Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File:                     Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier:          8sifQTV/BBxQME5xrFd4J+hmUN7smN7xyGUr6xYfmhg=
Subject key identifier:   28:15:9F:29:E2:A8:5E:45:AB:B3:CE:54:40:3D:19:CF:5C:10:66:6A
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer:       /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial:       01962F7507890B0F5A6DABE60D86480B9ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number:          0AFF
Signing time:             Sun 13 Apr 2025 14:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:00 +0000
Files and hashes:         1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
                          2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: evQ4ACrNySNFG0Rv8YF6QGkmJ54FrCAaAGPOR46A/6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:07:89:0b:0f:5a:6d:ab:e6:0d:86:48:0b:9e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
        Validity
            Not Before: Apr 13 14:02:00 2025 GMT
            Not After : Apr 14 14:02:00 2025 GMT
        Subject: CN=28159f29e2a85e45abb3ce54403d19cf5c10666a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:32:ef:83:60:38:98:3a:02:33:cf:75:24:
                    fe:dd:c4:c4:d3:6e:f6:b0:33:0e:0a:28:d2:f4:b4:
                    60:8d:69:1f:f0:3f:96:c1:2f:86:36:60:85:31:30:
                    1f:41:21:da:c5:99:a5:6f:0a:79:e0:94:ba:bc:05:
                    f0:92:f7:bf:ed:d2:37:43:01:aa:72:b2:ee:cd:61:
                    d6:a8:13:47:ae:9e:b3:a3:7d:c2:fd:ef:fb:7a:76:
                    a1:9b:26:3f:9e:5e:f3:9a:9c:d7:ea:8f:34:7b:f3:
                    b0:4d:cd:0e:8e:ce:57:e7:62:e4:0a:cc:39:f7:ab:
                    a2:fd:ff:08:b1:91:05:2f:cb:c8:be:3a:09:5a:98:
                    4e:03:65:c7:45:e4:25:ef:3b:8f:8a:0a:30:49:e2:
                    1a:00:0c:3e:eb:68:8e:38:db:c8:d2:db:14:a7:72:
                    7d:9b:d8:fa:e9:50:af:46:d9:12:ad:6e:09:7c:db:
                    13:d2:85:d0:50:e9:77:b4:fc:66:9b:66:44:3a:78:
                    0b:24:cf:11:9f:71:cd:e1:d8:9c:8f:49:69:6e:c5:
                    f9:60:3b:23:97:56:80:63:21:dc:68:d2:8a:e1:ea:
                    78:4f:e6:db:3e:36:ee:25:cd:86:f6:06:02:37:c2:
                    d5:d7:ad:54:68:92:29:04:0b:a1:99:f1:9f:53:b7:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:15:9F:29:E2:A8:5E:45:AB:B3:CE:54:40:3D:19:CF:5C:10:66:6A
            X509v3 Authority Key Identifier:
                keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:ca:8c:68:49:e9:fa:ea:bd:da:7b:e4:77:8a:4a:4f:be:
         2e:b4:b3:84:b1:b8:25:61:1b:20:65:c4:80:7c:e6:6d:bd:0d:
         c1:29:e1:5a:f9:4b:9f:04:5e:4f:3d:37:ac:cb:3e:e2:56:14:
         fb:80:9c:21:02:bd:65:b5:c2:4a:a1:eb:f8:7b:5b:9d:d6:ac:
         db:22:e8:c2:27:60:b1:ca:95:cd:cb:9c:80:91:6d:76:21:1e:
         3e:cb:ba:0b:2b:ce:49:79:b6:4a:62:a0:5a:eb:d3:ea:a9:17:
         09:8e:0e:34:d9:8b:39:1d:d4:5f:63:90:1a:f4:b3:17:f6:ac:
         c5:6d:27:d5:4c:ad:d5:7d:27:e7:f4:42:7e:c4:7c:7a:25:82:
         ad:6c:d0:da:79:7f:1b:4b:14:05:4f:7d:d9:79:28:b9:71:56:
         93:ff:39:b2:01:41:25:e3:63:6a:9c:60:6d:d0:55:86:a1:a8:
         46:34:49:2c:5d:fe:3b:9a:dd:f1:ca:59:d7:50:e0:8e:42:fc:
         2e:84:dc:b5:29:9c:14:f4:f0:62:8a:de:7d:75:fb:7c:61:42:
         33:88:42:1b:a6:3c:f1:1f:59:53:92:c1:28:96:29:ce:62:54:
         fc:79:c1:e6:42:51:d1:1e:35:f7:17:e4:69:29:b7:6f:fd:83:
         ba:d3:49:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdQeJCw9abavmDYZIC57TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTFjZWRmZTA4MjZmMGY5Nzc1YmRmYThlOTQyNTMwMGJk
ZTlmMTMwHhcNMjUwNDEzMTQwMjAwWhcNMjUwNDE0MTQwMjAwWjAzMTEwLwYDVQQD
EygyODE1OWYyOWUyYTg1ZTQ1YWJiM2NlNTQ0MDNkMTljZjVjMTA2NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZUy74NgOJg6AjPPdST+3cTE0272
sDMOCijS9LRgjWkf8D+WwS+GNmCFMTAfQSHaxZmlbwp54JS6vAXwkve/7dI3QwGq
crLuzWHWqBNHrp6zo33C/e/7enahmyY/nl7zmpzX6o80e/OwTc0Ojs5X52LkCsw5
96ui/f8IsZEFL8vIvjoJWphOA2XHReQl7zuPigowSeIaAAw+62iOONvI0tsUp3J9
m9j66VCvRtkSrW4JfNsT0oXQUOl3tPxmm2ZEOngLJM8Rn3HN4dicj0lpbsX5YDsj
l1aAYyHcaNKK4ep4T+bbPjbuJc2G9gYCN8LV161UaJIpBAuhmfGfU7e8oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgVnyniqF5Fq7POVEA9Gc9cEGZqMB8GA1UdIwQY
MBaAFGfhzt/ggm8Pl3W9+o6UJTAL3p8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEt
ZWM5Yjc1NTIxMjk3LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEtZWM5Yjc1NTIxMjk3
LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0DKjGhJ
6frqvdp75HeKSk++LrSzhLG4JWEbIGXEgHzmbb0NwSnhWvlLnwReTz03rMs+4lYU
+4CcIQK9ZbXCSqHr+Htbndas2yLowidgscqVzcucgJFtdiEePsu6CyvOSXm2SmKg
WuvT6qkXCY4ONNmLOR3UX2OQGvSzF/asxW0n1Uyt1X0n5/RCfsR8eiWCrWzQ2nl/
G0sUBU992XkouXFWk/85sgFBJeNjapxgbdBVhqGoRjRJLF3+O5rd8cpZ11DgjkL8
LoTctSmcFPTwYorefXX7fGFCM4hCG6Y88R9ZU5LBKJYpzmJU/HnB5kJR0R419xfk
aSm3b/2DutNJKw==
-----END CERTIFICATE-----