Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File:                     z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier:          INhMzfLnaLWQ0Hy+/dZnpeB6ebfLFCXwut36HTR1S98=
Subject key identifier:   7D:7D:5E:2A:EA:9E:09:6D:1F:F8:4F:25:84:21:84:B7:BB:F2:6D:65
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer:       /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial:       01962F068C12C3E16CAA634F002B74F939F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number:          0F5A
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
                          2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: vDux9qWGztob1mjDMcxMUFIaJpX6lB5tak8iHZrUYis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8c:12:c3:e1:6c:aa:63:4f:00:2b:74:f9:39:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=7d7d5e2aea9e096d1ff84f25842184b7bbf26d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:1e:57:93:a8:d8:ac:35:87:d2:33:8f:2b:
                    ec:2b:89:e4:43:62:70:4e:32:fd:7f:20:cd:55:c9:
                    12:09:40:61:0a:ea:b3:c8:62:46:22:6a:e2:bf:5f:
                    ff:c6:12:5f:08:9d:2a:b3:44:7e:ac:ed:79:5d:11:
                    c5:80:69:75:ad:fb:ae:d6:6f:cd:f5:23:d4:e4:6f:
                    24:0a:f3:1f:3f:3e:b8:10:82:b6:de:87:d2:10:9e:
                    c9:c3:f4:7d:7a:8e:84:33:77:68:10:40:1e:b1:e2:
                    af:19:ee:3e:c7:1d:06:10:06:33:2c:29:0a:7a:04:
                    a9:32:c4:b8:25:ef:6e:fa:09:f8:37:c2:56:52:77:
                    c0:28:74:48:69:c8:e5:dc:e0:f8:2a:e8:02:4e:d9:
                    a3:68:53:61:09:19:ff:19:90:64:52:1c:47:a0:d7:
                    af:97:38:14:72:2c:0c:8a:9e:7a:22:e7:9b:ae:a4:
                    5c:5a:cc:33:3d:0c:ef:f2:02:db:cd:7e:07:2b:ce:
                    76:21:ed:d9:78:5d:25:76:5b:e4:30:95:d2:89:63:
                    f8:5a:4a:da:c5:6a:8d:a8:db:9d:c7:d3:e6:a4:ac:
                    3e:35:26:a0:9f:6f:25:8d:eb:90:4b:3f:ae:a2:f9:
                    5b:48:70:11:bc:9d:a2:31:80:bc:72:a3:3a:5d:07:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7D:5E:2A:EA:9E:09:6D:1F:F8:4F:25:84:21:84:B7:BB:F2:6D:65
            X509v3 Authority Key Identifier:
                keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ce:57:48:5a:4a:9a:68:52:a5:bd:d1:91:c8:3e:91:de:76:
         9e:ba:d8:c1:ed:63:24:a2:fd:7a:5f:c6:63:5e:47:26:ef:f8:
         f1:94:97:c6:10:2f:a5:dd:e5:6c:be:a2:78:dd:f0:cd:d5:5e:
         27:7d:0f:c7:b8:b3:19:d5:01:35:64:3f:ef:92:dd:7c:a3:cc:
         8e:2e:62:56:de:8f:02:a8:03:0d:ee:02:8e:d0:11:ad:ef:15:
         99:71:b9:9a:ad:32:80:87:f1:71:98:66:46:0a:92:be:72:9a:
         10:fd:88:df:49:d6:78:c9:39:92:2d:4b:94:8a:18:c8:22:03:
         37:38:2b:56:11:58:c3:bf:07:37:4d:4c:de:b2:1f:0b:70:53:
         62:ee:70:ef:20:1c:5e:b5:13:aa:9f:7e:a3:35:17:49:2c:09:
         51:4d:a3:45:bd:0d:0c:4d:a7:45:4a:d4:c9:51:63:a3:2e:b0:
         5e:8a:7f:f2:77:96:a0:77:c3:f6:ab:9c:a3:19:ab:3c:ce:67:
         5c:fd:19:5d:21:bd:a4:2d:a2:54:4b:33:aa:a7:29:29:30:0c:
         54:6c:fc:d1:f6:4b:2f:64:76:6a:a8:1e:55:00:8d:f7:fe:a4:
         6b:42:38:c7:c7:30:a0:c4:ce:70:dc:c3:48:41:9c:c8:2d:c3:
         39:76:13:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBowSw+FsqmNPACt0+TnyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzBmM2QxMTE4MzYxYjU5ZjMzMTVmNTkxNjQzZTFkYWJi
YjIwMDgwHhcNMjUwNDEzMTIwMTIwWhcNMjUwNDE0MTIwMTIwWjAzMTEwLwYDVQQD
Eyg3ZDdkNWUyYWVhOWUwOTZkMWZmODRmMjU4NDIxODRiN2JiZjI2ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjEeV5Oo2Kw1h9IzjyvsK4nkQ2Jw
TjL9fyDNVckSCUBhCuqzyGJGImriv1//xhJfCJ0qs0R+rO15XRHFgGl1rfuu1m/N
9SPU5G8kCvMfPz64EIK23ofSEJ7Jw/R9eo6EM3doEEAeseKvGe4+xx0GEAYzLCkK
egSpMsS4Je9u+gn4N8JWUnfAKHRIacjl3OD4KugCTtmjaFNhCRn/GZBkUhxHoNev
lzgUciwMip56IuebrqRcWswzPQzv8gLbzX4HK852Ie3ZeF0ldlvkMJXSiWP4Wkra
xWqNqNudx9PmpKw+NSagn28ljeuQSz+uovlbSHARvJ2iMYC8cqM6XQe0lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH19XirqngltH/hPJYQhhLe78m1lMB8GA1UdIwQY
MBaAFM9w89ERg2G1nzMV9ZFkPh2ruyAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEt
ZmJiOWY5MWM4Y2NlLzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEtZmJiOWY5MWM4Y2Nl
LzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoc5XSFpK
mmhSpb3Rkcg+kd52nrrYwe1jJKL9el/GY15HJu/48ZSXxhAvpd3lbL6ieN3wzdVe
J30Px7izGdUBNWQ/75LdfKPMji5iVt6PAqgDDe4CjtARre8VmXG5mq0ygIfxcZhm
RgqSvnKaEP2I30nWeMk5ki1LlIoYyCIDNzgrVhFYw78HN01M3rIfC3BTYu5w7yAc
XrUTqp9+ozUXSSwJUU2jRb0NDE2nRUrUyVFjoy6wXop/8neWoHfD9qucoxmrPM5n
XP0ZXSG9pC2iVEszqqcpKTAMVGz80fZLL2R2aqgeVQCN9/6ka0I4x8cwoMTOcNzD
SEGcyC3DOXYTwQ==
-----END CERTIFICATE-----