:b1:ab:e5:94:
         a1:43:fa:e2:47:4d:7e:f4:d8:5f:41:2f:68:2d:a9:05:31:bf:
         cd:db:8b:cf:58:75:5a:8b:2a:3f:5c:df:f2:92:bd:e2:ce:73:
         8b:f9:ea:ed:9d:42:40:ab:d6:1d:32:d8:eb:d7:f2:68:fe:8c:
         09:08:3a:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq4RRID0HlImfnoWVp3nXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh
ZWQyMzgwHhcNMjUwNDEzMTUwMTMxWhcNMjUwNDE0MTUwMTMxWjAzMTEwLwYDVQQD
Eyg2OTk3NGIzYzJjNTdmZTc5MmQ3ZWI3NDIxZmMyOTZkYTBlMDdiMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA055F2IiHnZuM0Ir6LTat8CNVpvlv
f/GG5ezWfp5Gp+C05TjbGO1xoQPGk+H3FHcmJzTOJtdAuYMi8GQ9kCTcW3EXA4rL
/9k8Eb+1B0Ta0k9D9twnGrQ9bpU5JHtkXJbHAa032bBMblDAInPxyTm2Sl2czWXR
buashQ5FfZpnXXJArY2Ay+I6V/9IVpq/DvKF6XpDoxv1aDiz3DWKy/a4fiKGu8mA
nOmL5KDluj7DDd2nBgw+qtj7j7xaEt/0+xbZAXzipZF9Mt9ZlqEY+pCflrC+9kdN
sW955NeBfKz/6NnBtX9gNwOvmfo0q+Z+gWYEti9fxOYoXCHe2uE8Ovsi5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmXSzwsV/55LX63Qh/CltoOB7BnMB8GA1UdIwQY
MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt
YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy
LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyKuxeBC
AAu+yBfx2kcQoRjkk0DcKN65hYwyvIE8TAf8141P2NT2CB8kaMmSHCGXvkl9YCra
9s58uWRvgiSsyiQdv+tpWboVSeiUrLxZroUph3CUXGSaYGmnlAa80qFLmUoXPoFn
KYjjmvDmcMHwQesCvl+RxWRvNodeORJz4HCc824uTXQqKxi0KjjXY5vmKvZV2NXK
51WzhTzbfpM0opmvXIPU6Cp4QKK47wuR9Ln9A8VyotZL3+OlWfWvxwPHsoaxq+WU
oUP64kdNfvTYX0EvaC2pBTG/zduLz1h1WosqP1zf8pK94s5zi/nq7Z1CQKvWHTLY
69fyaP6MCQg6wg==
-----END CERTIFICATE-----