Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft
File:                     zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft (raw, json)
Hash identifier:          HbVq5i48VTVoEZIDQhZ9PrYiBtX1pgnvO4u/+A7Kg7M=
Subject key identifier:   D7:34:B3:4E:54:06:33:44:E8:27:C1:4D:9E:52:3C:AF:13:B5:82:AD
Authority key identifier: CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
Certificate issuer:       /CN=cced992030531e7e8b518aefd9e267cc528eda9a
Certificate serial:       0193FA7882D3C1428B6B644AE87237052656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft
Manifest number:          0C02
Signing time:             Tue 24 Dec 2024 21:00:21 +0000
Manifest this update:     Tue 24 Dec 2024 21:00:21 +0000
Manifest next update:     Wed 25 Dec 2024 21:00:21 +0000
Files and hashes:         1: zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl (hash: 8PRzrsvBWdc3tNoRSC2MwilVBlc20sg1MVUJABSGbtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:78:82:d3:c1:42:8b:6b:64:4a:e8:72:37:05:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cced992030531e7e8b518aefd9e267cc528eda9a
        Validity
            Not Before: Dec 24 21:00:21 2024 GMT
            Not After : Dec 25 21:00:21 2024 GMT
        Subject: CN=d734b34e54063344e827c14d9e523caf13b582ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:19:3e:68:45:98:4e:bb:86:2a:6a:30:b4:
                    5b:3b:57:8e:e4:a3:e0:37:bc:c4:99:f8:3b:2d:7f:
                    a9:c8:a7:06:d9:d1:5c:40:75:9d:d6:0c:e4:03:97:
                    94:cd:8c:eb:17:2d:54:1d:11:8f:0e:d2:95:f4:cd:
                    ee:d1:3d:58:b7:4f:a6:a2:54:e7:02:0d:d8:04:a3:
                    d4:26:f9:35:96:29:8a:2f:85:64:d3:60:b1:31:dc:
                    ae:9c:e4:9d:9d:a8:bf:91:6a:b5:4a:52:7f:f7:af:
                    df:c5:9a:e4:d5:49:e9:9d:a5:92:4e:7b:7c:1f:b5:
                    8e:cc:68:f0:4e:eb:35:8e:c3:8d:03:03:8b:43:47:
                    e8:d3:3c:23:a2:97:40:4b:f4:73:73:d2:76:5a:ab:
                    96:ad:56:51:e1:82:69:2c:15:a4:cb:0a:c3:bc:cd:
                    fb:40:60:43:0c:90:f9:f9:04:c3:2c:2a:96:e2:cd:
                    d4:63:52:54:fd:f2:57:13:07:cf:a2:b0:14:15:16:
                    88:c8:de:49:5b:b1:bb:31:76:49:15:13:99:96:79:
                    65:9a:32:71:c8:60:08:75:a7:55:c4:29:da:05:04:
                    17:60:fd:b9:ae:36:fe:78:3a:c2:f6:95:18:e1:75:
                    f7:b0:7c:b6:e9:69:1c:97:12:bf:16:b1:ac:3c:0d:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:B3:4E:54:06:33:44:E8:27:C1:4D:9E:52:3C:AF:13:B5:82:AD
            X509v3 Authority Key Identifier:
                keyid:CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:86:b2:78:8b:b1:42:a1:96:e7:47:2c:46:88:8d:24:b6:1a:
         b3:ef:ff:9a:66:a8:0d:f5:54:53:5e:6d:14:14:09:0c:7c:70:
         a4:42:f2:66:23:ac:dd:11:32:ae:4b:3f:02:a4:08:f3:0d:6d:
         84:ac:d4:8f:dc:77:ca:3e:04:55:50:20:44:a2:c2:4d:42:92:
         b7:20:f0:b2:79:ae:3d:e5:8c:69:21:23:f8:75:0c:5a:9c:e4:
         83:90:70:eb:c2:91:b4:a4:51:a9:3a:0e:18:db:a2:9a:2b:2c:
         0a:d5:d4:5d:e8:54:30:76:82:90:c4:a0:30:0e:e9:e8:a9:3b:
         a1:af:53:f9:11:3f:a8:56:8d:c7:cd:64:61:79:bb:db:26:c2:
         25:ba:63:7f:7a:5c:51:ac:ba:b4:4b:75:38:33:fa:9b:63:79:
         7e:1a:51:2b:cd:57:a0:01:33:4a:ea:a2:69:98:79:7b:d4:0e:
         e3:57:91:bd:79:14:10:3c:14:74:7b:e3:2f:ec:61:95:80:41:
         4f:22:12:05:74:f2:21:3e:53:5b:c6:95:5d:8f:4d:91:d9:c7:
         ab:ef:c5:3b:79:85:3a:e8:eb:48:43:0a:17:02:60:db:62:58:
         db:e3:bf:1b:cd:5d:f5:75:db:7d:7f:48:b3:59:9a:d0:06:10:
         67:72:3c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZP6eILTwUKLa2RK6HI3BSZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZWQ5OTIwMzA1MzFlN2U4YjUxOGFlZmQ5ZTI2N2NjNTI4
ZWRhOWEwHhcNMjQxMjI0MjEwMDIxWhcNMjQxMjI1MjEwMDIxWjAzMTEwLwYDVQQD
EyhkNzM0YjM0ZTU0MDYzMzQ0ZTgyN2MxNGQ5ZTUyM2NhZjEzYjU4MmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JoZPmhFmE67hipqMLRbO1eO5KPg
N7zEmfg7LX+pyKcG2dFcQHWd1gzkA5eUzYzrFy1UHRGPDtKV9M3u0T1Yt0+molTn
Ag3YBKPUJvk1limKL4Vk02CxMdyunOSdnai/kWq1SlJ/96/fxZrk1UnpnaWSTnt8
H7WOzGjwTus1jsONAwOLQ0fo0zwjopdAS/Rzc9J2WquWrVZR4YJpLBWkywrDvM37
QGBDDJD5+QTDLCqW4s3UY1JU/fJXEwfPorAUFRaIyN5JW7G7MXZJFROZlnllmjJx
yGAIdadVxCnaBQQXYP25rjb+eDrC9pUY4XX3sHy26WkclxK/FrGsPA1FvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc0s05UBjNE6CfBTZ5SPK8TtYKtMB8GA1UdIwQY
MBaAFMztmSAwUx5+i1GK79niZ8xSjtqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek8yWklEQlRIbjZMVVlydjJlSm56RktPMnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMDVlNzctZjMwMS00MTI1LTkxMTgt
ZTRkMWYwYTI3YjIxLzEvek8yWklEQlRIbjZMVVlydjJlSm56RktPMnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMDVlNzctZjMwMS00MTI1LTkxMTgtZTRkMWYwYTI3YjIx
LzEvek8yWklEQlRIbjZMVVlydjJlSm56RktPMnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYayeIux
QqGW50csRoiNJLYas+//mmaoDfVUU15tFBQJDHxwpELyZiOs3REyrks/AqQI8w1t
hKzUj9x3yj4EVVAgRKLCTUKStyDwsnmuPeWMaSEj+HUMWpzkg5Bw68KRtKRRqToO
GNuimissCtXUXehUMHaCkMSgMA7p6Kk7oa9T+RE/qFaNx81kYXm72ybCJbpjf3pc
Uay6tEt1ODP6m2N5fhpRK81XoAEzSuqiaZh5e9QO41eRvXkUEDwUdHvjL+xhlYBB
TyISBXTyIT5TW8aVXY9NkdnHq+/FO3mFOujrSEMKFwJg22JY2+O/G81d9XXbfX9I
s1ma0AYQZ3I8kQ==
-----END CERTIFICATE-----