Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File:                     HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier:          XPy2WyZunY1gscVDgawZvFK4ZhIuvEdDP7Ls8OdSoTE=
Subject key identifier:   48:1B:A9:DD:31:5A:5B:13:13:4B:52:3C:8C:36:76:49:D0:AC:F7:F1
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer:       /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial:       01962F065863ACD985BCEE9E7D51628879FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: h4tzqvfelZGpk+6XXcVAuoxlXpKmy7dBX22nVyoK03Y=)
                          2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:63:ac:d9:85:bc:ee:9e:7d:51:62:88:79:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=481ba9dd315a5b13134b523c8c367649d0acf7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:ae:81:c2:44:63:0a:f5:94:4f:f0:21:3e:
                    6f:34:a2:4e:87:aa:01:79:0c:c0:e9:86:ac:7c:5a:
                    e7:49:f2:85:67:b7:e5:7d:f2:38:2b:41:47:61:56:
                    30:99:6c:93:d4:fe:09:0a:fd:61:5f:32:f3:de:94:
                    b0:42:0c:e5:75:f5:ae:d2:78:c7:68:5e:8a:3c:d3:
                    62:1a:a9:e9:ad:36:57:ee:55:3f:89:2b:20:fc:c0:
                    9e:71:d9:5f:60:da:1a:b5:ec:77:13:cb:c9:66:44:
                    2e:c4:71:6e:78:84:26:f5:a0:02:2d:38:1c:b9:0d:
                    a3:91:23:30:18:7f:64:89:62:6f:e8:28:20:b4:63:
                    16:08:46:d9:ea:d2:2d:8a:30:36:82:d6:83:81:7e:
                    06:18:d7:95:71:d5:9f:be:d3:c5:b7:6d:34:ac:4c:
                    a7:8b:eb:0f:0d:76:a3:e4:32:45:59:d5:70:4b:6f:
                    64:53:ad:74:8d:2d:1f:96:c3:28:3f:4a:0c:38:50:
                    31:91:fd:d8:25:87:c7:56:14:56:69:1e:a0:0e:53:
                    1f:04:d0:b9:0d:59:de:91:2e:59:cf:9b:3b:23:52:
                    d8:ec:3b:d8:4c:12:73:16:e8:51:20:03:1f:3b:31:
                    d9:6d:6a:ce:d5:96:25:a8:fc:20:06:68:19:67:ba:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:A9:DD:31:5A:5B:13:13:4B:52:3C:8C:36:76:49:D0:AC:F7:F1
            X509v3 Authority Key Identifier:
                keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:62:aa:aa:69:c3:21:ce:67:13:b6:a7:72:c1:f5:7e:24:ec:
         d1:71:46:34:52:77:15:0a:90:71:a7:e0:db:f0:17:6e:b5:1a:
         44:28:c0:d7:34:e9:51:00:db:47:2c:17:9a:1a:e2:99:f6:b4:
         eb:83:d4:ec:ea:07:86:7b:53:05:78:e1:6a:81:b4:df:ea:39:
         a6:bd:39:ad:4f:e9:93:5e:31:c1:8c:67:15:45:76:ef:26:dd:
         28:32:ca:bb:b5:33:01:3b:53:b7:a7:c8:08:9c:e9:56:fa:3d:
         03:0b:cd:df:dd:67:51:af:3c:dc:e2:3a:58:8a:b9:43:32:53:
         d1:ce:07:48:82:26:17:62:d8:b2:f1:c4:3e:f8:b6:35:da:40:
         ad:e1:4c:7e:37:c1:4a:8e:38:dd:aa:f1:d5:82:a8:e4:3e:d9:
         19:02:15:86:42:e1:b5:6a:c5:e5:f0:b9:9e:9f:2b:62:8e:99:
         80:83:bd:b5:c4:b6:dd:3f:e0:ec:ad:82:b7:24:f3:5d:36:28:
         c4:9d:5d:3b:fb:b6:af:a1:3c:21:09:3d:41:3a:1f:f6:1c:36:
         99:98:32:7c:f4:af:35:fe:53:88:8b:42:e8:df:51:46:d8:85:
         fa:b4:99:e7:49:ae:9c:75:bb:d1:c3:11:55:d5:c6:a8:b2:3d:
         e5:54:a7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlhjrNmFvO6efVFiiHn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw
OWIxN2YwHhcNMjUwNDEzMTIwMTA3WhcNMjUwNDE0MTIwMTA3WjAzMTEwLwYDVQQD
Eyg0ODFiYTlkZDMxNWE1YjEzMTM0YjUyM2M4YzM2NzY0OWQwYWNmN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ2ugcJEYwr1lE/wIT5vNKJOh6oB
eQzA6YasfFrnSfKFZ7flffI4K0FHYVYwmWyT1P4JCv1hXzLz3pSwQgzldfWu0njH
aF6KPNNiGqnprTZX7lU/iSsg/MCecdlfYNoatex3E8vJZkQuxHFueIQm9aACLTgc
uQ2jkSMwGH9kiWJv6CggtGMWCEbZ6tItijA2gtaDgX4GGNeVcdWfvtPFt200rEyn
i+sPDXaj5DJFWdVwS29kU610jS0flsMoP0oMOFAxkf3YJYfHVhRWaR6gDlMfBNC5
DVnekS5Zz5s7I1LY7DvYTBJzFuhRIAMfOzHZbWrO1ZYlqPwgBmgZZ7oHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgbqd0xWlsTE0tSPIw2dknQrPfxMB8GA1UdIwQY
MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt
NmVjOGM4MWZkYzNmLzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm
LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2KqqmnD
Ic5nE7ancsH1fiTs0XFGNFJ3FQqQcafg2/AXbrUaRCjA1zTpUQDbRywXmhrimfa0
64PU7OoHhntTBXjhaoG03+o5pr05rU/pk14xwYxnFUV27ybdKDLKu7UzATtTt6fI
CJzpVvo9AwvN391nUa883OI6WIq5QzJT0c4HSIImF2LYsvHEPvi2NdpAreFMfjfB
So443arx1YKo5D7ZGQIVhkLhtWrF5fC5np8rYo6ZgIO9tcS23T/g7K2CtyTzXTYo
xJ1dO/u2r6E8IQk9QTof9hw2mZgyfPSvNf5TiItC6N9RRtiF+rSZ50munHW70cMR
VdXGqLI95VSnPA==
-----END CERTIFICATE-----