Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft
File:                     rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft (raw, json)
Hash identifier:          U7FvrefPZ7mqwu7ok/TVc5BNlqey+LdCcdgJ24HWPlM=
Subject key identifier:   14:B8:FC:C7:57:10:14:76:0A:F8:37:14:5C:08:E0:40:5E:BF:03:3F
Authority key identifier: AF:34:65:43:76:69:CE:58:62:61:A0:66:CC:4A:D1:EA:46:4E:B6:63
Certificate issuer:       /CN=af3465437669ce586261a066cc4ad1ea464eb663
Certificate serial:       01962E98D940E5E28601A8C0D8F956D45F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft
Manifest number:          0D99
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: rzRlQ3ZpzlhiYaBmzErR6kZOtmM.crl (hash: XaEiOLaTJet55Cx2C6++zsDb4kRLo4d6pISDVSdIi6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:40:e5:e2:86:01:a8:c0:d8:f9:56:d4:5f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af3465437669ce586261a066cc4ad1ea464eb663
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=14b8fcc7571014760af837145c08e0405ebf033f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:bd:98:22:76:52:98:f5:14:79:af:e0:3a:
                    c0:f1:cc:a6:5d:aa:b3:96:42:37:5a:15:fb:a0:7a:
                    d3:c3:bb:ad:e7:38:c1:76:43:b3:4a:21:8d:f1:fa:
                    74:d9:1a:45:be:35:f6:88:4c:fb:0f:eb:62:0e:58:
                    90:31:82:f0:14:9a:6d:7a:68:37:c2:56:2d:7c:a0:
                    59:a0:6d:7d:26:7c:c0:8b:a6:48:46:04:4a:cc:50:
                    30:27:80:5b:bb:6c:52:90:20:51:af:86:5e:8a:cf:
                    59:0b:72:2f:6c:61:3d:2a:a5:4b:15:10:4d:c2:ba:
                    42:2b:5f:6f:e7:a5:5f:a2:27:8c:e7:e9:f3:f3:c1:
                    25:f7:48:98:8c:9c:25:15:36:be:34:86:81:e3:a6:
                    60:8e:01:9d:2f:2c:b0:30:b9:ad:cc:12:f9:d6:14:
                    90:65:7b:d1:2f:ac:13:dc:de:42:36:ed:35:a0:e3:
                    ea:4e:98:93:56:46:e0:70:a8:de:45:59:88:81:94:
                    31:02:0d:fb:1e:f3:3c:5c:77:ab:ff:06:0e:91:44:
                    67:ea:64:fd:34:8c:ea:e4:ba:f1:c3:22:2d:8a:ff:
                    a5:fa:a8:c3:11:76:60:31:d1:1d:22:6d:a8:e5:56:
                    ad:0b:f5:4c:2e:93:fc:2f:cd:03:8f:1a:c9:d4:c0:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B8:FC:C7:57:10:14:76:0A:F8:37:14:5C:08:E0:40:5E:BF:03:3F
            X509v3 Authority Key Identifier:
                keyid:AF:34:65:43:76:69:CE:58:62:61:A0:66:CC:4A:D1:EA:46:4E:B6:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:63:be:fa:40:41:ef:b0:0c:9d:f5:f2:1e:6b:d3:88:19:
         14:1b:ad:56:0f:8f:cd:ce:f6:66:53:68:9c:64:ec:d7:2f:7f:
         30:d1:e5:76:ee:00:7d:b1:b2:a9:82:e3:af:ae:a5:fd:72:3c:
         d5:37:33:fb:6e:bb:90:9b:39:64:c8:51:35:ff:66:2b:05:2b:
         7e:f3:18:36:0a:f8:34:07:1e:29:b0:62:6f:f0:ba:00:63:ee:
         8e:02:fd:1c:56:2d:40:6a:cd:05:ed:82:3e:0f:b2:04:cb:ec:
         0e:fc:78:c4:f8:26:cf:24:78:bc:61:cc:cc:16:56:92:0d:e7:
         9f:47:47:4c:f5:f7:00:ca:42:e1:6e:01:26:2d:cc:b6:74:4b:
         2a:ab:5a:78:f7:b8:30:59:ac:0b:98:e2:5f:74:1a:7e:46:aa:
         89:4f:95:05:c3:4d:07:7b:fb:29:2f:97:3a:96:39:1b:67:75:
         ce:32:b1:55:17:e5:04:a9:70:1d:36:7c:70:cf:14:29:e9:f4:
         92:0c:13:64:bb:7b:de:57:f6:e0:6b:62:ed:78:bd:54:3c:30:
         db:89:ef:8e:1d:ca:b4:fd:bc:65:2e:bf:62:2e:0e:f0:d0:97:
         6e:2e:b6:8e:b6:f7:06:ef:cb:8e:ff:cb:45:47:3d:1c:7a:a8:
         1e:bc:31:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNlA5eKGAajA2PlW1F9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMzQ2NTQzNzY2OWNlNTg2MjYxYTA2NmNjNGFkMWVhNDY0
ZWI2NjMwHhcNMjUwNDEzMTAwMTMxWhcNMjUwNDE0MTAwMTMxWjAzMTEwLwYDVQQD
EygxNGI4ZmNjNzU3MTAxNDc2MGFmODM3MTQ1YzA4ZTA0MDVlYmYwMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpW9mCJ2Upj1FHmv4DrA8cymXaqz
lkI3WhX7oHrTw7ut5zjBdkOzSiGN8fp02RpFvjX2iEz7D+tiDliQMYLwFJptemg3
wlYtfKBZoG19JnzAi6ZIRgRKzFAwJ4Bbu2xSkCBRr4Zeis9ZC3IvbGE9KqVLFRBN
wrpCK19v56VfoieM5+nz88El90iYjJwlFTa+NIaB46ZgjgGdLyywMLmtzBL51hSQ
ZXvRL6wT3N5CNu01oOPqTpiTVkbgcKjeRVmIgZQxAg37HvM8XHer/wYOkURn6mT9
NIzq5LrxwyItiv+l+qjDEXZgMdEdIm2o5VatC/VMLpP8L80DjxrJ1MAoPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS4/MdXEBR2Cvg3FFwI4EBevwM/MB8GA1UdIwQY
MBaAFK80ZUN2ac5YYmGgZsxK0epGTrZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnpSbFEzWnB6bGhpWWFCbXpFclI2a1pPdG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODYxYmEtNGQxYy00OTNjLWE5MGQt
NjBjZjY2MGFkNTMzLzEvcnpSbFEzWnB6bGhpWWFCbXpFclI2a1pPdG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODYxYmEtNGQxYy00OTNjLWE5MGQtNjBjZjY2MGFkNTMz
LzEvcnpSbFEzWnB6bGhpWWFCbXpFclI2a1pPdG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8djvvpA
Qe+wDJ318h5r04gZFButVg+Pzc72ZlNonGTs1y9/MNHldu4AfbGyqYLjr66l/XI8
1Tcz+267kJs5ZMhRNf9mKwUrfvMYNgr4NAceKbBib/C6AGPujgL9HFYtQGrNBe2C
Pg+yBMvsDvx4xPgmzyR4vGHMzBZWkg3nn0dHTPX3AMpC4W4BJi3MtnRLKqtaePe4
MFmsC5jiX3QafkaqiU+VBcNNB3v7KS+XOpY5G2d1zjKxVRflBKlwHTZ8cM8UKen0
kgwTZLt73lf24Gti7Xi9VDww24nvjh3KtP28ZS6/Yi4O8NCXbi62jrb3Bu/Ljv/L
RUc9HHqoHrwxVQ==
-----END CERTIFICATE-----