Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
File:                     c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft (raw, json)
Hash identifier:          BLaITcBvlV8hgeiaVLxA+3rhf8Pl/nnHmniNCckiz0M=
Subject key identifier:   33:DE:C9:22:D2:7D:10:F5:0F:7F:58:F6:40:0B:D7:05:51:3D:68:F6
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Certificate issuer:       /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial:       01962E2ABF8962C756AE74FA1AAB07963C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl (hash: QIKfsKfQqoer0v6c2ciu8ckb9e6APH5l8JJ7vH3lueM=)
                          2: clN4rn78ALDRkU6Gc0tlA0L76yY.roa (hash: HSAiRzNpFiSSFt3gFQJ5gPuQzchbTNDXBSkeKqZgK9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bf:89:62:c7:56:ae:74:fa:1a:ab:07:96:3c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=33dec922d27d10f50f7f58f6400bd705513d68f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:ec:13:19:d6:6b:a9:95:a9:43:aa:0f:c8:
                    ba:f0:b4:c2:a3:c5:7a:18:70:f7:db:0b:b9:50:12:
                    6b:4d:a9:27:97:3e:d9:da:9f:03:5f:f6:65:ae:14:
                    23:bd:30:b1:d0:41:1d:90:d6:1a:bf:29:e7:a5:e7:
                    c8:5b:90:08:69:ac:35:76:65:0f:20:68:58:5a:b3:
                    17:b0:07:32:03:3d:44:a6:a4:99:ca:7e:12:7f:d7:
                    20:3d:a8:e4:16:6f:02:ca:1d:a1:ba:b3:9c:33:19:
                    66:df:fb:66:14:2c:f7:cc:2d:34:f4:f0:d4:e5:c5:
                    5f:b4:c4:aa:c9:4e:0c:68:6c:ae:ae:62:66:dc:75:
                    e8:0b:9d:b1:92:84:d8:86:a9:e7:b8:e0:28:b1:fb:
                    60:b5:d1:49:62:98:aa:7b:0a:3d:5c:97:fa:f4:ca:
                    63:a0:6f:a8:49:50:84:4a:90:46:92:eb:74:91:0f:
                    f7:c2:11:1d:97:1b:a4:a0:94:9d:37:77:60:d0:62:
                    cb:9e:c0:99:56:82:45:2e:66:d0:92:e9:1e:a3:38:
                    2a:73:ab:6d:83:c6:14:19:89:c8:5d:50:32:e2:96:
                    40:65:bd:d8:d0:3b:2c:cf:54:1e:28:e5:ae:99:67:
                    04:54:02:88:29:12:89:28:2c:d3:8e:be:5c:6c:64:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DE:C9:22:D2:7D:10:F5:0F:7F:58:F6:40:0B:D7:05:51:3D:68:F6
            X509v3 Authority Key Identifier:
                keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:37:db:38:68:9b:8c:42:59:c6:ec:57:39:00:a1:fb:e8:
         4a:6e:45:71:75:0b:66:4f:7b:93:a2:cf:67:1f:00:64:db:29:
         85:ec:61:49:07:ec:58:1a:dc:8e:5c:84:da:6d:ee:e0:6b:76:
         e5:7b:72:7f:37:c4:68:ba:b5:16:33:6c:bf:ff:0a:3b:c4:4d:
         6d:ec:e3:de:c3:9b:97:06:21:f0:b1:91:bd:7d:7a:25:5c:da:
         e8:cb:7a:8f:5e:6c:e1:63:3c:38:e0:34:89:34:a0:5c:69:c9:
         46:f1:24:59:63:37:06:90:68:b5:33:73:aa:fb:7a:34:e3:69:
         b7:52:03:a2:71:fd:9e:1a:67:e5:f2:88:74:c4:18:38:49:f6:
         5f:87:f1:f3:7c:f5:da:88:2e:c1:d9:20:24:db:08:00:8e:7a:
         78:de:2d:65:48:5d:aa:fe:85:a4:f6:bc:7d:e6:d5:63:0e:76:
         3f:34:39:7e:33:31:b2:af:80:8e:ae:9c:14:61:00:fb:d6:0a:
         b2:ba:26:5f:dc:f3:88:e3:ed:89:24:e6:14:45:b6:3c:a8:ca:
         87:ea:24:ee:ff:4a:ce:84:2e:ad:fa:c8:e1:d3:c5:6e:69:91:
         42:70:1e:02:3b:e7:86:5d:95:4c:c8:d5:7a:0a:b2:a5:0e:fa:
         7e:25:fa:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKr+JYsdWrnT6GqsHljw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGZkOTQ2NzgyMWQwNTI4NmY0YjMzYmU4NjE3NjY1MWI2
YWZmM2UwHhcNMjUwNDEzMDgwMTE1WhcNMjUwNDE0MDgwMTE1WjAzMTEwLwYDVQQD
EygzM2RlYzkyMmQyN2QxMGY1MGY3ZjU4ZjY0MDBiZDcwNTUxM2Q2OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaXsExnWa6mVqUOqD8i68LTCo8V6
GHD32wu5UBJrTaknlz7Z2p8DX/ZlrhQjvTCx0EEdkNYavynnpefIW5AIaaw1dmUP
IGhYWrMXsAcyAz1EpqSZyn4Sf9cgPajkFm8Cyh2hurOcMxlm3/tmFCz3zC009PDU
5cVftMSqyU4MaGyurmJm3HXoC52xkoTYhqnnuOAosftgtdFJYpiqewo9XJf69Mpj
oG+oSVCESpBGkut0kQ/3whEdlxukoJSdN3dg0GLLnsCZVoJFLmbQkukeozgqc6tt
g8YUGYnIXVAy4pZAZb3Y0Dssz1QeKOWumWcEVAKIKRKJKCzTjr5cbGShBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPeySLSfRD1D39Y9kAL1wVRPWj2MB8GA1UdIwQY
MBaAFHOP2UZ4IdBShvSzO+hhdmUbav8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgt
MDlmYWMwNjk3NjQ5LzEvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgtMDlmYWMwNjk3NjQ5
LzEvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2Q32zho
m4xCWcbsVzkAofvoSm5FcXULZk97k6LPZx8AZNsphexhSQfsWBrcjlyE2m3u4Gt2
5XtyfzfEaLq1FjNsv/8KO8RNbezj3sOblwYh8LGRvX16JVza6Mt6j15s4WM8OOA0
iTSgXGnJRvEkWWM3BpBotTNzqvt6NONpt1IDonH9nhpn5fKIdMQYOEn2X4fx83z1
2oguwdkgJNsIAI56eN4tZUhdqv6FpPa8febVYw52PzQ5fjMxsq+Ajq6cFGEA+9YK
sromX9zziOPtiSTmFEW2PKjKh+ok7v9KzoQurfrI4dPFbmmRQnAeAjvnhl2VTMjV
egqypQ76fiX68A==
-----END CERTIFICATE-----