Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
File:                     ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json)
Hash identifier:          lebEXO3Zm/4mlcb4MQXae7IfP1Ga0mZq1aW3RqsDF94=
Subject key identifier:   D8:7B:95:53:1B:85:75:3E:24:FB:0F:DA:F3:4E:A4:BF:D0:72:81:97
Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
Certificate issuer:       /CN=66507077ce7f30fc0686dd0934a89997df31e84c
Certificate serial:       01962E989906C825EC2538C10D0B80C024CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
Manifest number:          6C
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: CMAN4bcbFlE2ovL3BXKdvH4eTII.roa (hash: ZzFaJfQBLQmJT0k4QbFN8QUiuOCXpP8XehevhIAFTKY=)
                          2: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: l2nj+8XWKsRNcA01V3GPi3h3Hy/OwVpnvwUljWjs3kU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:99:06:c8:25:ec:25:38:c1:0d:0b:80:c0:24:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=d87b95531b85753e24fb0fdaf34ea4bfd0728197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:eb:65:a0:4d:5c:78:76:ab:1c:2b:58:04:
                    7b:61:26:0f:6f:25:d2:43:7b:05:98:6d:00:da:29:
                    8f:99:90:34:02:7d:71:3d:a6:51:1f:8e:cb:ac:8a:
                    34:e2:40:07:1f:54:3d:d9:1c:41:67:2d:df:d1:a5:
                    23:f0:46:62:7c:34:b4:23:fb:ad:bf:7a:a4:6f:ef:
                    5c:b0:0b:f0:70:1b:af:85:cc:78:d4:c1:30:3b:ba:
                    0a:89:fa:1d:30:55:91:b7:1f:4a:4e:17:a9:41:8f:
                    2c:70:2c:ed:f9:e2:ab:04:be:6f:75:3c:d2:1d:01:
                    df:90:dc:23:c8:ce:ee:c1:c6:81:ad:25:ee:e3:52:
                    c4:6d:b5:ea:fc:cf:d3:66:52:b9:4a:32:58:3c:78:
                    27:a7:36:94:a5:4a:36:e1:53:ab:a5:44:51:76:b0:
                    b9:7c:c0:71:25:f7:93:08:62:77:25:fc:22:ca:43:
                    bc:0e:77:fd:af:8d:d2:b9:a4:c0:a6:97:a0:54:0a:
                    be:2f:78:15:77:6d:cc:53:f2:e8:0d:e4:23:58:59:
                    05:1f:b7:4f:79:99:3d:2c:c2:c0:b1:39:63:a5:ac:
                    d1:b2:6b:46:29:7c:f2:98:22:7f:cf:8c:3a:36:2d:
                    d2:04:0e:aa:4e:78:b8:01:77:d9:f3:79:4c:3f:4c:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:95:53:1B:85:75:3E:24:FB:0F:DA:F3:4E:A4:BF:D0:72:81:97
            X509v3 Authority Key Identifier:
                keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e9:84:01:37:8a:45:c8:ee:31:35:6e:3c:82:17:26:ab:34:
         59:4b:24:e9:ea:dc:ee:2a:35:d9:da:9e:a9:47:3a:29:8c:1f:
         a0:5e:a1:1f:c2:8e:bc:9d:f8:e6:75:99:17:bf:b2:51:9c:9d:
         99:2a:92:03:cf:a6:be:8d:bd:ae:ca:b7:10:a7:3a:e2:15:a8:
         01:2b:15:aa:3d:ec:dd:9b:2a:c8:ec:60:c9:97:da:91:1f:85:
         31:f0:20:88:d6:47:dc:80:cb:57:6c:fc:c9:ea:69:96:da:90:
         bd:b8:ea:cf:53:f7:44:70:da:c9:d6:94:c7:4c:50:db:06:86:
         f0:96:c4:7f:16:78:b6:67:c0:c9:28:39:62:eb:81:01:68:ef:
         0e:f9:87:d3:fd:a8:9c:7b:98:22:07:0e:ff:04:f1:41:79:70:
         e7:ea:ad:2f:55:33:4c:e0:57:cd:2d:1e:98:ee:c8:84:3d:35:
         b3:ab:d3:10:8f:93:af:30:b4:f3:62:dc:8c:95:b3:30:2b:52:
         cf:39:95:85:7c:3e:af:c3:4d:e2:db:46:81:c0:a0:79:71:17:
         46:d3:7b:40:76:c0:c2:c9:49:41:27:64:7d:11:3f:1a:a7:e9:
         8c:c9:4f:6e:42:53:66:ce:7c:b7:dd:b2:d1:fc:ee:94:e7:39:
         08:fe:3f:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJkGyCXsJTjBDQuAwCTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTA3MDc3Y2U3ZjMwZmMwNjg2ZGQwOTM0YTg5OTk3ZGYz
MWU4NGMwHhcNMjUwNDEzMTAwMTE0WhcNMjUwNDE0MTAwMTE0WjAzMTEwLwYDVQQD
EyhkODdiOTU1MzFiODU3NTNlMjRmYjBmZGFmMzRlYTRiZmQwNzI4MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryvrZaBNXHh2qxwrWAR7YSYPbyXS
Q3sFmG0A2imPmZA0An1xPaZRH47LrIo04kAHH1Q92RxBZy3f0aUj8EZifDS0I/ut
v3qkb+9csAvwcBuvhcx41MEwO7oKifodMFWRtx9KThepQY8scCzt+eKrBL5vdTzS
HQHfkNwjyM7uwcaBrSXu41LEbbXq/M/TZlK5SjJYPHgnpzaUpUo24VOrpURRdrC5
fMBxJfeTCGJ3JfwiykO8Dnf9r43SuaTAppegVAq+L3gVd23MU/LoDeQjWFkFH7dP
eZk9LMLAsTljpazRsmtGKXzymCJ/z4w6Ni3SBA6qTni4AXfZ83lMP0z3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh7lVMbhXU+JPsP2vNOpL/QcoGXMB8GA1UdIwQY
MBaAFGZQcHfOfzD8BobdCTSomZffMehMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEt
Y2NhZjQ0ZDQxNjQ4LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEtY2NhZjQ0ZDQxNjQ4
LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOmEATeK
RcjuMTVuPIIXJqs0WUsk6erc7io12dqeqUc6KYwfoF6hH8KOvJ345nWZF7+yUZyd
mSqSA8+mvo29rsq3EKc64hWoASsVqj3s3ZsqyOxgyZfakR+FMfAgiNZH3IDLV2z8
yeppltqQvbjqz1P3RHDaydaUx0xQ2waG8JbEfxZ4tmfAySg5YuuBAWjvDvmH0/2o
nHuYIgcO/wTxQXlw5+qtL1UzTOBXzS0emO7IhD01s6vTEI+TrzC082LcjJWzMCtS
zzmVhXw+r8NN4ttGgcCgeXEXRtN7QHbAwslJQSdkfRE/GqfpjMlPbkJTZs58t92y
0fzulOc5CP4/Wg==
-----END CERTIFICATE-----