Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File:                     Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier:          dZ3yAdk4HkKoNzIPkGL9umG/bWnTq/6yYwb9C6X/vFI=
Subject key identifier:   7F:4E:88:43:1E:2D:15:98:0D:A4:9F:ED:A4:7B:A7:3A:98:CB:85:47
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer:       /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial:       01962FAB46B2F986BC6D439F3E0AA54A55E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
                          2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: Y1gyYsKXKwerYXb7XfULzJBeqXqIu9kVKOIRK5eTemY=)
                          3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:46:b2:f9:86:bc:6d:43:9f:3e:0a:a5:4a:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=7f4e88431e2d15980da49feda47ba73a98cb8547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:3a:57:75:09:cc:81:e2:3f:c9:03:65:58:
                    8f:ff:14:e5:d9:44:cc:5d:85:5f:25:95:98:0a:16:
                    16:06:52:84:e7:d2:92:ce:38:18:67:73:3e:5d:9d:
                    52:f4:4e:d3:49:1c:73:56:98:80:b4:fd:f3:c2:c3:
                    b4:c5:6b:f4:21:8a:ed:0c:d4:0d:2f:c5:0c:66:2c:
                    95:fe:c2:9a:6d:a1:52:36:63:76:95:9a:66:ff:4b:
                    88:cd:c3:a7:c2:d3:60:8d:13:96:2c:26:c6:30:d3:
                    8d:d7:fb:e3:58:78:db:6f:6f:b8:06:32:4b:6e:21:
                    8a:cb:52:c3:8b:41:b3:27:aa:62:c8:d0:2b:5d:a8:
                    eb:07:5c:bb:38:6c:ab:fb:11:04:9b:eb:51:e8:89:
                    02:dd:b5:9c:cf:f0:db:0d:fc:6a:3a:7f:e2:ab:33:
                    99:d4:58:ed:bc:f5:fc:c3:51:3e:d3:19:20:d1:2f:
                    81:eb:af:ba:ce:06:c0:33:90:5e:7b:67:fe:0c:59:
                    8d:40:b1:bf:5a:6a:70:9a:9b:4a:f4:98:70:df:f7:
                    5c:dd:a4:a5:44:92:68:27:9e:2d:e2:c1:1d:7b:de:
                    a0:ec:c0:4a:f4:9b:a2:12:ce:75:47:0a:ff:f2:46:
                    e4:68:97:3c:2d:dc:1d:a3:06:54:75:d7:36:49:19:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4E:88:43:1E:2D:15:98:0D:A4:9F:ED:A4:7B:A7:3A:98:CB:85:47
            X509v3 Authority Key Identifier:
                keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b2:41:27:2a:85:9d:fb:e7:94:9b:d4:8f:e3:5f:8d:a1:d5:
         15:60:78:54:7f:72:25:c7:12:bc:1b:49:da:7e:f2:c8:c9:a1:
         bb:5f:1f:3a:67:34:47:09:7a:72:5c:f9:43:19:35:63:8d:b0:
         c1:17:a3:9e:8c:d6:c1:19:86:7c:ea:43:9c:e9:48:fd:c7:a3:
         cf:a0:7a:2d:cf:e8:f4:59:dc:8f:25:4e:90:b1:cb:bf:d8:f1:
         22:e1:dd:76:a7:7b:c8:17:fc:d3:8d:08:21:c1:08:97:69:b0:
         cc:ba:9b:c7:8c:01:b4:0f:80:66:75:2f:64:12:32:b2:9a:9a:
         8a:97:b8:f0:8f:95:ae:11:bf:76:37:6d:1f:99:2b:c5:ad:87:
         1a:a7:cd:6a:18:18:23:d4:3e:84:54:00:f6:87:cb:b0:a0:58:
         83:bf:79:f5:d6:f8:f9:30:8f:0c:f4:21:6e:d6:74:0f:81:54:
         cc:e8:91:6a:fb:03:4b:f2:ca:a0:4a:48:9a:59:39:a0:ab:e4:
         30:98:e4:b2:c0:7f:1c:4f:66:16:5f:73:4a:9a:40:50:71:7e:
         2e:03:ff:8f:3b:db:4e:5a:7c:06:c8:63:0a:74:b1:97:55:2a:
         4d:d6:8a:c9:68:6f:b6:54:90:69:61:24:18:8f:43:74:21:92:
         dd:7f:44:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0ay+Ya8bUOfPgqlSlXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NGE2MWE4YTljOTdjMDNjZGViZTA1ZjgyNTU4ZTUxZGJm
OTA4MjEwHhcNMjUwNDEzMTUwMTE1WhcNMjUwNDE0MTUwMTE1WjAzMTEwLwYDVQQD
Eyg3ZjRlODg0MzFlMmQxNTk4MGRhNDlmZWRhNDdiYTczYTk4Y2I4NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtQ6V3UJzIHiP8kDZViP/xTl2UTM
XYVfJZWYChYWBlKE59KSzjgYZ3M+XZ1S9E7TSRxzVpiAtP3zwsO0xWv0IYrtDNQN
L8UMZiyV/sKabaFSNmN2lZpm/0uIzcOnwtNgjROWLCbGMNON1/vjWHjbb2+4BjJL
biGKy1LDi0GzJ6piyNArXajrB1y7OGyr+xEEm+tR6IkC3bWcz/DbDfxqOn/iqzOZ
1FjtvPX8w1E+0xkg0S+B66+6zgbAM5Bee2f+DFmNQLG/WmpwmptK9Jhw3/dc3aSl
RJJoJ54t4sEde96g7MBK9JuiEs51Rwr/8kbkaJc8LdwdowZUddc2SRmdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9OiEMeLRWYDaSf7aR7pzqYy4VHMB8GA1UdIwQY
MBaAFGdKYaipyXwDzevgX4JVjlHb+QghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmIt
NGM4NmNiZTAzNjEwLzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmItNGM4NmNiZTAzNjEw
LzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7JBJyqF
nfvnlJvUj+NfjaHVFWB4VH9yJccSvBtJ2n7yyMmhu18fOmc0Rwl6clz5Qxk1Y42w
wRejnozWwRmGfOpDnOlI/cejz6B6Lc/o9FncjyVOkLHLv9jxIuHddqd7yBf8040I
IcEIl2mwzLqbx4wBtA+AZnUvZBIyspqaipe48I+VrhG/djdtH5krxa2HGqfNahgY
I9Q+hFQA9ofLsKBYg7959db4+TCPDPQhbtZ0D4FUzOiRavsDS/LKoEpImlk5oKvk
MJjkssB/HE9mFl9zSppAUHF+LgP/jzvbTlp8BshjCnSxl1UqTdaKyWhvtlSQaWEk
GI9DdCGS3X9E5A==
-----END CERTIFICATE-----