Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File:                     z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier:          O3mRY64ArrYVmB/Em2cjxyvLPxF+sBqkUGNLbQb/vkY=
Subject key identifier:   CE:A7:86:9E:AC:9A:4F:DD:BC:59:1A:F4:EA:E3:82:E4:7F:F2:F7:FE
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer:       /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial:       01962E98C81852EA0C674519CA1436F8A2C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number:          0850
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: noDjMrw3wDSZzobIzT864POYmqeHJ0Uq9k6tg4BJ12A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c8:18:52:ea:0c:67:45:19:ca:14:36:f8:a2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=cea7869eac9a4fddbc591af4eae382e47ff2f7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:1c:c8:ff:67:71:b3:c3:c6:6b:3c:94:2e:
                    0e:ba:6d:93:e4:9e:4b:d1:cf:0e:24:aa:e9:6c:0b:
                    d5:19:f4:77:81:71:56:ca:01:08:04:2e:15:d4:77:
                    71:06:16:1b:3c:8d:cd:ab:eb:2c:87:1c:28:66:85:
                    2c:8e:88:22:31:18:30:20:ba:29:8f:12:36:6c:f3:
                    59:42:cc:06:b0:32:29:d9:5e:eb:f4:e9:2b:d0:ab:
                    22:17:28:49:d1:0f:37:65:c0:b4:f9:b4:22:fe:68:
                    5d:b8:6e:5f:5a:88:bc:31:a1:b9:0e:9f:f6:a1:8d:
                    0d:04:83:c8:2f:13:90:12:3c:7d:d6:8b:b9:2b:af:
                    08:5d:5b:2b:f8:8b:60:a1:d1:2a:d4:86:68:6c:f1:
                    84:d3:fb:3f:40:27:86:f9:8c:65:a6:7f:7c:86:8c:
                    3d:4e:b5:64:1b:23:ec:f0:66:ec:19:8f:c1:c5:b6:
                    45:96:03:7c:49:15:60:81:e2:70:c6:56:30:dc:28:
                    1c:cc:10:e6:3b:33:1f:e1:5c:41:ea:45:24:7e:2e:
                    a4:e9:9e:c0:c8:03:bb:79:7a:eb:3d:76:eb:88:32:
                    39:8f:0b:e3:28:1a:0c:90:cf:2a:a4:53:2c:24:50:
                    17:2f:0e:94:ef:d0:4e:11:ca:59:7b:c0:db:f8:bc:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A7:86:9E:AC:9A:4F:DD:BC:59:1A:F4:EA:E3:82:E4:7F:F2:F7:FE
            X509v3 Authority Key Identifier:
                keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:06:cd:03:bf:5a:8a:6b:d9:3b:9c:13:de:f4:48:2e:1b:
         35:a4:48:11:55:5a:5d:f8:fc:4f:88:9a:fa:ed:b3:e2:a8:c0:
         59:42:20:92:b9:b5:d3:0c:36:42:32:45:00:38:5f:1a:49:b0:
         f5:a5:7b:9d:92:e4:bb:5b:d6:c2:85:ae:3d:4b:1b:97:2d:24:
         c9:89:9f:bf:c2:ff:e0:6b:b0:e1:31:2f:fe:32:60:76:9e:d8:
         44:ee:85:fb:2c:e5:a4:35:27:90:da:27:02:5a:17:20:dd:bf:
         0c:12:b0:b6:7e:2b:75:f7:83:9f:d1:cd:0f:8e:c5:c2:ee:45:
         18:8f:8d:bc:e0:e8:3f:07:8f:a0:62:04:db:7a:6a:67:ee:90:
         dc:ab:cb:c4:6d:df:22:0f:f0:7e:ad:e4:85:51:62:b9:1d:5b:
         cc:54:3e:cb:c7:6e:19:6d:5b:f1:61:dd:3d:07:fb:3e:db:a0:
         14:bc:43:31:12:b1:4a:7b:6d:5d:ce:ff:15:f2:45:be:55:f2:
         91:d8:65:87:d7:70:ae:db:8d:73:63:4c:6c:8c:12:cc:28:91:
         d0:1f:f5:31:02:e7:9d:2a:e1:e2:63:00:47:3c:a5:61:be:d4:
         31:f6:67:31:f4:01:93:88:8c:c5:d4:98:34:bc:80:6d:19:75:
         9c:87:ab:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMgYUuoMZ0UZyhQ2+KLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNGQwY2E2YmI0OWQ2Yzk3YTkzYTMzNDk1Nzc2ZGUyNzUw
MzNkNGMwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
EyhjZWE3ODY5ZWFjOWE0ZmRkYmM1OTFhZjRlYWUzODJlNDdmZjJmN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWEcyP9ncbPDxms8lC4Oum2T5J5L
0c8OJKrpbAvVGfR3gXFWygEIBC4V1HdxBhYbPI3Nq+sshxwoZoUsjogiMRgwILop
jxI2bPNZQswGsDIp2V7r9Okr0KsiFyhJ0Q83ZcC0+bQi/mhduG5fWoi8MaG5Dp/2
oY0NBIPILxOQEjx91ou5K68IXVsr+ItgodEq1IZobPGE0/s/QCeG+Yxlpn98how9
TrVkGyPs8GbsGY/BxbZFlgN8SRVggeJwxlYw3CgczBDmOzMf4VxB6kUkfi6k6Z7A
yAO7eXrrPXbriDI5jwvjKBoMkM8qpFMsJFAXLw6U79BOEcpZe8Db+LwrOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6nhp6smk/dvFka9OrjguR/8vf+MB8GA1UdIwQY
MBaAFM9NDKa7SdbJepOjNJV3beJ1Az1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDkt
YWMwYmQzN2M5ZGMxLzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDktYWMwYmQzN2M5ZGMx
LzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaYGzQO/
Wopr2TucE970SC4bNaRIEVVaXfj8T4ia+u2z4qjAWUIgkrm10ww2QjJFADhfGkmw
9aV7nZLku1vWwoWuPUsbly0kyYmfv8L/4Guw4TEv/jJgdp7YRO6F+yzlpDUnkNon
AloXIN2/DBKwtn4rdfeDn9HND47Fwu5FGI+NvODoPwePoGIE23pqZ+6Q3KvLxG3f
Ig/wfq3khVFiuR1bzFQ+y8duGW1b8WHdPQf7PtugFLxDMRKxSnttXc7/FfJFvlXy
kdhlh9dwrtuNc2NMbIwSzCiR0B/1MQLnnSrh4mMARzylYb7UMfZnMfQBk4iMxdSY
NLyAbRl1nIertw==
-----END CERTIFICATE-----