Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File:                     pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier:          T+v5DSUTWaqQEgFEkg7wls98yxiRJrPTTz19Yz1eARc=
Subject key identifier:   52:9E:02:95:79:57:D9:4F:49:CA:9A:BD:87:F4:A6:58:8D:24:C9:3D
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer:       /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial:       01962E98EF703E224769EE0E9CFCA953AA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number:          0AC4
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
                          2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: w3XqXzyrn9S2IXMffN69XEPA7tJ3Nji5wbLz3KlvZ/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ef:70:3e:22:47:69:ee:0e:9c:fc:a9:53:aa:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=529e02957957d94f49ca9abd87f4a6588d24c93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:6e:d8:e8:cd:5e:35:2b:b0:31:35:23:a1:
                    e7:d1:69:4c:8f:bb:bd:af:d5:da:5e:3a:79:c9:a2:
                    e6:61:b7:1c:c3:ee:69:d6:bf:26:8c:91:6f:ec:5e:
                    70:60:14:da:94:8c:46:ae:05:1a:b7:cb:d5:b1:1e:
                    8d:5e:f0:d3:65:81:0a:3b:e9:40:f2:b9:bb:41:0b:
                    68:19:31:02:c4:8c:30:83:14:a7:ca:7d:df:f8:9f:
                    f1:c2:94:49:e6:dd:9d:bc:b9:1f:63:53:00:0f:32:
                    f2:63:2b:21:2c:32:30:8d:1b:8c:66:9a:40:20:63:
                    78:3d:a9:c9:0b:6c:14:c1:78:e0:ff:f6:91:e4:8f:
                    8e:c0:87:47:86:0a:21:83:fa:90:f2:7a:6e:87:94:
                    b8:43:f3:73:32:ae:49:44:80:d4:cb:c9:51:25:96:
                    51:49:dd:25:06:0e:fe:70:63:8c:f3:c4:b4:a0:af:
                    15:38:ff:89:36:fa:a0:7e:7e:88:d2:26:4b:f7:ed:
                    11:d5:4e:ec:ee:db:e5:ea:fd:f7:84:9b:66:8a:79:
                    fc:e3:8c:c9:f9:83:e5:1a:19:ce:5b:bb:bb:6f:be:
                    4d:f6:ba:e0:2b:91:7b:4c:86:4e:ab:15:fa:8f:ae:
                    68:d3:3b:ab:fa:d7:98:b9:39:7e:ee:d6:d3:79:8b:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9E:02:95:79:57:D9:4F:49:CA:9A:BD:87:F4:A6:58:8D:24:C9:3D
            X509v3 Authority Key Identifier:
                keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3a:a2:48:82:9b:04:f3:13:85:df:14:5f:81:9b:34:c8:2c:
         16:b2:85:e7:1a:91:24:8c:68:24:2a:bb:5e:0b:92:a0:99:8f:
         70:67:77:47:2a:79:7d:3d:86:45:04:c1:6e:c4:49:11:4a:f4:
         e8:a7:55:65:ef:58:d6:25:40:1c:f9:fa:02:37:ce:05:d3:e3:
         85:1e:e4:26:ea:7c:15:b7:70:03:2f:01:7f:d8:23:0e:3f:ec:
         40:72:bd:6d:c2:c5:18:97:b4:5e:03:7b:46:7a:76:2d:48:70:
         4f:e5:9a:cd:38:6e:e0:4d:22:e3:69:af:43:dc:c7:9b:f1:df:
         6c:1d:f0:d8:16:18:76:ab:d1:22:ea:18:ff:99:b0:cd:09:e2:
         ce:94:a4:d2:e1:0b:0c:7f:96:74:6e:65:55:4d:bd:98:63:18:
         3b:60:ce:8e:ce:53:1a:36:18:f9:11:7b:fe:ed:04:3b:42:42:
         cb:ff:7f:ac:38:13:42:9a:77:c9:6a:44:53:1d:df:ad:a7:7c:
         8e:83:40:e0:c7:5e:e2:78:9c:d4:77:0a:3d:e4:0f:96:a4:73:
         fd:45:4a:0f:8d:74:e6:3c:53:ab:61:3a:ed:11:c8:83:f8:3b:
         63:0d:99:f7:90:4b:df:8d:e8:c1:a9:14:7b:3f:38:ed:da:ba:
         22:04:f6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumO9wPiJHae4OnPypU6o7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MzNiZDExMWZkOGNiNzZmNDg4M2JiYmNiZmRhNTlkYjY2
ZWQyZGUwHhcNMjUwNDEzMTAwMTM2WhcNMjUwNDE0MTAwMTM2WjAzMTEwLwYDVQQD
Eyg1MjllMDI5NTc5NTdkOTRmNDljYTlhYmQ4N2Y0YTY1ODhkMjRjOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNNu2OjNXjUrsDE1I6Hn0WlMj7u9
r9XaXjp5yaLmYbccw+5p1r8mjJFv7F5wYBTalIxGrgUat8vVsR6NXvDTZYEKO+lA
8rm7QQtoGTECxIwwgxSnyn3f+J/xwpRJ5t2dvLkfY1MADzLyYyshLDIwjRuMZppA
IGN4PanJC2wUwXjg//aR5I+OwIdHhgohg/qQ8npuh5S4Q/NzMq5JRIDUy8lRJZZR
Sd0lBg7+cGOM88S0oK8VOP+JNvqgfn6I0iZL9+0R1U7s7tvl6v33hJtminn844zJ
+YPlGhnOW7u7b75N9rrgK5F7TIZOqxX6j65o0zur+teYuTl+7tbTeYvyAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKeApV5V9lPScqavYf0pliNJMk9MB8GA1UdIwQY
MBaAFKczvREf2Mt29Ig7u8v9pZ22btLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWIt
MDhjZWQ5MmM5NzcwLzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNzNiMTktMDgzOS00M2FjLThiNWItMDhjZWQ5MmM5Nzcw
LzEvcHpPOUVSX1l5M2IwaUR1N3lfMmxuYlp1MHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTqiSIKb
BPMThd8UX4GbNMgsFrKF5xqRJIxoJCq7XguSoJmPcGd3Ryp5fT2GRQTBbsRJEUr0
6KdVZe9Y1iVAHPn6AjfOBdPjhR7kJup8FbdwAy8Bf9gjDj/sQHK9bcLFGJe0XgN7
Rnp2LUhwT+WazThu4E0i42mvQ9zHm/HfbB3w2BYYdqvRIuoY/5mwzQnizpSk0uEL
DH+WdG5lVU29mGMYO2DOjs5TGjYY+RF7/u0EO0JCy/9/rDgTQpp3yWpEUx3frad8
joNA4Mde4nic1HcKPeQPlqRz/UVKD4105jxTq2E67RHIg/g7Yw2Z95BL343owakU
ez847dq6IgT2Hg==
-----END CERTIFICATE-----