Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File:                     Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier:          ztLw/IXl+G4593Hqnon/BtaDcnQLKTHhLrNlzhA5tJI=
Subject key identifier:   CC:A5:B1:03:EE:55:AC:CC:F3:08:CD:63:62:EC:5F:D0:D4:A2:05:59
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer:       /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial:       01962E9930BE67A3F719629504AAD31B1333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
                          2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: TFptKa3ogFGcJo2MZ/oVj/c7fASs+swycBDnKHdYoRM=)
                          3: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
                          4: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (hash: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:be:67:a3:f7:19:62:95:04:aa:d3:1b:13:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=cca5b103ee55acccf308cd6362ec5fd0d4a20559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:96:af:86:7e:29:08:12:14:af:72:4b:d2:da:
                    3a:a6:49:d5:f1:82:be:7a:01:22:65:db:6b:0d:d9:
                    f7:8f:d3:b9:4a:cd:d2:ce:ca:99:bc:43:71:f0:ce:
                    78:67:44:82:2c:e3:c2:12:66:49:f3:fa:6f:6a:89:
                    96:5a:b2:c8:f4:1d:f6:3c:53:91:17:b2:fc:dd:cd:
                    ec:a0:bd:db:27:66:9d:21:95:66:6e:a2:0e:da:9e:
                    8a:83:89:cf:98:80:96:a6:54:8d:d6:87:2f:99:cf:
                    6f:39:eb:27:e6:95:47:bb:22:45:48:70:5d:2b:d6:
                    1a:0b:2c:2c:23:40:7b:5d:e3:43:89:a8:ef:da:df:
                    69:78:70:96:d5:41:11:08:1b:2d:3e:ac:b4:fd:12:
                    c3:f0:d5:25:63:70:75:31:9a:09:77:07:58:6b:12:
                    c7:b4:18:a0:50:06:fc:09:3c:bd:de:f6:4f:6d:a8:
                    d3:9b:3c:0c:4e:2d:64:51:12:dd:64:4b:b8:9d:13:
                    67:dd:60:c3:7f:db:68:63:6f:ea:9e:19:47:14:90:
                    03:b4:e4:d1:20:24:b9:5a:0b:be:c3:6d:3a:30:33:
                    79:2b:3b:e6:b7:4b:3b:16:43:b6:eb:39:c7:7c:39:
                    dc:16:e1:ae:24:9d:4d:08:0c:6e:57:a4:16:e2:1b:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:B1:03:EE:55:AC:CC:F3:08:CD:63:62:EC:5F:D0:D4:A2:05:59
            X509v3 Authority Key Identifier:
                keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c3:69:79:07:52:c4:35:f1:76:18:fc:ab:83:4d:bb:06:97:
         36:ae:f4:23:80:97:3a:d1:50:15:b3:09:1d:6e:42:b8:22:05:
         08:17:ea:af:f0:f1:a8:19:25:ed:a9:92:cb:b9:f3:3f:c2:53:
         24:5d:69:e0:6e:62:e3:60:28:a3:cf:66:ed:d1:1a:c7:b7:76:
         f1:d9:45:c8:c1:c6:df:ec:ec:ea:d5:ff:bf:f6:e3:e1:68:5f:
         b7:6b:79:03:06:80:ce:59:ab:99:3e:3e:bf:a9:30:39:8f:96:
         5b:c9:7b:e9:ea:68:39:2f:7e:80:1f:cb:c9:dd:01:45:9d:ef:
         2a:69:2a:b1:c9:1e:42:17:e8:9f:03:73:2c:16:86:0b:8d:6e:
         1a:3e:e6:f5:c5:14:df:b6:da:d3:75:0e:22:51:68:cf:24:2a:
         d0:89:42:44:cb:05:15:a6:98:ec:ec:87:ad:f6:82:a6:2f:b1:
         4f:ba:29:ef:8b:e5:d6:fb:2d:9c:91:ec:e3:fe:5b:09:bb:42:
         11:8d:7c:09:2b:18:82:0b:a8:f4:78:23:5b:4c:be:5e:22:09:
         cb:71:5e:25:96:2a:72:29:e9:d5:01:fb:58:e7:8a:15:18:09:
         54:58:46:7c:4a:7a:50:b8:9e:33:dc:a8:4b:90:28:3d:5c:b7:
         6d:ed:d1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTC+Z6P3GWKVBKrTGxMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0
MDVkNGUwHhcNMjUwNDEzMTAwMTUzWhcNMjUwNDE0MTAwMTUzWjAzMTEwLwYDVQQD
EyhjY2E1YjEwM2VlNTVhY2NjZjMwOGNkNjM2MmVjNWZkMGQ0YTIwNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85avhn4pCBIUr3JL0to6pknV8YK+
egEiZdtrDdn3j9O5Ss3SzsqZvENx8M54Z0SCLOPCEmZJ8/pvaomWWrLI9B32PFOR
F7L83c3soL3bJ2adIZVmbqIO2p6Kg4nPmICWplSN1ocvmc9vOesn5pVHuyJFSHBd
K9YaCywsI0B7XeNDiajv2t9peHCW1UERCBstPqy0/RLD8NUlY3B1MZoJdwdYaxLH
tBigUAb8CTy93vZPbajTmzwMTi1kURLdZEu4nRNn3WDDf9toY2/qnhlHFJADtOTR
ICS5Wgu+w206MDN5Kzvmt0s7FkO26znHfDncFuGuJJ1NCAxuV6QW4ht6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMylsQPuVazM8wjNY2LsX9DUogVZMB8GA1UdIwQY
MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt
NGMxOWVjNWI1N2NhLzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh
LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMNpeQdS
xDXxdhj8q4NNuwaXNq70I4CXOtFQFbMJHW5CuCIFCBfqr/DxqBkl7amSy7nzP8JT
JF1p4G5i42Aoo89m7dEax7d28dlFyMHG3+zs6tX/v/bj4Whft2t5AwaAzlmrmT4+
v6kwOY+WW8l76epoOS9+gB/Lyd0BRZ3vKmkqsckeQhfonwNzLBaGC41uGj7m9cUU
37ba03UOIlFozyQq0IlCRMsFFaaY7OyHrfaCpi+xT7op74vl1vstnJHs4/5bCbtC
EY18CSsYgguo9HgjW0y+XiIJy3FeJZYqcinp1QH7WOeKFRgJVFhGfEp6ULieM9yo
S5AoPVy3be3Rnw==
-----END CERTIFICATE-----