Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File:                     KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier:          u4caPvM00JBcqFSCOUriNVexvpL+evnS/e6DOHOHgwU=
Subject key identifier:   89:60:ED:75:DB:85:8B:1A:23:00:35:53:EE:51:86:AA:2D:13:35:D0
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer:       /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial:       01962E9977DC18D8ADDDC3AB0258CD2D40E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (hash: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=)
                          2: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
                          3: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
                          4: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: 7epaNAOGnWVOGqNrUj34b2gBpUnd9qQgvkMC1cBGKig=)
                          5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
                          6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
                          7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
                          8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:77:dc:18:d8:ad:dd:c3:ab:02:58:cd:2d:40:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=8960ed75db858b1a23003553ee5186aa2d1335d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:0a:58:58:45:40:2a:4f:c5:08:52:72:7c:
                    dc:32:86:51:f4:40:92:6e:8a:ad:8a:65:d4:32:8c:
                    9d:b5:9f:56:7e:e2:59:e2:a0:f7:db:c2:f4:6d:57:
                    1a:a2:2d:c1:79:e7:d9:d2:85:ab:a9:14:e0:f2:c3:
                    04:5b:47:33:f9:5a:09:c0:2c:a1:83:80:f6:bf:dd:
                    64:7b:f5:cf:6b:67:7f:95:43:40:ee:e1:3f:5a:ee:
                    bd:28:b8:de:7e:72:2c:7f:9c:3a:a4:ec:12:08:a3:
                    25:f1:07:89:4a:28:aa:38:67:1c:c7:90:20:91:73:
                    7a:8d:51:7a:92:fb:eb:73:af:02:e4:32:ee:e3:6f:
                    db:ab:80:f1:82:18:8e:01:d3:64:72:14:5b:1e:78:
                    d9:00:0c:bd:7f:e9:9a:07:ec:88:4b:dd:32:5d:27:
                    14:ae:82:66:fb:cb:fb:05:56:4d:c5:e3:85:46:bf:
                    63:c4:db:4a:20:b3:83:e4:72:f7:ef:0c:f5:ed:ad:
                    d8:a6:95:36:48:e8:3e:c7:15:df:70:6d:47:a0:eb:
                    00:df:12:9c:44:b5:b5:96:30:b0:ee:14:86:8d:18:
                    12:db:c4:1e:6b:c1:69:5f:d9:94:22:ac:97:3c:d4:
                    63:48:3d:fa:30:e0:54:26:7f:ad:64:fd:96:25:03:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:60:ED:75:DB:85:8B:1A:23:00:35:53:EE:51:86:AA:2D:13:35:D0
            X509v3 Authority Key Identifier:
                keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:f1:7b:35:d8:23:81:2c:b2:e9:64:d4:7f:87:c6:f2:a6:
         01:81:ac:06:71:8a:39:75:dc:c5:67:05:7b:55:e9:b6:b2:3a:
         ce:60:ba:9e:fb:93:b8:11:2f:86:63:ad:03:62:8c:a8:7d:93:
         f1:97:fe:c7:61:7f:5e:4d:d9:fb:65:f3:b2:41:c8:11:46:77:
         20:28:71:20:e3:2f:96:0b:05:e7:5b:d1:12:40:55:93:82:3c:
         a4:6b:4c:22:70:34:8a:e2:a0:61:66:03:9b:95:a8:f7:86:be:
         ef:b4:c4:73:07:e3:f6:79:5e:c8:ac:65:35:4d:a0:d2:0c:88:
         b8:e9:ed:df:7b:64:6d:db:07:15:16:31:f9:12:a0:62:2b:2f:
         e1:a1:cc:35:ce:5c:8e:2c:c9:bc:23:c6:ae:72:98:82:eb:be:
         fb:12:72:7a:c5:46:32:f6:69:53:79:d2:68:55:c2:0c:10:de:
         86:ec:7f:89:04:2c:d6:58:d2:a0:43:59:d6:0a:d2:74:14:76:
         8b:58:98:97:f4:42:2e:52:dd:b3:37:e2:19:a2:c7:0a:f9:e6:
         5f:f4:ef:7e:b5:2b:ea:97:9d:4e:b0:c0:c0:36:4e:f2:a9:cf:
         43:00:a4:b0:2b:b9:cc:83:04:42:56:15:99:9e:87:f4:d6:67:
         1e:d4:c4:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXfcGNit3cOrAljNLUDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjUwNDEzMTAwMjExWhcNMjUwNDE0MTAwMjExWjAzMTEwLwYDVQQD
Eyg4OTYwZWQ3NWRiODU4YjFhMjMwMDM1NTNlZTUxODZhYTJkMTMzNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUsKWFhFQCpPxQhScnzcMoZR9ECS
boqtimXUMoydtZ9WfuJZ4qD328L0bVcaoi3BeefZ0oWrqRTg8sMEW0cz+VoJwCyh
g4D2v91ke/XPa2d/lUNA7uE/Wu69KLjefnIsf5w6pOwSCKMl8QeJSiiqOGccx5Ag
kXN6jVF6kvvrc68C5DLu42/bq4DxghiOAdNkchRbHnjZAAy9f+maB+yIS90yXScU
roJm+8v7BVZNxeOFRr9jxNtKILOD5HL37wz17a3YppU2SOg+xxXfcG1HoOsA3xKc
RLW1ljCw7hSGjRgS28Qea8FpX9mUIqyXPNRjSD36MOBUJn+tZP2WJQPhNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlg7XXbhYsaIwA1U+5RhqotEzXQMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4vxezXY
I4Essulk1H+HxvKmAYGsBnGKOXXcxWcFe1XptrI6zmC6nvuTuBEvhmOtA2KMqH2T
8Zf+x2F/Xk3Z+2XzskHIEUZ3IChxIOMvlgsF51vREkBVk4I8pGtMInA0iuKgYWYD
m5Wo94a+77TEcwfj9nleyKxlNU2g0gyIuOnt33tkbdsHFRYx+RKgYisv4aHMNc5c
jizJvCPGrnKYguu++xJyesVGMvZpU3nSaFXCDBDehux/iQQs1ljSoENZ1grSdBR2
i1iYl/RCLlLdszfiGaLHCvnmX/TvfrUr6pedTrDAwDZO8qnPQwCksCu5zIMEQlYV
mZ6H9NZnHtTEfw==
-----END CERTIFICATE-----