Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File:                     0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier:          kXOVEzLxOyyUHh6V/KEF98e1MMotbrWULZQVwfG/Qpo=
Subject key identifier:   0B:1D:1C:E7:08:BD:10:DA:8C:45:DE:93:85:A8:63:3B:72:96:1A:1D
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer:       /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial:       01962F3DA85937255FD64073F948B1369B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number:          0A5F
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: bxgTFynBe0DyPGcYK/mFWkgGzZg+RYpwK3MdsgutOwE=)
                          2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a8:59:37:25:5f:d6:40:73:f9:48:b1:36:9b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=0b1d1ce708bd10da8c45de9385a8633b72961a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:db:95:bf:2c:73:19:84:2a:b2:9f:9e:42:
                    3c:98:39:b0:b8:5b:f0:17:9c:37:b3:41:d3:01:9e:
                    76:42:05:9e:be:63:42:c9:c6:1a:8f:c8:32:ce:7b:
                    c4:4a:d9:3f:23:16:fa:b1:da:3c:5a:72:67:24:50:
                    31:22:cb:d7:68:2b:f1:4a:9c:42:ff:a1:78:36:d2:
                    2d:a7:d0:0f:08:a1:f4:7f:f9:e1:4a:ba:80:81:dd:
                    46:68:d0:ac:ac:06:9b:02:80:16:0e:b3:09:2e:39:
                    47:31:00:10:ff:04:2c:31:9e:df:e5:81:a1:90:9b:
                    1e:4e:d4:1b:ea:b9:93:dd:ab:48:7f:e4:2d:3c:62:
                    01:bb:26:a5:7b:ae:23:55:c7:19:87:fd:e1:23:2b:
                    38:20:a2:c6:da:2a:96:a3:37:71:26:16:53:7b:a6:
                    ce:77:e2:4c:83:cf:77:f2:aa:3d:32:c0:f5:dd:34:
                    b2:2f:22:ae:47:f0:f0:75:9e:94:72:59:0a:a4:43:
                    0e:65:8c:b2:52:b9:6c:9f:d9:65:3a:a4:8b:f3:83:
                    2d:56:0f:eb:4c:df:44:ac:fb:43:05:d2:d3:1a:d2:
                    60:df:b7:94:2c:e9:50:4c:a4:b7:86:9d:33:15:ce:
                    ad:8d:df:2a:cb:36:b2:cc:ab:9a:84:91:13:7a:52:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1D:1C:E7:08:BD:10:DA:8C:45:DE:93:85:A8:63:3B:72:96:1A:1D
            X509v3 Authority Key Identifier:
                keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:64:09:62:08:45:fe:de:7b:09:d5:fc:85:f9:1f:29:ab:
         fb:73:2f:7e:f9:29:6a:8a:5d:e1:89:bb:cd:97:dd:f0:31:7d:
         b0:3d:a2:44:35:09:3c:77:d8:7a:47:6b:ff:35:74:79:fb:c0:
         14:73:99:d0:41:b3:ad:c6:44:6a:4b:51:06:7d:06:2f:7d:11:
         df:78:48:b6:37:a0:60:e3:56:bf:d6:ce:a6:0c:20:f3:f5:d4:
         09:a8:55:e7:2e:ad:26:ea:ba:95:fd:d1:63:fe:68:c2:4c:74:
         7d:0b:fd:7b:2a:13:f0:d6:fa:09:ae:9f:4d:dd:d2:e8:7e:49:
         be:67:d0:af:1c:6b:a9:46:d5:57:36:45:a0:d1:6f:1f:c5:ac:
         28:03:b0:41:4c:5c:33:43:fc:10:fc:9f:46:48:a9:dc:bb:64:
         3c:77:27:a0:fa:bd:76:21:b2:da:4b:e7:b5:f9:96:aa:5c:6e:
         68:80:b9:d8:86:9e:72:cd:b5:f1:50:88:03:c9:42:67:4b:e5:
         be:40:a5:92:32:6e:00:db:c7:a0:0b:e0:66:88:15:2d:c9:4d:
         aa:9a:36:33:bc:a3:73:6d:30:c4:d7:3a:b3:8f:df:e0:21:58:
         12:9e:e0:36:69:3a:99:8a:d7:52:bf:8a:ad:f0:8b:af:87:f9:
         90:72:ed:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPahZNyVf1kBz+UixNptCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2
MDE3Y2UwHhcNMjUwNDEzMTMwMTMxWhcNMjUwNDE0MTMwMTMxWjAzMTEwLwYDVQQD
EygwYjFkMWNlNzA4YmQxMGRhOGM0NWRlOTM4NWE4NjMzYjcyOTYxYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0/blb8scxmEKrKfnkI8mDmwuFvw
F5w3s0HTAZ52QgWevmNCycYaj8gyznvEStk/Ixb6sdo8WnJnJFAxIsvXaCvxSpxC
/6F4NtItp9APCKH0f/nhSrqAgd1GaNCsrAabAoAWDrMJLjlHMQAQ/wQsMZ7f5YGh
kJseTtQb6rmT3atIf+QtPGIBuyale64jVccZh/3hIys4IKLG2iqWozdxJhZTe6bO
d+JMg8938qo9MsD13TSyLyKuR/DwdZ6UclkKpEMOZYyyUrlsn9llOqSL84MtVg/r
TN9ErPtDBdLTGtJg37eULOlQTKS3hp0zFc6tjd8qyzayzKuahJETelIqWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsdHOcIvRDajEXek4WoYztylhodMB8GA1UdIwQY
MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt
NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl
LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOVkCWII
Rf7eewnV/IX5Hymr+3Mvfvkpaopd4Ym7zZfd8DF9sD2iRDUJPHfYekdr/zV0efvA
FHOZ0EGzrcZEaktRBn0GL30R33hItjegYONWv9bOpgwg8/XUCahV5y6tJuq6lf3R
Y/5owkx0fQv9eyoT8Nb6Ca6fTd3S6H5JvmfQrxxrqUbVVzZFoNFvH8WsKAOwQUxc
M0P8EPyfRkip3LtkPHcnoPq9diGy2kvntfmWqlxuaIC52Iaecs218VCIA8lCZ0vl
vkClkjJuANvHoAvgZogVLclNqpo2M7yjc20wxNc6s4/f4CFYEp7gNmk6mYrXUr+K
rfCLr4f5kHLtCw==
-----END CERTIFICATE-----