Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          B6LAzCzw55/ETS3RVZm+IYRlSgGo1sOrp5dS+MjW1Hw=
Subject key identifier:   0E:78:47:25:3C:FF:01:1E:49:E1:7B:75:BD:E3:AD:B3:3F:3A:42:6B
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       01962E98F0255D45137AC882410EF4BE9DF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: 1-tdTzrCyZd7lEHmJJDJ8ws5WSYg.roa (hash: 4j/Yryuq0eJvbWon8IZY/muGfuoD1JF1qyyc+MjhZB8=)
                          2: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
                          3: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
                          4: L9ix8pw07x4PhUpkqGmls3mm4gM.roa (hash: O7RkSci1TH3Sjpald3VvboQYxEi06vvVnFtQcOqBkgA=)
                          5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: T7rs6ATdtq5uiScgTq8PES7kZ7AqQ828Az9f0jXNOBg=)
                          6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
                          7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f0:25:5d:45:13:7a:c8:82:41:0e:f4:be:9d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=0e7847253cff011e49e17b75bde3adb33f3a426b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:c5:ac:8e:52:ec:e4:a3:28:80:a7:d8:97:
                    45:17:92:70:9d:fc:3f:cf:b6:c1:31:6b:ba:b6:81:
                    96:9c:b5:e8:c9:70:23:df:45:88:be:89:01:ad:ba:
                    33:8d:69:7d:9a:63:cc:04:8e:b1:ee:61:87:ac:93:
                    df:fd:8c:c0:3c:7d:9b:76:c0:cc:f9:c4:1d:56:d4:
                    27:1e:74:8f:6d:be:89:95:42:03:9d:1e:0d:d2:28:
                    93:6e:83:ea:f2:3a:1e:51:b6:9e:74:9b:3b:34:aa:
                    87:c8:5e:72:c5:cd:75:41:67:ce:06:6e:49:af:a4:
                    17:3a:e0:25:ba:cf:a5:ca:ae:2c:8f:a2:1f:5d:cf:
                    46:96:d3:54:d1:66:53:a0:23:9b:45:10:bd:90:a1:
                    3b:83:d6:dd:16:42:8f:78:1d:bb:03:e5:21:ae:60:
                    6c:dc:ed:36:89:06:3e:92:bd:43:0a:83:f4:7f:ff:
                    99:52:3a:76:2b:97:bc:b8:a8:fc:10:95:c5:c4:d6:
                    c6:c4:bb:d8:53:4d:b9:c6:80:d3:52:db:16:8f:0d:
                    b1:30:a9:bb:75:cf:c6:c8:9c:94:8d:37:1f:41:57:
                    86:aa:fc:4d:08:16:34:e1:8e:71:27:11:0a:aa:e2:
                    6a:07:04:e3:55:ab:4e:ae:b9:a1:a3:25:2f:1a:ad:
                    31:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:78:47:25:3C:FF:01:1E:49:E1:7B:75:BD:E3:AD:B3:3F:3A:42:6B
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:75:c7:a6:b6:19:b5:82:8c:52:c9:c4:ff:75:bb:50:98:
         80:54:ce:80:0f:c3:56:61:c2:12:71:ec:3f:fa:ef:7e:3f:84:
         15:41:20:76:a3:f0:72:7f:1e:1c:cd:48:31:fe:b7:6b:97:eb:
         8b:7d:f3:54:51:99:60:12:dd:1a:44:14:0f:14:d9:c9:cd:aa:
         ee:c0:c0:b8:86:86:c3:2f:e2:b1:ae:36:5b:57:32:7e:83:ae:
         61:19:1b:5b:20:f8:78:4b:7d:50:b2:0f:93:7a:da:ba:53:5e:
         c1:b8:d2:50:45:4a:64:e0:3d:9f:8b:4a:e0:04:d1:cd:73:92:
         f9:3f:59:e9:40:7d:c4:0d:79:de:eb:37:e5:8b:1b:d0:ba:87:
         cc:d3:74:73:ef:b1:4b:ee:69:4c:65:28:9c:90:1d:b1:ff:4c:
         87:b1:97:ae:ab:31:72:58:57:bb:ac:59:57:cf:9d:46:c0:a9:
         63:c6:3a:b2:fc:6f:db:15:bd:39:82:b9:8b:6c:83:42:d2:1b:
         a9:34:ff:3a:20:39:2e:95:71:54:9b:dc:4c:b2:86:13:05:87:
         36:12:fb:bb:f4:bd:88:4e:ab:6f:ab:08:f2:1b:80:bd:1d:fa:
         d7:18:29:d6:dd:db:d2:f6:91:8f:0b:fb:13:bf:f0:8e:cd:80:
         d7:73:57:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPAlXUUTesiCQQ70vp31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjUwNDEzMTAwMTM2WhcNMjUwNDE0MTAwMTM2WjAzMTEwLwYDVQQD
EygwZTc4NDcyNTNjZmYwMTFlNDllMTdiNzViZGUzYWRiMzNmM2E0MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSDFrI5S7OSjKICn2JdFF5Jwnfw/
z7bBMWu6toGWnLXoyXAj30WIvokBrbozjWl9mmPMBI6x7mGHrJPf/YzAPH2bdsDM
+cQdVtQnHnSPbb6JlUIDnR4N0iiTboPq8joeUbaedJs7NKqHyF5yxc11QWfOBm5J
r6QXOuAlus+lyq4sj6IfXc9GltNU0WZToCObRRC9kKE7g9bdFkKPeB27A+UhrmBs
3O02iQY+kr1DCoP0f/+ZUjp2K5e8uKj8EJXFxNbGxLvYU025xoDTUtsWjw2xMKm7
dc/GyJyUjTcfQVeGqvxNCBY04Y5xJxEKquJqBwTjVatOrrmhoyUvGq0xzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA54RyU8/wEeSeF7db3jrbM/OkJrMB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5p1x6a2
GbWCjFLJxP91u1CYgFTOgA/DVmHCEnHsP/rvfj+EFUEgdqPwcn8eHM1IMf63a5fr
i33zVFGZYBLdGkQUDxTZyc2q7sDAuIaGwy/isa42W1cyfoOuYRkbWyD4eEt9ULIP
k3raulNewbjSUEVKZOA9n4tK4ATRzXOS+T9Z6UB9xA153us35Ysb0LqHzNN0c++x
S+5pTGUonJAdsf9Mh7GXrqsxclhXu6xZV8+dRsCpY8Y6svxv2xW9OYK5i2yDQtIb
qTT/OiA5LpVxVJvcTLKGEwWHNhL7u/S9iE6rb6sI8huAvR361xgp1t3b0vaRjwv7
E7/wjs2A13NXiA==
-----END CERTIFICATE-----