Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File:                     zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier:          s3dKP7lyq9IcFuQkwTuCr/aAZC+5WKh3cov8apkT3Ok=
Subject key identifier:   E3:5A:E9:74:F8:E0:DB:1C:B5:7E:2D:9F:46:A3:D3:6C:FF:B2:84:B1
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer:       /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial:       01962F3DD78AF6BE523779883FC227B1C117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number:          04BF
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=)
                          2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: zv9LHEkXPXVJ+rqD0vUid2Lo8y71Z2zOqJnt5M+N9Mc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d7:8a:f6:be:52:37:79:88:3f:c2:27:b1:c1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=e35ae974f8e0db1cb57e2d9f46a3d36cffb284b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:83:f5:2c:c4:7f:4b:da:1d:84:c8:8c:e4:
                    f7:63:d0:3a:b0:ff:6c:dc:85:83:3f:62:32:af:09:
                    cb:11:37:b6:00:ad:34:a9:46:d6:d1:7c:94:19:63:
                    4f:a2:ba:51:18:39:3e:bd:c6:a4:9c:1a:fc:d9:9c:
                    7a:5c:5c:f6:fe:ad:ce:15:42:aa:43:39:3b:13:a0:
                    cc:2d:d5:3e:9a:ea:a4:1e:02:e6:7c:56:a7:a4:d0:
                    4f:43:20:61:05:62:9e:b1:8a:6d:64:f1:f9:78:1a:
                    e1:28:1b:d3:e8:9c:8e:3d:8e:39:2c:70:f7:b8:02:
                    0a:de:83:4f:3f:96:14:cf:b0:91:df:64:5e:80:5b:
                    63:78:e3:a2:ef:f7:23:eb:b0:f0:02:1e:cd:fa:02:
                    47:3b:c6:a4:8f:3f:a5:04:bd:b5:30:64:43:91:cf:
                    79:20:b0:aa:23:e1:69:01:93:e5:41:6e:93:a7:2a:
                    77:4c:73:10:b3:bc:09:50:fa:44:49:e5:40:d7:06:
                    03:9d:60:66:63:fa:42:fd:41:5e:7b:de:97:2b:99:
                    fe:62:18:f3:cc:f5:f3:80:3b:ff:3f:8a:8a:d3:21:
                    94:9e:d8:0f:fc:34:f2:48:75:9a:5e:12:9a:b2:54:
                    4b:bf:00:c7:e6:5e:72:04:ba:1c:a4:ff:f5:14:da:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5A:E9:74:F8:E0:DB:1C:B5:7E:2D:9F:46:A3:D3:6C:FF:B2:84:B1
            X509v3 Authority Key Identifier:
                keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:48:1f:56:82:12:22:53:8a:c2:b9:90:db:1b:e9:87:42:7f:
         6a:68:f9:26:1b:e8:87:e5:58:c2:4a:0a:1f:ff:8e:10:a6:55:
         6b:43:4f:29:6d:ba:c3:cb:6b:f5:f4:e8:22:e4:1e:d4:8b:20:
         2c:e4:25:3b:8a:26:28:dc:7e:8e:3f:91:54:8e:f2:39:b5:3a:
         fe:af:35:d4:dd:9d:bf:7e:3f:20:6d:bf:84:d6:ea:ab:3f:fa:
         68:5e:3f:bd:27:38:26:ba:ac:8a:6b:ff:bc:cf:81:9d:9d:18:
         e9:53:f7:7a:50:2c:78:df:a6:d8:99:61:f0:ca:43:a6:56:53:
         6b:8e:f7:ec:cd:15:77:4f:24:41:d8:c4:50:14:40:57:e7:71:
         3d:96:04:12:92:8b:e7:9f:7b:53:2a:78:b8:41:ea:2f:ba:5d:
         9a:e4:1e:fa:16:9f:e2:9c:a9:41:b8:bd:a9:d1:c5:44:80:0f:
         39:28:d1:91:2d:41:1a:13:f3:23:72:8d:a9:d2:ab:fb:ef:51:
         99:60:06:bd:bb:ca:b5:2d:df:f5:70:d4:ea:61:c8:fa:58:75:
         fa:6c:0f:f7:07:68:b3:d6:72:7c:3b:ed:84:3d:b7:4b:49:ea:
         88:79:e3:f1:65:c9:b7:86:72:28:7f:9f:d3:6a:ce:73:b9:1e:
         10:e5:b5:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdeK9r5SN3mIP8InscEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2
ODQ5NjEwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
EyhlMzVhZTk3NGY4ZTBkYjFjYjU3ZTJkOWY0NmEzZDM2Y2ZmYjI4NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GGD9SzEf0vaHYTIjOT3Y9A6sP9s
3IWDP2IyrwnLETe2AK00qUbW0XyUGWNPorpRGDk+vcaknBr82Zx6XFz2/q3OFUKq
Qzk7E6DMLdU+muqkHgLmfFanpNBPQyBhBWKesYptZPH5eBrhKBvT6JyOPY45LHD3
uAIK3oNPP5YUz7CR32RegFtjeOOi7/cj67DwAh7N+gJHO8akjz+lBL21MGRDkc95
ILCqI+FpAZPlQW6Tpyp3THMQs7wJUPpESeVA1wYDnWBmY/pC/UFee96XK5n+Yhjz
zPXzgDv/P4qK0yGUntgP/DTySHWaXhKaslRLvwDH5l5yBLocpP/1FNqw4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONa6XT44NsctX4tn0aj02z/soSxMB8GA1UdIwQY
MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct
ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl
LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkgfVoIS
IlOKwrmQ2xvph0J/amj5Jhvoh+VYwkoKH/+OEKZVa0NPKW26w8tr9fToIuQe1Isg
LOQlO4omKNx+jj+RVI7yObU6/q811N2dv34/IG2/hNbqqz/6aF4/vSc4Jrqsimv/
vM+BnZ0Y6VP3elAseN+m2Jlh8MpDplZTa4737M0Vd08kQdjEUBRAV+dxPZYEEpKL
5597Uyp4uEHqL7pdmuQe+haf4pypQbi9qdHFRIAPOSjRkS1BGhPzI3KNqdKr++9R
mWAGvbvKtS3f9XDU6mHI+lh1+mwP9wdos9ZyfDvthD23S0nqiHnj8WXJt4ZyKH+f
02rOc7keEOW1BA==
-----END CERTIFICATE-----