Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File:                     ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier:          7ZgFa9feOCSq429V4vlW8QshtkheBgz2dUbiY7RrvIk=
Subject key identifier:   15:2B:A6:00:5D:EB:64:B7:0D:1B:F3:11:CA:13:0A:4D:AE:51:C4:55
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       01962E621C193B93592BCC36CE9E406DA510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 09:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:43 +0000
Files and hashes:         1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=)
                          2: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=)
                          3: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=)
                          4: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=)
                          5: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=)
                          6: RqGHUWF00fhVZeF-dl8ZKiYmlxQ.roa (hash: xtXihm79MoGY4uAJpdxZbQ/glvVQjH9b99Zaga793M8=)
                          7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=)
                          8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=)
                          9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: 1Om6m8zEwpAx+YnwIp3bH7nmleq45LqVnXM2PyqWn0k=)
                          10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:1c:19:3b:93:59:2b:cc:36:ce:9e:40:6d:a5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Apr 13 09:01:43 2025 GMT
            Not After : Apr 14 09:01:43 2025 GMT
        Subject: CN=152ba6005deb64b70d1bf311ca130a4dae51c455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:8d:3b:a3:fc:5d:14:ef:f5:9b:f1:55:2d:
                    ee:d1:4c:93:19:bb:c5:60:a7:cf:f0:b9:9c:ab:6d:
                    8f:6b:2e:f6:cf:9c:72:4b:d4:85:78:5c:16:47:30:
                    6f:a8:5c:0d:4c:81:28:5f:d7:d9:9f:11:09:d0:e1:
                    24:bc:d0:07:bb:71:e3:ad:fb:ee:7f:0a:52:52:ae:
                    23:97:84:6e:38:ac:5c:e5:ec:d4:80:99:0e:31:6c:
                    3b:de:6b:ce:71:6a:35:66:3d:d6:10:43:1e:b8:ac:
                    2a:97:da:13:ff:f3:b7:a7:d0:c7:2b:2e:76:a4:94:
                    98:70:eb:72:2a:01:86:43:78:69:64:c6:68:a7:e0:
                    cc:bf:d3:b3:d3:df:2e:26:71:6a:e6:6e:8c:07:f1:
                    af:12:2e:33:a3:e8:f5:ab:13:d6:46:93:4e:c4:b8:
                    07:a3:ce:2d:52:a8:7f:c9:1f:6b:30:5f:2b:8b:f4:
                    55:f5:d2:d1:fe:4c:8c:29:ac:2b:a7:97:5c:70:52:
                    1b:09:7c:c6:99:eb:04:46:52:e4:6a:1a:5d:14:3f:
                    41:44:2f:21:a9:9e:21:92:9a:9a:55:33:c4:8d:38:
                    d0:b5:65:2e:33:52:73:9f:5d:c9:a8:b3:80:4e:6a:
                    95:2f:91:52:31:3d:fb:d5:1d:b9:6b:c6:44:18:d8:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2B:A6:00:5D:EB:64:B7:0D:1B:F3:11:CA:13:0A:4D:AE:51:C4:55
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:50:68:22:ff:84:e8:58:cc:e6:79:7f:30:1e:7d:74:fe:d8:
         c3:f7:f0:ba:92:c0:31:f0:8f:e9:05:09:43:af:e2:d6:df:58:
         7b:af:e5:e0:0d:49:8b:54:d5:69:95:be:6a:ae:5c:ff:bb:2e:
         e7:b6:18:f0:e6:35:0e:ea:7e:2e:da:db:d2:cb:07:9f:5c:6f:
         d9:c2:34:fa:0f:f1:6e:cc:55:5a:e6:e9:f0:02:ce:54:10:dc:
         96:fe:c8:89:69:cd:22:0a:7e:79:f2:e9:ac:bd:08:bc:1f:cf:
         e6:f7:21:f2:3d:bb:e1:7f:f0:99:41:d2:62:17:fb:71:60:36:
         77:10:7d:26:ff:b5:4a:2d:d1:3e:7d:10:e4:58:ec:21:5e:15:
         45:b4:e9:5d:ae:2f:6a:15:f1:bf:33:44:80:bb:06:6e:1d:d0:
         28:10:e6:ce:21:a4:08:a3:c7:b7:4e:bc:24:29:51:39:d3:d1:
         ae:87:75:27:7b:1e:5e:86:84:e2:3b:af:e5:35:e4:bb:07:be:
         1a:aa:5c:6a:6c:d7:0e:7c:cb:48:78:70:06:af:ba:ce:3f:f6:
         a5:da:59:9d:b8:11:45:0c:4b:44:6b:81:10:ea:f7:f4:f4:83:
         83:48:e2:c2:6f:82:23:5d:1c:7d:ba:a9:cb:8a:b7:56:ad:22:
         bc:3b:9a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYhwZO5NZK8w2zp5AbaUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjUwNDEzMDkwMTQzWhcNMjUwNDE0MDkwMTQzWjAzMTEwLwYDVQQD
EygxNTJiYTYwMDVkZWI2NGI3MGQxYmYzMTFjYTEzMGE0ZGFlNTFjNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpKNO6P8XRTv9ZvxVS3u0UyTGbvF
YKfP8Lmcq22Pay72z5xyS9SFeFwWRzBvqFwNTIEoX9fZnxEJ0OEkvNAHu3Hjrfvu
fwpSUq4jl4RuOKxc5ezUgJkOMWw73mvOcWo1Zj3WEEMeuKwql9oT//O3p9DHKy52
pJSYcOtyKgGGQ3hpZMZop+DMv9Oz098uJnFq5m6MB/GvEi4zo+j1qxPWRpNOxLgH
o84tUqh/yR9rMF8ri/RV9dLR/kyMKawrp5dccFIbCXzGmesERlLkahpdFD9BRC8h
qZ4hkpqaVTPEjTjQtWUuM1Jzn13JqLOATmqVL5FSMT371R25a8ZEGNgOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUrpgBd62S3DRvzEcoTCk2uUcRVMB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1BoIv+E
6FjM5nl/MB59dP7Yw/fwupLAMfCP6QUJQ6/i1t9Ye6/l4A1Ji1TVaZW+aq5c/7su
57YY8OY1Dup+Ltrb0ssHn1xv2cI0+g/xbsxVWubp8ALOVBDclv7IiWnNIgp+efLp
rL0IvB/P5vch8j274X/wmUHSYhf7cWA2dxB9Jv+1Si3RPn0Q5FjsIV4VRbTpXa4v
ahXxvzNEgLsGbh3QKBDmziGkCKPHt068JClROdPRrod1J3seXoaE4juv5TXkuwe+
GqpcamzXDnzLSHhwBq+6zj/2pdpZnbgRRQxLRGuBEOr39PSDg0jiwm+CI10cfbqp
y4q3Vq0ivDuaBg==
-----END CERTIFICATE-----