Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
File:                     zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json)
Hash identifier:          Bbhke+97NsmwE6KbyeCW1ThSUnREczzSDO2brEwFx1k=
Subject key identifier:   B8:BE:1E:F5:DA:4A:96:17:B7:78:7C:B7:1A:E5:F2:6A:31:DE:43:68
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Certificate issuer:       /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial:       01962F3DDCF671F55988D738C171A399B447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: 2PiS2J9-ItXkVvnefA7xUJmmHco.roa (hash: fm4Z7vvzHDMokg8lvCFW4L0Rre6/U9BEbHKtNsNHxxs=)
                          2: 9TwneljnoP6bcfYQvihrxla0RcI.roa (hash: Zr2Ui8lpKBSfU5vJuPYuh/1cm8NiWiUfV6M604x4ojg=)
                          3: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=)
                          4: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=)
                          5: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=)
                          6: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=)
                          7: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=)
                          8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=)
                          9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=)
                          10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=)
                          11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=)
                          12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=)
                          13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=)
                          14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=)
                          15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=)
                          16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=)
                          17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=)
                          18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=)
                          19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=)
                          20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=)
                          21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=)
                          22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=)
                          23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=)
                          24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: jrqfAxOaIilap6OoHgrzGW0GkyjoDOwTGjwmuOW/8Zs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:dc:f6:71:f5:59:88:d7:38:c1:71:a3:99:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=b8be1ef5da4a9617b7787cb71ae5f26a31de4368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:e8:f7:d5:ac:06:1b:4b:ce:76:0b:68:f2:
                    0d:d1:1a:c3:84:ba:5a:57:7f:22:2d:14:27:f1:e3:
                    0c:77:65:74:7b:bb:c8:ad:2a:8f:8a:f7:5c:38:89:
                    ff:8a:e3:7d:48:4f:fa:e5:01:ff:5b:d8:49:22:58:
                    ae:16:2e:e0:f2:40:62:03:d1:4d:33:de:57:66:9e:
                    c8:10:46:40:14:20:71:31:9f:a5:ce:40:a5:f4:2b:
                    ee:68:1d:e2:53:6c:5b:c5:b0:b5:75:d7:cc:8b:12:
                    d4:42:1f:6a:ac:a9:2a:69:be:d2:a7:96:17:83:bc:
                    17:6c:d7:32:6f:dd:a5:17:48:9d:cc:3f:6d:ba:a9:
                    2b:7f:9e:6d:9b:59:da:38:15:f9:3d:30:20:17:02:
                    dd:15:fa:05:39:5f:8a:76:39:58:ad:c5:88:9d:ce:
                    1f:9d:02:86:14:f5:e5:da:63:da:90:b5:8b:a9:65:
                    98:48:78:2f:59:8a:b3:6a:a8:28:c9:88:1f:c4:dd:
                    c7:c4:9d:59:52:7e:64:2e:88:6a:10:fb:28:8c:88:
                    24:e7:5f:2b:53:1b:8d:e2:14:81:b3:51:22:05:fa:
                    34:b0:73:9c:1f:f3:6e:33:79:d8:09:5b:e6:6a:ed:
                    bd:b0:17:8f:64:68:48:d7:fc:fe:66:fb:4a:fe:02:
                    5d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:1E:F5:DA:4A:96:17:B7:78:7C:B7:1A:E5:F2:6A:31:DE:43:68
            X509v3 Authority Key Identifier:
                keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:9e:99:aa:a5:dd:c1:7c:ab:3c:3e:3f:ce:89:cf:9d:e5:
         9c:1a:97:4c:f7:73:f2:9e:50:83:19:40:48:29:50:42:08:98:
         cd:d2:64:62:1e:cc:a4:37:43:86:8f:61:f8:42:a4:c0:a9:7e:
         b8:4c:4a:53:0b:e0:73:c4:bc:6f:be:ad:19:18:f6:d6:79:20:
         4a:8d:fd:02:5e:97:1f:e2:be:05:ca:aa:30:48:02:8d:0f:59:
         ea:c0:2b:ee:69:a5:29:eb:7c:e1:e0:51:5b:f3:ff:df:fe:1d:
         07:25:c1:d5:50:24:1e:3e:dc:5d:72:19:c5:57:f5:b1:06:ef:
         7e:d6:ca:82:a2:03:6d:46:48:85:1d:0e:a4:f7:9a:72:c1:f3:
         56:41:db:48:fe:e9:f1:ea:3c:54:bb:94:56:b9:ca:5f:97:e8:
         5e:8c:90:51:00:d9:ea:ad:8d:3b:08:2e:97:0a:27:9a:ad:88:
         39:bb:5c:53:c3:ad:e3:f8:82:bb:5e:7f:b4:9e:45:7e:82:c4:
         94:ea:02:90:76:15:6b:ed:fa:bd:df:1c:f3:81:83:7e:e5:47:
         c7:a7:f3:4d:fe:50:ee:f3:44:0e:eb:a4:1a:9a:0c:09:a9:2d:
         3a:af:76:4b:0d:9d:67:ee:43:b8:1d:42:99:6f:0c:29:6c:5b:
         fd:66:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----