Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          phE2DKsEHqanZj8Xwhoq7VvZpoAvX+shz6aQQgRTWSE=
Subject key identifier:   CC:00:7D:E8:3D:AB:99:DA:E0:7E:F7:FA:B7:CB:A5:E3:3E:04:63:63
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       01962DF42B97AA8E9978F04A8249AC30E7C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 4sQRqg1wVxHplQEORYtm00xrQVY.roa (hash: J3w9Mg25j1wb94v36vArE3YS5FJrYK6v8WsTSNDodH0=)
                          2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
                          3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: AaNj9p70+65iktYoG6QBV0Kx3Ce4rvL7YFwgfiTGvrY=)
                          4: v0Pp_40_Je3JS37_jHVbjgvZoEQ.roa (hash: aXXZgq4pgbYYIdcsGFx9uEujPB0OaP/SkcsCiqXmM3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:97:aa:8e:99:78:f0:4a:82:49:ac:30:e7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=cc007de83dab99dae07ef7fab7cba5e33e046363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:36:06:17:7c:e3:ab:78:3d:a3:ea:17:ee:
                    2e:6d:ad:1d:f6:86:a1:a7:45:5b:bc:f8:61:07:f8:
                    db:dd:5b:2f:95:25:d2:d9:2e:ce:74:59:3d:37:e3:
                    44:12:3c:3a:dd:97:64:e3:08:d5:96:17:8e:83:b8:
                    13:48:9c:7a:cd:a7:b4:7e:6b:73:76:1c:0b:cf:e5:
                    7c:5b:87:d0:c4:3c:48:48:9e:ab:28:d6:cf:6f:d8:
                    7c:4e:9a:44:be:79:38:75:0f:0a:f8:67:ed:ca:4b:
                    6d:67:55:4e:0d:0c:68:d3:da:30:00:ce:9d:66:49:
                    74:39:8e:60:be:a1:e6:e6:91:c3:f7:26:7d:76:ce:
                    8b:82:6c:f2:70:49:7d:33:67:93:6d:ba:f6:7a:b1:
                    40:72:ff:b4:63:5f:f2:66:b9:a5:95:a9:bc:d7:b2:
                    cd:a1:b7:fc:d4:c8:34:15:c0:cf:c6:f1:ac:0c:46:
                    8b:f2:5d:a6:02:06:98:d9:9d:34:7b:ca:15:d9:a8:
                    a5:f8:90:b9:e4:c1:61:b4:8e:f8:a9:cd:0e:96:c0:
                    8f:fb:06:80:ee:30:4a:37:eb:b9:e6:2a:a8:3c:a7:
                    31:8a:9a:47:dd:df:77:a2:2a:ec:f9:5f:74:3b:97:
                    20:7a:89:87:8e:e3:00:6c:7c:24:8d:62:ba:c1:0c:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:7D:E8:3D:AB:99:DA:E0:7E:F7:FA:B7:CB:A5:E3:3E:04:63:63
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:74:5c:9a:ea:aa:e7:9a:92:a4:9d:bd:b2:88:fb:fe:03:
         c2:26:ca:a6:a6:14:c6:2d:d6:ca:5e:01:53:c5:b2:44:c0:b8:
         d8:03:bc:2e:56:d4:70:54:08:4e:5c:24:4b:44:86:f2:c9:a1:
         bd:1c:69:97:46:ec:d7:ce:20:d7:d9:ac:77:bd:0a:a6:db:16:
         88:c6:ba:40:4f:8a:5a:bf:2e:b9:81:a5:01:89:8b:95:50:93:
         76:7d:56:ae:21:af:95:1c:5f:c4:80:66:1f:18:06:97:ed:fb:
         c9:01:dc:8b:9c:25:e9:cf:8c:c2:d9:96:d6:5c:bd:12:41:07:
         ec:15:37:81:52:e4:d6:4b:5b:26:1f:8c:71:5d:ba:e4:f5:1c:
         e4:a7:68:8f:c6:d7:51:7a:24:a8:f7:24:ec:3d:54:7d:b9:9f:
         e5:9f:d5:7f:b9:db:82:23:a2:ba:4c:4b:8c:a7:50:aa:8a:b2:
         99:ad:d5:fe:02:4f:5c:02:0d:02:fb:ef:f0:c5:4b:ff:ea:5f:
         ba:e0:33:08:3d:47:b7:a8:18:0f:ff:a3:bb:4c:7d:ef:19:28:
         a5:71:56:f5:27:52:3c:b8:73:34:5a:a8:6d:e1:51:4f:2a:32:
         9d:3f:32:3b:4c:18:b9:0c:96:2e:e3:34:90:7c:82:9b:e6:93:
         24:b3:9c:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CuXqo6ZePBKgkmsMOfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0
YjIwYjMwHhcNMjUwNDEzMDcwMTM4WhcNMjUwNDE0MDcwMTM4WjAzMTEwLwYDVQQD
EyhjYzAwN2RlODNkYWI5OWRhZTA3ZWY3ZmFiN2NiYTVlMzNlMDQ2MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+k2Bhd846t4PaPqF+4uba0d9oah
p0VbvPhhB/jb3VsvlSXS2S7OdFk9N+NEEjw63Zdk4wjVlheOg7gTSJx6zae0fmtz
dhwLz+V8W4fQxDxISJ6rKNbPb9h8TppEvnk4dQ8K+GftykttZ1VODQxo09owAM6d
Zkl0OY5gvqHm5pHD9yZ9ds6LgmzycEl9M2eTbbr2erFAcv+0Y1/yZrmllam817LN
obf81Mg0FcDPxvGsDEaL8l2mAgaY2Z00e8oV2ail+JC55MFhtI74qc0OlsCP+waA
7jBKN+u55iqoPKcxippH3d93oirs+V90O5cgeomHjuMAbHwkjWK6wQxjWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwAfeg9q5na4H73+rfLpeM+BGNjMB8GA1UdIwQY
MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt
YTc3NmZlZGU5OTA1LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1
LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLl0XJrq
queakqSdvbKI+/4DwibKpqYUxi3Wyl4BU8WyRMC42AO8LlbUcFQITlwkS0SG8smh
vRxpl0bs184g19msd70KptsWiMa6QE+KWr8uuYGlAYmLlVCTdn1WriGvlRxfxIBm
HxgGl+37yQHci5wl6c+MwtmW1ly9EkEH7BU3gVLk1ktbJh+McV265PUc5Kdoj8bX
UXokqPck7D1Ufbmf5Z/Vf7nbgiOiukxLjKdQqoqyma3V/gJPXAINAvvv8MVL/+pf
uuAzCD1Ht6gYD/+ju0x97xkopXFW9SdSPLhzNFqobeFRTyoynT8yO0wYuQyWLuM0
kHyCm+aTJLOcqw==
-----END CERTIFICATE-----