Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File:                     cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier:          f0lj8YoLqn3NSRAsS2wqOBHFnmcsg51Cry9C5Vb4FxM=
Subject key identifier:   B5:62:04:35:FA:68:BB:0A:6D:D3:15:BA:FE:4A:CD:21:45:E9:0B:F7
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer:       /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial:       01962F3DCA059FCF48AF3758CEA43457A663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number:          0912
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: nfVJVbeoQASL+DIAEnNV/kEQEjT1RBDUZjlTddYKXw8=)
                          2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=)
                          3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ca:05:9f:cf:48:af:37:58:ce:a4:34:57:a6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=b5620435fa68bb0a6dd315bafe4acd2145e90bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:a4:b0:aa:e9:96:44:35:e6:de:11:a0:2f:
                    7d:91:34:b8:d3:f1:06:68:a5:4f:fc:3a:1e:59:91:
                    38:4a:ad:f0:58:c6:d1:f6:ac:7e:84:b1:a7:63:76:
                    9b:d7:9d:3b:4e:9f:f0:61:9e:50:f8:bb:86:41:d6:
                    5d:5a:ea:99:91:71:ce:4d:20:e8:95:3d:ae:72:13:
                    e2:a0:79:80:d8:ed:a5:44:93:4f:46:12:b7:03:35:
                    f2:b8:19:14:80:c6:f3:e0:3a:79:17:38:fe:34:7a:
                    ae:5d:35:33:56:f0:4c:0c:92:90:e9:a2:00:27:49:
                    e0:ea:bc:45:eb:f6:14:12:76:32:bd:ce:e0:fd:40:
                    6a:ad:5a:7f:22:1c:33:62:38:5c:53:4b:16:3e:e4:
                    42:0d:21:99:9a:d6:c9:de:da:21:5a:ff:73:a5:03:
                    ea:9d:e7:d0:ba:b0:d2:6f:88:ae:1c:3b:6f:a0:f8:
                    f1:4e:c5:6d:ab:a6:e3:fe:00:c4:ae:53:20:f0:1b:
                    21:c8:c4:a0:a3:13:d2:29:31:96:71:be:2a:29:29:
                    64:46:d3:78:a1:60:3c:ce:e2:d8:46:1e:df:bc:ad:
                    44:c1:41:cc:a1:50:ef:15:4e:f8:a9:41:d4:37:92:
                    6f:28:95:8c:e9:6a:ff:58:81:0b:9c:12:75:99:47:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:04:35:FA:68:BB:0A:6D:D3:15:BA:FE:4A:CD:21:45:E9:0B:F7
            X509v3 Authority Key Identifier:
                keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:62:13:43:95:0e:55:4c:f6:46:5f:e1:c5:f5:53:66:94:
         5b:eb:f8:26:c4:e8:95:55:01:ff:a7:23:51:27:01:b4:39:9c:
         a7:f7:8e:26:b0:07:5b:b4:5d:5a:60:ed:58:2c:ff:4e:3a:fd:
         b8:dd:73:b3:6e:3b:b1:9c:a7:10:ac:72:e9:0a:4a:42:4e:4e:
         c3:0c:57:99:db:bc:ff:16:4b:0f:98:b9:2d:de:05:b3:63:e6:
         c7:96:c8:c5:37:b6:c1:56:bd:28:0c:55:85:a2:31:46:ce:00:
         ec:bb:33:2f:39:e6:5f:c3:6f:88:93:22:12:21:a5:08:94:32:
         93:a6:a0:ae:40:c3:b4:50:eb:da:43:f2:bf:07:10:c1:9e:c2:
         75:90:c4:f6:cb:1c:e2:86:30:44:dc:d5:46:75:58:95:fd:4c:
         39:fe:36:04:63:27:08:8c:91:24:07:b7:25:d0:3b:d8:44:10:
         e1:a6:bf:3c:3a:1b:f7:96:1e:8c:28:69:81:1d:40:0e:ac:dd:
         27:18:79:da:77:3d:40:c6:09:ef:c9:b4:f1:15:8f:5b:cb:41:
         bc:ba:d5:a2:fb:cd:b4:28:2b:d6:a4:75:7d:14:b2:ac:d0:39:
         75:25:0e:f3:eb:7f:91:eb:6a:79:b6:0f:f6:2b:36:e9:84:20:
         f3:05:38:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcoFn89IrzdYzqQ0V6ZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTljZTY0YTBmMTYyNGQ3YmIyZDI5NjllNWMxMWFkYmFh
NTQ4NWMwHhcNMjUwNDEzMTMwMTQwWhcNMjUwNDE0MTMwMTQwWjAzMTEwLwYDVQQD
EyhiNTYyMDQzNWZhNjhiYjBhNmRkMzE1YmFmZTRhY2QyMTQ1ZTkwYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5aksKrplkQ15t4RoC99kTS40/EG
aKVP/DoeWZE4Sq3wWMbR9qx+hLGnY3ab1507Tp/wYZ5Q+LuGQdZdWuqZkXHOTSDo
lT2uchPioHmA2O2lRJNPRhK3AzXyuBkUgMbz4Dp5Fzj+NHquXTUzVvBMDJKQ6aIA
J0ng6rxF6/YUEnYyvc7g/UBqrVp/IhwzYjhcU0sWPuRCDSGZmtbJ3tohWv9zpQPq
nefQurDSb4iuHDtvoPjxTsVtq6bj/gDErlMg8BshyMSgoxPSKTGWcb4qKSlkRtN4
oWA8zuLYRh7fvK1EwUHMoVDvFU74qUHUN5JvKJWM6Wr/WIELnBJ1mUdjMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLViBDX6aLsKbdMVuv5KzSFF6Qv3MB8GA1UdIwQY
MBaAFHKZzmSg8WJNe7LSlp5cEa26pUhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAt
YzdlYjM0ZTJkY2E2LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAtYzdlYjM0ZTJkY2E2
LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADr5iE0OV
DlVM9kZf4cX1U2aUW+v4JsTolVUB/6cjUScBtDmcp/eOJrAHW7RdWmDtWCz/Tjr9
uN1zs247sZynEKxy6QpKQk5OwwxXmdu8/xZLD5i5Ld4Fs2Pmx5bIxTe2wVa9KAxV
haIxRs4A7LszLznmX8NviJMiEiGlCJQyk6agrkDDtFDr2kPyvwcQwZ7CdZDE9ssc
4oYwRNzVRnVYlf1MOf42BGMnCIyRJAe3JdA72EQQ4aa/PDob95YejChpgR1ADqzd
Jxh52nc9QMYJ78m08RWPW8tBvLrVovvNtCgr1qR1fRSyrNA5dSUO8+t/ketqebYP
9is26YQg8wU4Rw==
-----END CERTIFICATE-----