Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          EMRdtYBYYSbl5Wqf6qKxq5agCSfhNOzGUPWZ6b2F4As=
Subject key identifier:   67:5D:DA:7A:3D:65:3C:BB:CF:56:3D:A6:78:A7:FF:82:72:E0:62:7B
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       01962E9965419DF786892E2AE74396CFC2E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: cmBEU4oLtlRUja3XOJous19dWvefP0+JjLUzVsiGrsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:65:41:9d:f7:86:89:2e:2a:e7:43:96:cf:c2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=675dda7a3d653cbbcf563da678a7ff8272e0627b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:97:69:ed:1f:bd:2a:f0:b8:3a:cf:a6:0c:
                    22:d0:5f:39:f5:3d:02:51:6c:37:68:7f:ac:fb:64:
                    7e:bc:bd:3c:af:ef:25:d0:6e:90:cf:1c:53:c9:d5:
                    fc:e9:72:58:ec:fb:71:5d:65:03:40:e6:0f:ab:d4:
                    eb:89:dd:3d:5c:38:22:73:08:cf:ce:2e:fe:71:ef:
                    41:57:ea:cb:4a:44:c6:88:a0:a2:4a:88:3a:3e:3d:
                    dc:fd:04:34:e9:af:4d:9b:d1:7b:b8:7d:50:16:75:
                    3f:97:66:99:d8:03:47:59:2d:d2:ac:23:ec:82:1f:
                    9b:cf:c2:28:7d:6a:09:54:a7:b2:5c:47:98:6f:af:
                    03:74:6b:f8:86:da:fd:9f:16:92:99:59:1f:f2:51:
                    85:93:8c:43:bd:c0:04:62:4d:81:39:20:ad:52:36:
                    4b:a3:7b:7e:7e:5c:be:52:c8:d2:37:8e:98:7e:9b:
                    0a:1c:72:a4:7f:2c:6a:3f:6f:df:a4:bc:9d:36:16:
                    e6:6b:86:7f:c4:57:d9:69:bb:06:26:5d:dc:44:39:
                    83:da:9c:e2:9f:22:71:ae:e3:db:8f:9e:54:e9:ad:
                    ef:1e:42:45:29:59:d9:67:d6:b7:8f:21:4c:af:59:
                    67:b9:d3:81:68:4f:5d:22:b3:1e:f3:ac:76:09:75:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5D:DA:7A:3D:65:3C:BB:CF:56:3D:A6:78:A7:FF:82:72:E0:62:7B
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:79:4a:db:54:a9:a4:75:ee:f9:26:62:f1:6a:f7:a1:cd:cf:
         45:c8:d0:9b:c7:de:e2:cb:b7:f0:db:f7:97:14:11:c9:6b:10:
         d1:16:07:2c:37:71:24:ab:53:3f:c4:c7:47:29:10:c3:a5:3d:
         70:1a:bc:45:10:00:72:16:f1:34:6e:90:80:a5:04:24:a8:d4:
         39:8d:3a:31:01:77:bd:c2:8f:e6:28:04:5d:98:ef:c3:8b:05:
         9e:38:b0:6d:c8:ac:4b:8f:27:c5:4b:17:ff:c7:f8:0f:01:73:
         9e:6b:15:b5:dc:a4:a6:d7:50:04:cc:a7:eb:91:7e:e1:62:cb:
         e8:99:fb:1f:4c:ee:cc:87:ab:52:e2:5e:79:ba:dc:97:09:c0:
         89:de:d4:65:fe:c1:f0:1b:92:5e:2e:49:75:27:14:7f:6e:c3:
         85:8c:6c:36:6a:70:be:77:44:cd:e9:bd:df:25:91:aa:03:ba:
         34:0a:c8:62:da:5d:96:59:fc:f2:04:a8:de:64:c1:e2:79:a9:
         23:58:7d:4d:bb:16:a0:f6:a2:04:bd:bd:e8:ad:9f:69:75:e4:
         bd:4b:a5:6a:0f:69:70:a2:80:55:5a:a9:91:4b:fd:05:be:35:
         d5:13:e2:97:28:63:51:66:71:28:f8:fd:65:5f:fc:93:26:86:
         94:fb:23:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWVBnfeGiS4q50OWz8LoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjUwNDEzMTAwMjA2WhcNMjUwNDE0MTAwMjA2WjAzMTEwLwYDVQQD
Eyg2NzVkZGE3YTNkNjUzY2JiY2Y1NjNkYTY3OGE3ZmY4MjcyZTA2MjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDOXae0fvSrwuDrPpgwi0F859T0C
UWw3aH+s+2R+vL08r+8l0G6QzxxTydX86XJY7PtxXWUDQOYPq9Trid09XDgicwjP
zi7+ce9BV+rLSkTGiKCiSog6Pj3c/QQ06a9Nm9F7uH1QFnU/l2aZ2ANHWS3SrCPs
gh+bz8IofWoJVKeyXEeYb68DdGv4htr9nxaSmVkf8lGFk4xDvcAEYk2BOSCtUjZL
o3t+fly+UsjSN46YfpsKHHKkfyxqP2/fpLydNhbma4Z/xFfZabsGJl3cRDmD2pzi
nyJxruPbj55U6a3vHkJFKVnZZ9a3jyFMr1lnudOBaE9dIrMe86x2CXXt7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdd2no9ZTy7z1Y9pnin/4Jy4GJ7MB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXlK21Sp
pHXu+SZi8Wr3oc3PRcjQm8fe4su38Nv3lxQRyWsQ0RYHLDdxJKtTP8THRykQw6U9
cBq8RRAAchbxNG6QgKUEJKjUOY06MQF3vcKP5igEXZjvw4sFnjiwbcisS48nxUsX
/8f4DwFznmsVtdykptdQBMyn65F+4WLL6Jn7H0zuzIerUuJeebrclwnAid7UZf7B
8BuSXi5JdScUf27DhYxsNmpwvndEzem93yWRqgO6NArIYtpdlln88gSo3mTB4nmp
I1h9TbsWoPaiBL296K2faXXkvUulag9pcKKAVVqpkUv9Bb411RPilyhjUWZxKPj9
ZV/8kyaGlPsj3A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net