Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File:                     zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier:          HTwgH4nt/h3i1pTEIWgaJlJouSJcUh0kKcPBLWNl2H4=
Subject key identifier:   31:2A:A1:E5:70:70:E0:C2:98:4E:95:F1:A5:D3:6C:EA:49:C7:3C:52
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer:       /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial:       01962E99B13C15582FC8813D9FEDCE2B6329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number:          0AE0
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
                          2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: 0smDfSYrcZ2vrSgUjja4Qs+Ub8PYYl+acgMobQ/u6rM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b1:3c:15:58:2f:c8:81:3d:9f:ed:ce:2b:63:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=312aa1e57070e0c2984e95f1a5d36cea49c73c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:1d:b0:e3:5c:99:fc:d3:3e:fc:e6:38:91:
                    71:9b:93:fa:9d:da:41:c9:ed:b0:48:18:6b:fa:9c:
                    8d:c2:fe:9f:a0:ed:b0:cc:6c:d9:29:6d:4f:67:f7:
                    c2:48:7c:ff:33:4f:b7:85:1d:3a:68:6e:97:d7:84:
                    87:2b:17:25:41:8b:02:fa:ab:13:ea:ae:c5:30:da:
                    3a:28:57:bd:37:42:f6:93:b9:1c:34:2c:d9:3d:c1:
                    78:7f:17:a7:dd:0d:1d:6b:7b:ae:1c:30:7f:57:ac:
                    08:2d:43:d7:9a:04:16:c3:f6:6c:84:2e:6e:c2:c9:
                    34:5f:8c:67:f4:52:b5:e5:c6:e7:49:d5:ad:b2:8a:
                    c4:e7:4d:ed:5d:82:ee:d9:f7:f7:d2:43:d0:55:a3:
                    e7:a4:97:bd:68:c3:52:b9:0a:37:85:7a:ef:58:d5:
                    1b:b0:eb:d0:7c:7e:5c:f5:98:4c:96:3b:ce:ec:ef:
                    3f:fb:eb:5f:5c:ee:9e:91:57:1c:f5:79:06:4e:de:
                    79:d8:2d:60:9e:26:cf:f9:c2:03:59:e8:9d:63:12:
                    7f:21:47:8c:d0:74:1e:a1:33:a3:d7:40:9f:dc:51:
                    45:71:c8:ce:ce:2c:ba:bf:8f:83:b0:f6:fd:43:bb:
                    b4:17:b4:19:13:4a:14:46:45:80:f5:97:60:02:fd:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2A:A1:E5:70:70:E0:C2:98:4E:95:F1:A5:D3:6C:EA:49:C7:3C:52
            X509v3 Authority Key Identifier:
                keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:9a:e1:48:3b:1d:86:b3:c5:be:2e:84:54:2f:a0:df:08:
         f4:7d:f5:dd:8f:cc:b9:5e:3d:3b:27:0a:25:33:cb:25:99:e6:
         c5:15:10:8d:17:f0:f5:3c:28:b0:47:12:dc:b9:88:d4:ba:2e:
         47:48:ab:63:1b:12:62:85:da:13:59:ca:46:b9:c5:9b:af:7b:
         e6:da:84:0b:97:0a:a6:a3:5c:a2:bf:d0:ef:ba:38:65:5e:5b:
         68:4f:91:37:3f:72:75:64:b4:39:97:4c:f1:bf:81:a4:9d:e0:
         19:b1:2b:af:93:58:3f:b1:05:45:b2:86:ac:75:64:4b:b8:c5:
         9b:df:b3:78:79:3c:1e:d2:fc:15:e9:41:2f:6d:8e:db:76:00:
         85:44:e8:bd:42:84:5f:2b:a2:88:33:83:e9:f6:c7:66:1b:cc:
         19:13:53:67:3f:05:97:a2:9a:10:31:bd:09:34:99:67:63:60:
         4e:b1:ca:fc:4d:b7:75:98:3a:3c:25:95:cd:ed:db:8d:50:64:
         b9:b1:0c:73:9e:c1:d5:86:15:29:d6:82:a3:a5:80:51:f1:89:
         2d:b0:ec:97:18:b3:6c:ce:1c:57:ed:0f:ba:f5:aa:bc:84:77:
         aa:54:3b:fc:34:23:27:2d:85:ef:2d:1a:38:5c:2a:63:97:4f:
         1d:41:80:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbE8FVgvyIE9n+3OK2MpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNTVmNzZjZmU5ZGFmYjJkOTQxOTAxNDJiYzhhYWIwZDMy
ODA2ZWUwHhcNMjUwNDEzMTAwMjI2WhcNMjUwNDE0MTAwMjI2WjAzMTEwLwYDVQQD
EygzMTJhYTFlNTcwNzBlMGMyOTg0ZTk1ZjFhNWQzNmNlYTQ5YzczYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYQdsONcmfzTPvzmOJFxm5P6ndpB
ye2wSBhr+pyNwv6foO2wzGzZKW1PZ/fCSHz/M0+3hR06aG6X14SHKxclQYsC+qsT
6q7FMNo6KFe9N0L2k7kcNCzZPcF4fxen3Q0da3uuHDB/V6wILUPXmgQWw/ZshC5u
wsk0X4xn9FK15cbnSdWtsorE503tXYLu2ff30kPQVaPnpJe9aMNSuQo3hXrvWNUb
sOvQfH5c9ZhMljvO7O8/++tfXO6ekVcc9XkGTt552C1gnibP+cIDWeidYxJ/IUeM
0HQeoTOj10Cf3FFFccjOziy6v4+DsPb9Q7u0F7QZE0oURkWA9ZdgAv0L7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEqoeVwcODCmE6V8aXTbOpJxzxSMB8GA1UdIwQY
MBaAFMxV92z+na+y2UGQFCvIqrDTKAbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYt
MzRjZDA1NzVlMWNiLzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYtMzRjZDA1NzVlMWNi
LzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnqa4Ug7
HYazxb4uhFQvoN8I9H313Y/MuV49OycKJTPLJZnmxRUQjRfw9TwosEcS3LmI1Lou
R0irYxsSYoXaE1nKRrnFm6975tqEC5cKpqNcor/Q77o4ZV5baE+RNz9ydWS0OZdM
8b+BpJ3gGbErr5NYP7EFRbKGrHVkS7jFm9+zeHk8HtL8FelBL22O23YAhUTovUKE
XyuiiDOD6fbHZhvMGRNTZz8Fl6KaEDG9CTSZZ2NgTrHK/E23dZg6PCWVze3bjVBk
ubEMc57B1YYVKdaCo6WAUfGJLbDslxizbM4cV+0PuvWqvIR3qlQ7/DQjJy2F7y0a
OFwqY5dPHUGASg==
-----END CERTIFICATE-----