Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          CwRmqYTDX0PosxbDPlK62RGZVAHXFipolWnzrPAIOYI=
Subject key identifier:   7C:E0:2F:11:2B:33:BA:14:41:3C:4D:B2:27:CF:61:9F:60:07:7D:8A
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       01962F3DD5707C5EFDAD9D31A1FD8F2A88C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          0589
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: YYu9IzYhEFRsSOhCcR8dEzgyeIMT7XAPckg/kKE2wq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d5:70:7c:5e:fd:ad:9d:31:a1:fd:8f:2a:88:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=7ce02f112b33ba14413c4db227cf619f60077d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:7a:0d:7b:19:17:2c:06:7b:35:95:17:8c:
                    1e:e6:d2:74:5e:8a:f8:30:c9:69:4c:21:05:84:38:
                    5c:e6:19:51:6c:a6:bb:6f:d7:d4:34:13:6b:c4:c2:
                    eb:10:4d:a2:75:a2:67:84:56:70:36:e2:5e:88:2f:
                    59:24:4f:c0:25:09:6d:0f:63:80:6a:e2:e7:20:5a:
                    07:36:c2:4a:0c:f8:be:f3:49:5e:36:b8:b2:a3:74:
                    54:ba:9b:0e:7d:07:84:b0:f5:23:37:a6:c9:1d:dd:
                    bd:f8:5c:e5:a4:bf:11:ce:b6:24:03:9c:3e:ba:61:
                    39:7f:0b:15:fd:14:57:4d:19:0a:ec:5e:46:a4:f6:
                    0a:15:c1:da:2e:5e:fd:27:d3:ff:f7:f3:6f:b0:bf:
                    54:16:30:02:05:84:49:f3:a6:96:d1:b1:8e:88:6b:
                    8e:d6:87:88:4a:bc:15:1b:3c:1f:7a:6c:0c:cd:02:
                    6b:eb:33:ca:7b:fd:b3:28:ac:94:98:19:78:e0:18:
                    fb:d1:54:64:7f:77:cb:33:36:11:76:be:bc:bf:d7:
                    02:87:19:ab:b1:2e:ba:b8:91:60:df:6f:0b:09:92:
                    76:a4:f1:a4:a4:e0:e8:a5:de:c4:ef:c9:91:7f:e9:
                    44:32:62:d6:ed:e5:c2:18:96:25:27:22:62:2b:92:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E0:2F:11:2B:33:BA:14:41:3C:4D:B2:27:CF:61:9F:60:07:7D:8A
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f5:64:4c:18:57:b7:4b:ed:2f:d3:d6:1d:34:32:5b:b8:ea:
         ef:21:4e:18:be:cc:13:e1:2d:5e:77:87:94:27:d0:7f:b6:a8:
         41:62:7c:0f:b6:dd:09:60:17:2c:e1:54:38:da:f4:c1:11:79:
         97:c5:7b:67:ce:df:81:f7:59:87:d9:fe:11:63:60:37:b9:11:
         ca:fa:72:ed:a7:39:30:4c:f8:59:ac:ae:03:93:93:5d:ab:a8:
         f0:b2:8f:9e:d9:cd:9d:14:aa:b7:4f:88:da:00:6d:b7:68:60:
         fb:25:ac:ef:b0:b5:62:f2:bf:f9:bd:8f:2a:63:94:f4:f9:82:
         32:ae:26:98:44:94:1f:86:fc:ff:b5:ed:da:d0:56:bc:35:31:
         5e:5f:b7:c7:b7:bd:49:51:76:4c:ea:99:e1:36:1d:4f:95:f5:
         e8:e5:5d:54:5c:64:09:d9:86:08:b6:22:86:e5:69:ff:46:8f:
         2d:0b:f4:ef:2d:c5:f5:f4:08:c7:24:4c:02:fe:3c:60:eb:e1:
         03:ac:c6:20:41:52:c7:23:24:f0:80:fe:7d:83:23:9a:96:fd:
         84:53:8f:80:86:ed:4f:ed:96:80:74:9b:05:7f:85:bc:a8:d9:
         70:86:3f:f5:9a:ae:8f:03:7d:8f:d9:22:80:cc:9a:a6:c6:ed:
         af:1a:66:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdVwfF79rZ0xof2PKojEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl
NGRmYWYwHhcNMjUwNDEzMTMwMTQzWhcNMjUwNDE0MTMwMTQzWjAzMTEwLwYDVQQD
Eyg3Y2UwMmYxMTJiMzNiYTE0NDEzYzRkYjIyN2NmNjE5ZjYwMDc3ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWx6DXsZFywGezWVF4we5tJ0Xor4
MMlpTCEFhDhc5hlRbKa7b9fUNBNrxMLrEE2idaJnhFZwNuJeiC9ZJE/AJQltD2OA
auLnIFoHNsJKDPi+80leNriyo3RUupsOfQeEsPUjN6bJHd29+FzlpL8RzrYkA5w+
umE5fwsV/RRXTRkK7F5GpPYKFcHaLl79J9P/9/NvsL9UFjACBYRJ86aW0bGOiGuO
1oeISrwVGzwfemwMzQJr6zPKe/2zKKyUmBl44Bj70VRkf3fLMzYRdr68v9cChxmr
sS66uJFg328LCZJ2pPGkpODopd7E78mRf+lEMmLW7eXCGJYlJyJiK5LYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzgLxErM7oUQTxNsifPYZ9gB32KMB8GA1UdIwQY
MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt
Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1
LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/VkTBhX
t0vtL9PWHTQyW7jq7yFOGL7ME+EtXneHlCfQf7aoQWJ8D7bdCWAXLOFUONr0wRF5
l8V7Z87fgfdZh9n+EWNgN7kRyvpy7ac5MEz4WayuA5OTXauo8LKPntnNnRSqt0+I
2gBtt2hg+yWs77C1YvK/+b2PKmOU9PmCMq4mmESUH4b8/7Xt2tBWvDUxXl+3x7e9
SVF2TOqZ4TYdT5X16OVdVFxkCdmGCLYihuVp/0aPLQv07y3F9fQIxyRMAv48YOvh
A6zGIEFSxyMk8ID+fYMjmpb9hFOPgIbtT+2WgHSbBX+FvKjZcIY/9ZqujwN9j9ki
gMyapsbtrxpm7Q==
-----END CERTIFICATE-----