Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          vpYJCyRqR6bjbcXs2flVEwDgHXq/B4Tfghd+bVvF+F8=
Subject key identifier:   FE:A3:61:72:08:E3:6D:66:E7:30:8E:88:5B:37:DD:9B:23:0A:DD:E3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       01962FAB79C88F1F2D1C8821FE70FF75AECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          160B
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=)
                          2: 6o4qx9pVZEI5mlA0NOenp9x_4WM.roa (hash: laQP61IPE3ACLAXCd2ITEqD1UcCUEXJpd9GZuWQOF94=)
                          3: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=)
                          4: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=)
                          5: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=)
                          6: It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa (hash: QAc5gHOaQXt39S4LjrikuPGmP8en9wsKvBleiEYuYHU=)
                          7: JnUDLpnSNZdUPTciH_SImfiQNPg.roa (hash: phKmDfTKEa4M5M2wLFu2WomQfhRDPt24TZJyLDqWijI=)
                          8: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=)
                          9: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=)
                          10: T8nK914dXUKjKwmBTR6OBzRr4W8.roa (hash: lQ1rtnQt8mNlcDp2IXxjTk0VtlErhLs/vW2VTluXoYg=)
                          11: dlMgTA37PYjMj29gw-38SqdkU3Y.roa (hash: 1Uz3Ku2WqM/b08F/1HFeZ9d7LLkvQOmfAokOdqGf3nA=)
                          12: eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa (hash: RcgTIJu/NwqSqC/vmr9OYFdwRt2Fz/3jLy3D9rjl+1A=)
                          13: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=)
                          14: ob_RURKVUgsmITZALhVsa-qXolg.roa (hash: Fa1GGWTo+0NV3NehS4X6jfnbmrCwDIsz+qaYmi3m0FU=)
                          15: pYYheMngH9PrFAWYb7D0Rnwh3Rc.roa (hash: Kusa3kjA5UvOGnNhZkPG36CpyMnLT1XxrIsJiFszyIE=)
                          16: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=)
                          17: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=)
                          18: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=)
                          19: v4CBgLv9j2JeRIvOJQdKbNxvJTA.roa (hash: Ttid+kREmc6Upy79hRBO9XMBfRE+dqbNAYWtSZGV6ag=)
                          20: vS_G30kRmF5yTvVCZuLriQbTalI.roa (hash: jpLTyi2oD569vb7nR4qsqTlGyMLcUPoGbyflTszDmns=)
                          21: yxb4qAopfVWx9tbVX2D9X8-NDPo.roa (hash: SCjFOGOJpyW+e/90L6KJ17UwdzCSiXn/XxCg01egwec=)
                          22: z5USRWL1xokOYfBSwUf22d4RSgs.roa (hash: +k9eJkOqlZwo2Ca8utkijZ5ya8drgkfsi12poSw6dDo=)
                          23: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: zT4oqm3WiSH5c/IS7sLAhAeFT/9dPx0EKJKGqYi7e7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:79:c8:8f:1f:2d:1c:88:21:fe:70:ff:75:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=fea3617208e36d66e7308e885b37dd9b230adde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:81:2b:b9:4a:de:b6:b6:d3:d6:48:d5:cb:
                    0d:2d:00:ce:14:f4:0c:86:4c:0a:df:f3:5f:1a:13:
                    71:e1:91:fb:85:35:6a:94:cf:33:13:ec:a4:b1:ea:
                    f6:01:9a:4a:84:86:3e:a8:96:62:a8:ea:46:93:7c:
                    79:bd:2a:08:36:db:5b:87:ca:7c:0c:ba:d9:2e:02:
                    7e:3d:36:8c:b1:95:22:8b:3a:e4:55:0e:b7:9d:84:
                    6f:f1:a9:59:ec:13:8b:20:a7:5f:94:1c:e0:40:eb:
                    69:76:9a:7d:02:7e:93:5f:87:2c:1e:e8:9d:07:5b:
                    1c:3f:76:44:0e:61:8e:73:40:d3:c6:47:b6:67:38:
                    77:f1:0a:c5:56:61:2f:4c:3e:b6:a6:9e:42:12:3d:
                    d5:b3:f7:42:66:1a:1a:51:a1:6d:ed:fa:34:3b:ed:
                    ec:88:0d:47:f9:92:1c:e1:9d:4a:92:5c:79:e0:fc:
                    37:eb:04:bd:e4:26:10:70:f2:bc:48:da:15:fc:3d:
                    a5:71:3b:38:94:c2:24:71:8f:e5:79:c3:db:af:e2:
                    d1:2a:d5:f7:bf:31:48:0c:bd:00:41:49:0a:6c:75:
                    a9:1a:8e:37:11:24:7f:0b:fc:81:35:fe:9e:0f:d7:
                    1a:9c:dd:ad:42:71:6e:08:d6:36:e3:98:03:51:00:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A3:61:72:08:E3:6D:66:E7:30:8E:88:5B:37:DD:9B:23:0A:DD:E3
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:ce:23:a5:a5:24:fa:13:50:3e:2e:cb:ae:19:91:ef:fa:
         f5:df:79:9a:da:46:92:2c:05:a2:33:b6:83:83:9a:b6:8a:52:
         81:61:5a:6c:80:b7:ee:da:b5:53:96:f0:93:c0:d9:9f:1a:06:
         5d:49:87:f6:dc:f7:ff:f1:79:79:f1:3d:42:b2:e9:00:00:8e:
         b9:69:3c:8d:08:d7:77:62:ee:f7:d3:96:d2:13:5c:2e:04:a8:
         f5:6f:a9:5d:71:19:dc:2f:a0:82:bb:de:de:d4:a3:bc:07:77:
         fb:93:db:41:77:d2:f7:f6:25:dc:5c:52:10:a1:67:3d:59:09:
         92:30:31:3c:73:ba:67:f6:99:c2:f5:7c:1f:35:e1:76:c5:10:
         43:9d:ad:e3:d8:a6:03:62:79:3f:78:97:b1:6c:1d:59:94:0f:
         f4:95:25:df:19:3d:7a:65:36:fa:5a:f5:2d:3c:05:c4:db:8c:
         ed:20:e8:9d:ae:9f:2b:21:0f:00:9b:21:61:f5:86:c3:2a:a4:
         30:63:9f:1d:8f:99:d1:a0:1b:b7:5e:14:79:7a:64:0c:35:33:
         29:53:01:30:ce:88:24:8f:84:e4:96:fa:ea:16:a0:39:1a:ce:
         e7:68:d7:94:ca:2d:76:93:71:80:a9:e9:58:61:7c:e9:d4:b8:
         3e:c6:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----