Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.mft
File:                     zKdQ_MdtDdddc4HjbRveTt3cPlE.mft (raw, json)
Hash identifier:          f4llSflFY5PEydtk5DF3SisU2HGJmzcmGGAd0HjnTZY=
Subject key identifier:   31:72:5A:A3:1A:27:BB:68:50:45:4D:A4:DF:72:74:09:28:B2:C1:9D
Authority key identifier: CC:A7:50:FC:C7:6D:0D:D7:5D:73:81:E3:6D:1B:DE:4E:DD:DC:3E:51
Certificate issuer:       /CN=cca750fcc76d0dd75d7381e36d1bde4edddc3e51
Certificate serial:       0193471777373159DF52800DAC4A2639E52F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zKdQ_MdtDdddc4HjbRveTt3cPlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.mft
Manifest number:          1368
Signing time:             Wed 20 Nov 2024 01:02:20 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:20 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:20 +0000
Files and hashes:         1: GuBACEaaLKhTCHhpo7PwnylCeoo.roa (hash: 3ronfCmYjtmN+/+EkbeU7iN1AnMSSHYPaQV8ZiLOJls=)
                          2: NRqEkvjaiHLhP7YwHQ36JqAydNk.roa (hash: mB6VxHbr/RL8KejIdKmX57CLVnFYDSmKf/lzdowTd/Y=)
                          3: zKdQ_MdtDdddc4HjbRveTt3cPlE.crl (hash: 3FmMGYyILLUB8SYzJxKh/+5lUorf0RQFELYy4w9rWro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:77:37:31:59:df:52:80:0d:ac:4a:26:39:e5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cca750fcc76d0dd75d7381e36d1bde4edddc3e51
        Validity
            Not Before: Nov 20 01:02:20 2024 GMT
            Not After : Nov 21 01:02:20 2024 GMT
        Subject: CN=31725aa31a27bb6850454da4df72740928b2c19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:0d:52:d9:1a:d0:ca:75:99:c0:65:c3:c5:
                    a7:23:1e:75:c3:74:51:f1:bc:bc:2b:4c:1c:a7:bc:
                    9a:ef:70:d6:f3:20:5b:d6:a3:7e:b1:53:27:21:5b:
                    82:79:50:dd:24:36:60:70:0c:b9:5c:21:a2:50:f3:
                    c5:37:f9:ce:29:98:c5:d9:0e:1a:69:0e:1c:60:93:
                    2d:4a:53:5c:a5:0c:91:8e:40:d2:e9:ea:7f:3f:18:
                    85:cb:9f:70:96:76:cc:52:1c:9e:20:47:52:ff:59:
                    15:c7:dd:f2:c4:88:4e:73:a0:4b:66:62:32:56:c9:
                    f9:42:3d:20:9c:d2:8b:cc:14:91:70:9a:a2:12:78:
                    58:4b:03:81:14:ae:db:c9:87:8e:aa:e6:0c:44:1d:
                    64:23:13:ad:71:f9:e1:06:92:4f:cd:03:05:b3:d4:
                    9e:0e:b3:28:1d:30:30:78:20:90:f9:ba:5d:9a:65:
                    83:f9:03:ad:3d:51:d7:22:6b:b5:28:50:2d:78:ed:
                    90:12:11:6e:1c:39:fe:4f:40:c0:fc:bc:2a:f2:86:
                    b2:cc:a6:73:fe:94:b6:06:36:c2:be:99:6d:eb:1f:
                    a2:2f:3c:c7:13:76:74:66:dd:78:54:9a:17:60:2d:
                    0b:3f:c7:2d:0a:ab:8c:c3:68:6e:98:3f:a4:ea:3b:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:72:5A:A3:1A:27:BB:68:50:45:4D:A4:DF:72:74:09:28:B2:C1:9D
            X509v3 Authority Key Identifier:
                keyid:CC:A7:50:FC:C7:6D:0D:D7:5D:73:81:E3:6D:1B:DE:4E:DD:DC:3E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKdQ_MdtDdddc4HjbRveTt3cPlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1b:cc:4a:06:00:71:19:d7:d4:fa:db:16:61:5e:33:77:53:
         53:13:99:06:5b:eb:81:5c:8c:d9:68:28:75:5e:67:cc:b9:fc:
         86:eb:59:41:67:5a:5d:50:f8:8d:f7:5e:72:99:65:bf:e3:b4:
         d9:8d:0f:b9:a6:78:c7:8c:1b:d7:d2:67:ec:ea:a8:33:31:fe:
         8f:93:a4:b1:91:f6:a5:1d:35:3a:cf:e2:62:53:78:93:88:e6:
         75:40:75:48:3a:7e:4d:45:82:c6:4b:a1:ec:e9:88:e0:4e:6b:
         e3:b7:e5:30:6e:5f:09:2f:bb:77:33:f3:4d:f8:a5:93:0a:46:
         b2:53:3f:9c:b4:b9:6c:5b:fa:cc:07:46:20:b5:ae:c8:a7:80:
         76:1b:31:9a:3e:5d:94:6d:4a:ac:1c:0d:80:33:ac:74:9a:c0:
         01:35:7b:36:9c:d5:78:9a:2f:e4:15:aa:a7:bb:32:ad:8a:df:
         cd:d1:70:87:50:13:fb:26:c8:dd:41:de:cc:16:18:24:ce:4a:
         4e:2a:db:c8:43:6e:22:06:34:22:fe:41:55:4f:31:fd:45:de:
         03:12:5b:cc:30:1c:7f:c3:f3:9f:9b:d3:a4:cf:c4:ed:35:03:
         42:cf:2e:84:5f:5a:d9:de:2a:87:de:f7:cf:db:a4:99:ab:91:
         48:34:2a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHF3c3MVnfUoANrEomOeUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYTc1MGZjYzc2ZDBkZDc1ZDczODFlMzZkMWJkZTRlZGRk
YzNlNTEwHhcNMjQxMTIwMDEwMjIwWhcNMjQxMTIxMDEwMjIwWjAzMTEwLwYDVQQD
EygzMTcyNWFhMzFhMjdiYjY4NTA0NTRkYTRkZjcyNzQwOTI4YjJjMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0sNUtka0Mp1mcBlw8WnIx51w3RR
8by8K0wcp7ya73DW8yBb1qN+sVMnIVuCeVDdJDZgcAy5XCGiUPPFN/nOKZjF2Q4a
aQ4cYJMtSlNcpQyRjkDS6ep/PxiFy59wlnbMUhyeIEdS/1kVx93yxIhOc6BLZmIy
Vsn5Qj0gnNKLzBSRcJqiEnhYSwOBFK7byYeOquYMRB1kIxOtcfnhBpJPzQMFs9Se
DrMoHTAweCCQ+bpdmmWD+QOtPVHXImu1KFAteO2QEhFuHDn+T0DA/Lwq8oayzKZz
/pS2BjbCvplt6x+iLzzHE3Z0Zt14VJoXYC0LP8ctCquMw2humD+k6jt1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFyWqMaJ7toUEVNpN9ydAkossGdMB8GA1UdIwQY
MBaAFMynUPzHbQ3XXXOB420b3k7d3D5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvektkUV9NZHREZGRkYzRIamJSdmVUdDNjUGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iM2MyMTUtZDg2Ni00MmQwLWE2YzMt
MjA2NzdkODBlODM4LzEvektkUV9NZHREZGRkYzRIamJSdmVUdDNjUGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iM2MyMTUtZDg2Ni00MmQwLWE2YzMtMjA2NzdkODBlODM4
LzEvektkUV9NZHREZGRkYzRIamJSdmVUdDNjUGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxvMSgYA
cRnX1PrbFmFeM3dTUxOZBlvrgVyM2WgodV5nzLn8hutZQWdaXVD4jfdecpllv+O0
2Y0PuaZ4x4wb19Jn7OqoMzH+j5OksZH2pR01Os/iYlN4k4jmdUB1SDp+TUWCxkuh
7OmI4E5r47flMG5fCS+7dzPzTfilkwpGslM/nLS5bFv6zAdGILWuyKeAdhsxmj5d
lG1KrBwNgDOsdJrAATV7NpzVeJov5BWqp7syrYrfzdFwh1AT+ybI3UHezBYYJM5K
TirbyENuIgY0Iv5BVU8x/UXeAxJbzDAcf8Pzn5vTpM/E7TUDQs8uhF9a2d4qh973
z9ukmauRSDQqQA==
-----END CERTIFICATE-----