Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File:                     zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier:          3TQpsxHx19gyVPdp3FBuTJNjtxTGDLgsOdiHurI4l0M=
Subject key identifier:   CE:27:53:C6:B5:38:FE:F2:8B:F4:70:A0:B8:83:12:50:26:04:88:0F
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer:       /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial:       01962E2ADE4D339B159B38DBD17EADA6D597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number:          11F9
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
                          2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: rupO/2l8gVf/R1AihLdQcBc5BININeRmG8snGKRf0/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:de:4d:33:9b:15:9b:38:db:d1:7e:ad:a6:d5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=ce2753c6b538fef28bf470a0b88312502604880f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:af:d7:df:93:f5:5f:49:f3:8d:0a:e3:fa:
                    0b:43:e2:cd:a2:b1:f1:2b:18:58:b0:63:cb:ff:b2:
                    ee:c4:b5:5b:0a:8b:59:b3:a0:9e:e2:17:4b:5b:aa:
                    dc:21:b3:96:be:de:c0:56:ee:05:a8:cd:b2:2a:ea:
                    79:89:62:b6:c0:8f:cb:44:60:90:2f:c9:3c:7e:ae:
                    ed:0c:52:31:7b:ff:65:1d:4a:b6:33:4d:bb:af:a8:
                    c3:b9:01:c6:60:57:09:49:57:e1:76:27:c0:4e:9c:
                    d4:42:b8:85:2f:41:d1:f9:3e:14:b7:08:28:c4:fe:
                    de:74:0f:71:07:8b:75:55:81:bd:a0:d6:6a:dd:40:
                    60:f1:52:95:a0:95:e4:bf:e1:71:0d:ad:a9:c2:12:
                    cf:69:14:82:bd:5f:4b:ee:64:b5:86:ab:2b:b4:1c:
                    c5:1d:e1:fa:d9:34:fb:46:1a:8f:a7:ab:44:d2:0c:
                    35:25:01:ac:25:75:b8:a5:8d:27:85:6c:d9:86:0d:
                    59:77:a7:fd:ab:50:ee:6c:d9:5d:68:d8:f9:6c:65:
                    39:f2:65:78:5a:eb:cd:7c:41:00:76:7b:52:e2:d5:
                    de:fd:17:3d:aa:a2:7f:24:9c:5a:d1:13:c5:e7:bf:
                    6d:4f:2a:c0:8f:b7:63:a3:dc:37:33:a3:ce:ff:93:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:53:C6:B5:38:FE:F2:8B:F4:70:A0:B8:83:12:50:26:04:88:0F
            X509v3 Authority Key Identifier:
                keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:75:35:89:51:f6:28:56:fb:7f:a4:d0:57:68:81:66:36:
         b5:a3:0b:f9:50:31:be:95:f6:8b:cf:e0:20:55:30:b8:41:da:
         69:e7:fe:44:31:e8:f7:64:29:b3:5a:3a:ad:f1:36:24:8a:8b:
         7c:a7:7f:4c:57:c1:7e:6e:5c:f4:51:ce:c4:87:28:f0:bb:dc:
         c4:fd:28:a3:55:80:5c:bc:b5:52:0b:0a:b9:87:6a:f3:73:21:
         bb:b7:d8:78:8a:87:0e:18:4a:ee:8a:de:f5:7b:f6:da:fd:6e:
         2a:95:94:17:65:98:e2:13:c3:28:93:2f:f3:bf:a9:47:b4:91:
         c8:2b:2b:96:c1:76:4d:80:d2:00:7b:43:26:82:17:4e:67:11:
         74:b3:34:7e:ea:42:13:8c:6a:b5:83:d6:15:0b:51:c7:08:ca:
         b5:38:34:94:c5:3f:48:89:c6:66:e8:63:c1:03:46:2e:ff:ee:
         29:2c:81:b8:6f:2a:9f:fe:f4:13:71:34:05:8f:c2:3f:0f:f7:
         48:98:fd:70:b1:de:09:ac:74:09:cf:61:83:c5:f5:57:9f:db:
         b4:2d:ff:08:d5:83:70:77:bf:76:99:10:4c:58:65:52:cb:4c:
         b9:f9:0b:4e:ab:59:92:64:cd:94:0e:34:d8:bb:b5:67:b6:7b:
         a1:28:a1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKt5NM5sVmzjb0X6tptWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGRjMzA4ZmU2ZDg2MTIxMDI2Zjk3NDRhZGQ0MGUxMTcz
NTQzZGUwHhcNMjUwNDEzMDgwMTIzWhcNMjUwNDE0MDgwMTIzWjAzMTEwLwYDVQQD
EyhjZTI3NTNjNmI1MzhmZWYyOGJmNDcwYTBiODgzMTI1MDI2MDQ4ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwGv19+T9V9J840K4/oLQ+LNorHx
KxhYsGPL/7LuxLVbCotZs6Ce4hdLW6rcIbOWvt7AVu4FqM2yKup5iWK2wI/LRGCQ
L8k8fq7tDFIxe/9lHUq2M027r6jDuQHGYFcJSVfhdifATpzUQriFL0HR+T4Utwgo
xP7edA9xB4t1VYG9oNZq3UBg8VKVoJXkv+FxDa2pwhLPaRSCvV9L7mS1hqsrtBzF
HeH62TT7RhqPp6tE0gw1JQGsJXW4pY0nhWzZhg1Zd6f9q1DubNldaNj5bGU58mV4
WuvNfEEAdntS4tXe/Rc9qqJ/JJxa0RPF579tTyrAj7djo9w3M6PO/5PpDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4nU8a1OP7yi/RwoLiDElAmBIgPMB8GA1UdIwQY
MBaAFMxNwwj+bYYSECb5dErdQOEXNUPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQt
ZDIyNmEzYjFmNDJkLzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQtZDIyNmEzYjFmNDJk
LzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSR1NYlR
9ihW+3+k0FdogWY2taML+VAxvpX2i8/gIFUwuEHaaef+RDHo92Qps1o6rfE2JIqL
fKd/TFfBfm5c9FHOxIco8LvcxP0oo1WAXLy1UgsKuYdq83Mhu7fYeIqHDhhK7ore
9Xv22v1uKpWUF2WY4hPDKJMv87+pR7SRyCsrlsF2TYDSAHtDJoIXTmcRdLM0fupC
E4xqtYPWFQtRxwjKtTg0lMU/SInGZuhjwQNGLv/uKSyBuG8qn/70E3E0BY/CPw/3
SJj9cLHeCax0Cc9hg8X1V5/btC3/CNWDcHe/dpkQTFhlUstMufkLTqtZkmTNlA40
2Lu1Z7Z7oSihQw==
-----END CERTIFICATE-----