Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          cnHsSMsP7hIh+b8LX/SyoblT/FWJVil6C7aLDNdnYtM=
Subject key identifier:   11:EA:E6:F6:48:4A:E8:CB:F7:EA:C0:20:6A:C5:65:B0:84:28:91:85
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       01962FAB5AAA82AA4FCDABA35820D544C6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 8oT7fOBgdsUIIWZBhypDTwG_INQ.roa (hash: WRDiXAITdWeeibEg69ylgGin7yKTe8ComkxuvcQwoIQ=)
                          2: BkPt0aJALr6XVU6twrxQRhczZl4.roa (hash: GquW1GHGVn0JJFYtKkWU3g1jrNnF5g+2QT4CBc2mNJo=)
                          3: CT-3l0p9gg6VPqpkvwK6-YeB6pE.roa (hash: RUIJZLk9xg0lGoyDdhD+bJMX1WkdWP7lO6yMUzIdGIw=)
                          4: QE0murogrnfrhBNI-lIB055tOnQ.roa (hash: Ksxv7cylSwkoYU8exidDycgsWvNKpl/+njghNlj/jds=)
                          5: XgCZLSw672Y4fHLKF3VdR-oVpqY.roa (hash: ZVPJim/tPagRJuy806SzJxw1pNpmAJ8WphC4x+fYVdY=)
                          6: dPQfoA35Gpb11fSOLi6nPVp7H2I.roa (hash: X2zxEmCkV2bmI4Ai/dqf9r0pDpMKOTmxsA77tOPqEAo=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: h8K8Z2RfGiZRUCa4qOCrRjZ8zy+niLzEgpoHVlWnrxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5a:aa:82:aa:4f:cd:ab:a3:58:20:d5:44:c6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=11eae6f6484ae8cbf7eac0206ac565b084289185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:77:fb:98:6a:7f:fc:84:cd:71:d3:dd:48:
                    57:91:38:11:13:bb:fe:66:0d:7a:e7:53:dc:a9:45:
                    c8:a7:be:67:22:3f:bc:f3:a2:aa:82:0e:69:5a:8d:
                    5e:a3:30:b7:ac:ab:11:0e:1e:8a:ea:04:9f:7e:70:
                    26:2a:2e:ec:c0:82:31:bf:43:2d:cc:44:18:6d:b6:
                    b7:83:d8:31:a8:28:50:72:9a:aa:68:6a:e5:da:1e:
                    bf:c4:77:2d:2b:92:14:9f:45:f6:f7:ed:c3:0e:be:
                    de:59:54:69:98:c0:06:e1:46:5b:60:aa:19:85:18:
                    76:6e:61:f7:eb:6c:43:4a:97:9c:77:17:ec:82:1a:
                    15:73:8d:5e:3a:b4:ef:bc:42:c1:82:96:15:4f:9c:
                    77:6d:66:6f:46:dd:66:2a:cd:07:fa:bf:80:45:30:
                    56:bb:5e:57:4c:8b:df:ab:0f:42:33:24:de:53:61:
                    77:2f:10:8a:4d:72:88:37:46:38:32:1e:e4:95:e4:
                    34:d8:91:5b:b0:5e:3a:59:84:92:52:80:ce:02:3f:
                    00:f3:5f:18:0b:4e:36:cc:e4:92:69:5d:78:31:78:
                    2e:5f:23:b3:e9:6c:7c:0d:be:cd:eb:83:ed:4a:b1:
                    88:39:89:1f:ac:34:70:f8:22:f6:9d:d0:c2:df:92:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EA:E6:F6:48:4A:E8:CB:F7:EA:C0:20:6A:C5:65:B0:84:28:91:85
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c1:7f:e7:6d:f9:1d:37:26:49:ef:df:35:e3:9e:05:11:4f:
         17:93:64:6b:02:ec:3c:58:ff:76:94:f7:82:59:1f:77:79:a3:
         8b:3e:a4:28:2f:38:3a:37:78:64:72:40:7d:c2:23:3c:08:57:
         61:e3:0d:2d:c1:1e:b8:89:bd:2f:47:2f:76:ea:b1:58:0b:bd:
         8f:9f:e1:fe:bf:75:24:ef:a1:71:83:32:c4:56:fb:5b:ff:c4:
         e4:7f:09:3f:3b:07:fa:ea:fa:12:9d:83:3e:2f:28:b7:43:b7:
         28:eb:88:5c:8e:11:cf:1d:e1:56:a3:ec:6b:d2:b6:00:02:a0:
         92:95:20:70:69:46:e6:e7:5d:a2:6b:cb:e9:46:60:76:f6:e0:
         7a:69:1d:c7:52:2b:ec:02:a4:3a:a4:41:89:c9:b1:1a:9e:f2:
         16:f6:c9:a8:49:3b:49:3d:f8:ca:6c:50:7a:9a:5a:0a:03:0f:
         e2:f7:82:51:ce:93:a1:fd:6b:59:4d:95:32:b5:2f:8e:76:79:
         38:ef:d2:c9:6c:72:5c:2b:e0:64:82:ff:b3:42:f8:e0:cd:9a:
         87:32:8b:65:1f:f7:ea:9e:92:2d:5f:82:af:3d:dd:e5:5c:e0:
         c0:98:d1:d3:ca:0d:8e:fd:f4:e0:91:da:bf:4e:29:35:ae:da:
         1e:f4:d9:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1qqgqpPzaujWCDVRMa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0
MWFlZjAwHhcNMjUwNDEzMTUwMTIxWhcNMjUwNDE0MTUwMTIxWjAzMTEwLwYDVQQD
EygxMWVhZTZmNjQ4NGFlOGNiZjdlYWMwMjA2YWM1NjViMDg0Mjg5MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTB3+5hqf/yEzXHT3UhXkTgRE7v+
Zg1651PcqUXIp75nIj+886Kqgg5pWo1eozC3rKsRDh6K6gSffnAmKi7swIIxv0Mt
zEQYbba3g9gxqChQcpqqaGrl2h6/xHctK5IUn0X29+3DDr7eWVRpmMAG4UZbYKoZ
hRh2bmH362xDSpecdxfsghoVc41eOrTvvELBgpYVT5x3bWZvRt1mKs0H+r+ARTBW
u15XTIvfqw9CMyTeU2F3LxCKTXKIN0Y4Mh7kleQ02JFbsF46WYSSUoDOAj8A818Y
C042zOSSaV14MXguXyOz6Wx8Db7N64PtSrGIOYkfrDRw+CL2ndDC35KQMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHq5vZISujL9+rAIGrFZbCEKJGFMB8GA1UdIwQY
MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt
NWRjMmZhNmEzNTAzLzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz
LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcF/5235
HTcmSe/fNeOeBRFPF5NkawLsPFj/dpT3glkfd3mjiz6kKC84Ojd4ZHJAfcIjPAhX
YeMNLcEeuIm9L0cvduqxWAu9j5/h/r91JO+hcYMyxFb7W//E5H8JPzsH+ur6Ep2D
Pi8ot0O3KOuIXI4Rzx3hVqPsa9K2AAKgkpUgcGlG5uddomvL6UZgdvbgemkdx1Ir
7AKkOqRBicmxGp7yFvbJqEk7ST34ymxQeppaCgMP4veCUc6Tof1rWU2VMrUvjnZ5
OO/SyWxyXCvgZIL/s0L44M2ahzKLZR/36p6SLV+Crz3d5VzgwJjR08oNjv304JHa
v04pNa7aHvTZbA==
-----END CERTIFICATE-----