Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          YTy48rxpKRJCgf2sbLbAZhjjYSoZxSrq6KQYNtKBjc0=
Subject key identifier:   4C:EA:6F:5E:E2:37:F1:70:3A:80:D4:8C:74:D7:76:FD:00:54:09:98
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       01962F74F0496A967E1F19D5DF594C49DD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: 6D6bkPeLEJ4mZeMuogwgQ7I+osBYnEzulAd6xrj+mpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f0:49:6a:96:7e:1f:19:d5:df:59:4c:49:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=4cea6f5ee237f1703a80d48c74d776fd00540998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:cb:9b:c8:12:43:e5:d0:ba:7e:18:43:71:
                    23:bf:82:c6:7a:55:f0:1b:57:29:74:62:42:79:70:
                    e9:98:63:71:01:39:d5:c3:f4:6b:59:38:f3:b8:db:
                    74:26:ca:8d:66:57:63:6a:09:34:19:a7:2d:e1:c6:
                    b7:4f:ce:70:95:15:c3:bb:39:c4:b1:5f:82:8c:f0:
                    83:a5:ec:54:ff:dd:36:1e:49:b3:81:e3:0c:ad:af:
                    96:c5:cf:bb:c4:c2:d6:63:77:5b:4f:c4:61:be:0c:
                    9e:8a:ac:a1:a9:f0:68:1d:14:fb:97:b7:05:11:ec:
                    36:0a:13:b3:42:12:a3:ae:6a:1f:b5:d6:45:fb:34:
                    77:23:2f:fb:4d:60:70:54:c7:91:57:c5:11:5d:56:
                    2d:d6:2d:d4:08:a3:ca:be:86:7f:c5:f0:b6:c9:47:
                    2e:26:55:10:6e:fc:09:66:30:0a:61:9f:d2:c3:69:
                    dd:19:7f:6a:65:d3:79:2c:93:b0:de:82:35:e3:f1:
                    1e:93:95:7a:63:64:dc:9d:a6:82:43:12:0b:7d:6d:
                    8d:4f:d8:9f:22:3e:d3:01:1a:c7:ea:27:c1:b8:3f:
                    99:af:9e:6d:7a:46:c6:28:1f:e7:bb:c5:f4:c7:45:
                    62:83:df:c3:e2:06:50:ec:e2:75:5e:6e:e7:fc:e6:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:6F:5E:E2:37:F1:70:3A:80:D4:8C:74:D7:76:FD:00:54:09:98
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e5:63:a4:08:ea:12:ee:01:86:a0:47:02:21:36:c9:35:3b:
         87:24:8d:84:0f:4a:c5:f1:41:7e:e2:c6:cc:e9:bb:3e:0d:74:
         5b:a1:8b:11:5f:ae:17:c1:9e:30:4c:0a:12:d8:c5:01:d2:9f:
         c4:92:62:bc:83:7b:8c:f4:0e:8f:5b:9d:c3:8a:2b:f0:a4:b2:
         2c:38:07:94:e9:18:ec:f3:4e:ca:62:0b:1c:a6:b4:71:d7:4e:
         cf:5a:a7:7b:1b:02:0b:4f:36:9c:3a:6e:b1:e2:73:7b:12:3d:
         c0:85:1b:8a:97:97:fb:9b:46:d7:ad:ff:b7:25:c3:fa:b7:33:
         71:16:1d:40:24:3e:34:8a:db:16:f9:72:52:01:0b:a0:a8:8e:
         aa:0e:56:b8:94:bc:ff:fa:d4:1d:6d:24:f8:9d:0f:7c:6a:6b:
         3b:a4:0e:16:13:74:da:1a:04:17:0b:a4:aa:d8:4b:bd:ef:5a:
         38:82:7a:62:1e:cd:1f:85:4f:65:bc:9a:93:68:5b:e9:6e:dc:
         4a:00:82:0f:c0:50:5c:91:97:30:83:4b:c5:67:ea:e0:23:ef:
         42:14:55:d1:56:0c:40:50:e2:40:24:c6:6d:21:72:ca:11:e4:
         d1:2f:29:18:0e:e0:00:84:ce:44:b1:b0:7c:44:3e:b1:c3:2c:
         a7:ee:ec:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdPBJapZ+HxnV31lMSd02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNhMWY5MDUxOGQ0MjUzZjMyNTk0N2Q3ZjMyZGI3ODcy
MTY0N2MwHhcNMjUwNDEzMTQwMTU0WhcNMjUwNDE0MTQwMTU0WjAzMTEwLwYDVQQD
Eyg0Y2VhNmY1ZWUyMzdmMTcwM2E4MGQ0OGM3NGQ3NzZmZDAwNTQwOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfLm8gSQ+XQun4YQ3Ejv4LGelXw
G1cpdGJCeXDpmGNxATnVw/RrWTjzuNt0JsqNZldjagk0Gact4ca3T85wlRXDuznE
sV+CjPCDpexU/902HkmzgeMMra+Wxc+7xMLWY3dbT8RhvgyeiqyhqfBoHRT7l7cF
Eew2ChOzQhKjrmoftdZF+zR3Iy/7TWBwVMeRV8URXVYt1i3UCKPKvoZ/xfC2yUcu
JlUQbvwJZjAKYZ/Sw2ndGX9qZdN5LJOw3oI14/Eek5V6Y2TcnaaCQxILfW2NT9if
Ij7TARrH6ifBuD+Zr55tekbGKB/nu8X0x0Vig9/D4gZQ7OJ1Xm7n/Obu6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzqb17iN/FwOoDUjHTXdv0AVAmYMB8GA1UdIwQY
MBaAFGRMofkFGNQlPzJZR9fzLbeHIWR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQt
YjkwZDk3NGU1ZmI1LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQtYjkwZDk3NGU1ZmI1
LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOVjpAjq
Eu4BhqBHAiE2yTU7hySNhA9KxfFBfuLGzOm7Pg10W6GLEV+uF8GeMEwKEtjFAdKf
xJJivIN7jPQOj1udw4or8KSyLDgHlOkY7PNOymILHKa0cddOz1qnexsCC082nDpu
seJzexI9wIUbipeX+5tG163/tyXD+rczcRYdQCQ+NIrbFvlyUgELoKiOqg5WuJS8
//rUHW0k+J0PfGprO6QOFhN02hoEFwukqthLve9aOIJ6Yh7NH4VPZbyak2hb6W7c
SgCCD8BQXJGXMINLxWfq4CPvQhRV0VYMQFDiQCTGbSFyyhHk0S8pGA7gAITORLGw
fEQ+scMsp+7sqA==
-----END CERTIFICATE-----