Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File:                     zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier:          AVpRGTyn5I71ocm+GLXDDVVzKy5qwFTT/yA0+b6qSec=
Subject key identifier:   57:4D:FD:92:8D:A9:D0:47:D7:84:44:94:67:7F:FA:1B:58:A6:08:CD
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer:       /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial:       01962F068209B56BDBB14E8C4DE4E00A86AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number:          0CDF
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 3inaB-Z8N-03CL2yfe3x_VbDc5s.roa (hash: iSbmP3vh3ZBuD/tQ+I4W0ABTtwGb3llYxyQ3Q/wGCp8=)
                          2: 5ea7Hkm0SW34L_8iukOhDVRtzJ4.roa (hash: Bh3wXEj5kxu51D9giUL6vfcOwVLV+BQ8j2j4rv4c3bE=)
                          3: 61CGxBWFgu_6xuYgR1277EhVuzs.roa (hash: t6Nd1VjYIV20csBMiqnpmXOcSB9kKbylaX7adVu2vls=)
                          4: 9BUOtYErHOT5nI5nnBmuo2Xdhug.roa (hash: Rs1YqGK7wrwo+RArMme5ww//40nOwuUee+FJ/tQiW00=)
                          5: CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa (hash: X7vY45oxc1G+Q/eP9qyuj1KWi47wOFpcyf1QqrA/I6Y=)
                          6: D5NQpu5-XP7jwNLgcsTcP0-T1A4.roa (hash: F7K7cw4FjgwEqGR+eV393zGp3EyvWxLXuzKz/aV3UiU=)
                          7: DIU4HLo0odnNllaYW94Ugml67ao.roa (hash: elEgGwxKy2v1vcrJC1eNzcVW73q4S32+WPctUa6Z0K8=)
                          8: HaalQUyXvekLLFnkPZZhVXqikr4.roa (hash: XVCqv4pgA5TkYnMXtfYT+wYqQ9BP8Hx4XqIqmyrpnqM=)
                          9: I3Uc8V053uFj5fj5J5RtiNnfgAo.roa (hash: b0A6+wRSSjRxTpI7kD0JYl/s4YiHTAyHBtwpK4TyBS4=)
                          10: IDcUsurlIwrk2WfAK13tr-PGuOQ.roa (hash: AS568Huqr9TIELMxZnCn0Pucs1mbdYattJ1q0ZLCI8Q=)
                          11: MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa (hash: Scu6X5cdyahgZ+2xGCs9z4LVBnY/p6cK2ML/Vi6GaqU=)
                          12: MiTA2g-pLC5ZITOxl98HfdnHekI.roa (hash: ajv9+oi0sq8cFKqa2qx0dulW0VzD6Ty3LJc1Y6gB5hY=)
                          13: MxNe7yMIRX8ebs7AVsbBiRpllSA.roa (hash: pDnjp0EQggea9pBhHKuRbHKwdSKEn82KNKgB36PKwns=)
                          14: NE0WcAfrm3AM0n_95V8TnkNIjoo.roa (hash: oyngUFK0MUVw4Hw/iJMJwYVrpWdijuhgrFx7ZId5pc8=)
                          15: Vba_vy_gwygAN2fTwJxaF4ivvBw.roa (hash: Z+9Xq0ov0lS/kdfLrxE4yAQ08sBSc/4CSrd0q0gSQrw=)
                          16: WxskEzg_eTHvSuEBzAA22sakZZs.roa (hash: K1rJfDbGKj9KRp/YpH3B7J7gJ4JwFgTcq0fjTVjZ8TI=)
                          17: Xg9_0g6AruUdP8btK8A9lf_QDLw.roa (hash: cxSEZ+jVJKv+PAN+nsq2/IV6m//3vIXQqyGSkhq450c=)
                          18: _H31n0VX0qjA9cl9U_c9mZ2xI1E.roa (hash: 9x5PNhcIWt5ORofTPwWxEuoMULwiuxPd2nsCtzIW4tE=)
                          19: _Zs7m0Z1Y90BrPP3tkPHvTJwqVk.roa (hash: mEAwbBpKFR8+vrzzxNINj1VfPPY5QI9i1nTpJQXBCrA=)
                          20: bEmneW6IzbBtlPPMQx-0yJ93b-w.roa (hash: 3HfO6P2h6i8rds9y/v29pBIa5L9isoyl8PZHwa6DXZk=)
                          21: iwfWWtgox8qcV4q-oY9df9ePkJk.roa (hash: wvZUb4xHBU3yTd72sjISxWXalHKpPByN4rolNUsyfnU=)
                          22: mEEWlcL66O1D2m6UzXsYcjPwHpM.roa (hash: OlSkOPCbGhpW88wg888nDOtrJj0r6KHmiNy+klmxw10=)
                          23: mkE0rfBz9XK1VAIoApt7LXJKNDE.roa (hash: Xre+OBBlG8debUYJtnMWBCRl/O0gB4VgCPVdhkg/XqA=)
                          24: mm2sLdm3Ci3nySsnIMNPJSmUyA0.roa (hash: 43TegAHBHBerogm1ABmnvKv6AvzkKlq7nZVNU15KNys=)
                          25: nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa (hash: XcrtvYg+nckzsoLJ7c2APLoMZ/zvgXA8RQMD/XcqPuE=)
                          26: o_gD51WjTdSOmKxnpsPgpEBLg78.roa (hash: H7WMFNZl3PvojqlRR1S79qBLlRCJXsbv7bPNvj5FCYc=)
                          27: pLK7-mZXJstNxcxjt9sS_pyvO7E.roa (hash: l2czXwxJ/GmxKDcG6MEQVwlIdyFg6kzSfJH9MRzPVAY=)
                          28: qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa (hash: nlkxnu+zDhTWvt5yhhFwQ8By8uFeDVCXgbF+abS8Yvg=)
                          29: wgAwgA9CWZfJlg6IK-_1FTAJDm0.roa (hash: JlkKB8e21bvqYK7kidn0kF/N+/RVOlD5ZFe2Okfz8J8=)
                          30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: MeBgpx4dAQAakBqyG78orVIp7qvnnLHCWG8jEJezQbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:09:b5:6b:db:b1:4e:8c:4d:e4:e0:0a:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=574dfd928da9d047d7844494677ffa1b58a608cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:67:18:20:f2:03:0a:39:a2:b0:dd:55:30:
                    90:d9:3a:27:5d:22:cb:84:c8:70:31:89:5e:f5:03:
                    03:86:38:8d:92:cc:b6:e7:93:4a:ee:ef:27:1b:ad:
                    7a:c7:49:9c:52:00:0e:88:e0:ab:68:73:93:13:7c:
                    cb:6e:a8:28:d2:0e:f3:46:43:d7:d8:75:20:5a:cd:
                    0e:d7:46:d4:9f:22:e8:fa:96:a0:64:31:73:c3:06:
                    5d:4e:56:e5:56:77:81:fb:ae:97:f1:f8:6b:9e:8a:
                    af:f3:fd:36:1b:89:9f:90:81:bb:59:31:e8:8b:93:
                    54:87:13:23:df:1e:8d:92:44:ba:8a:b0:dd:ef:a2:
                    47:8b:a3:71:a4:15:75:0f:08:70:8f:02:db:dd:38:
                    20:fb:6b:f6:c4:3e:23:9b:d1:f0:20:49:1c:6f:ea:
                    7f:83:b0:5b:6d:af:58:80:6b:ae:cc:3c:0e:8b:a1:
                    f0:91:eb:ce:37:78:72:28:39:f3:f9:bd:d1:af:55:
                    bc:59:54:43:60:38:cd:d2:a4:c9:b0:ce:7d:a4:55:
                    a3:b1:cc:c1:e9:b3:76:3f:d2:ac:bd:33:c5:9c:0c:
                    a2:75:6f:0c:ca:33:49:df:cf:6f:37:db:bb:0b:57:
                    51:c5:41:07:02:29:d7:0c:d4:92:f7:f6:a8:e0:f5:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4D:FD:92:8D:A9:D0:47:D7:84:44:94:67:7F:FA:1B:58:A6:08:CD
            X509v3 Authority Key Identifier:
                keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:18:dd:c2:11:15:98:b1:b2:7c:04:02:84:a8:6d:9a:4d:
         9b:88:65:aa:03:5f:51:c3:b1:ae:39:44:ba:64:d1:59:36:c2:
         79:d5:ec:32:da:6c:f1:8a:27:68:6d:86:07:33:d2:9f:7f:22:
         a7:74:bf:76:f3:8f:2c:5e:16:99:8e:9b:5c:67:58:3b:56:72:
         2d:c5:64:93:b5:42:bf:8d:12:f7:f0:b8:84:77:83:37:86:92:
         bf:82:34:7e:bb:ac:76:10:fd:9b:03:01:b3:f7:fb:05:cb:6a:
         63:15:20:ef:05:bf:02:88:28:c0:39:42:19:df:f1:8a:af:b9:
         fb:b6:6a:45:ea:7d:93:c8:1f:01:4d:d9:cf:13:b0:c8:07:92:
         dc:92:90:da:2d:ce:f3:7f:cc:e9:74:67:ef:47:b5:03:0b:0f:
         06:3c:b8:f6:99:2f:a3:cc:e3:54:04:19:fe:b0:a2:af:5d:fe:
         12:d1:0c:61:3d:e1:fb:d8:50:b4:da:c6:b4:e9:48:ec:29:bb:
         90:f1:b7:76:88:dc:d0:5a:41:45:ee:d6:32:c2:12:c6:7c:44:
         e8:41:b4:44:74:ce:fd:30:99:5b:19:46:e4:02:89:b8:fb:ba:
         18:d3:73:73:4e:52:84:10:a3:39:e8:98:d5:6c:f7:9e:62:68:
         03:6f:82:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBoIJtWvbsU6MTeTgCoarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjUwNDEzMTIwMTE3WhcNMjUwNDE0MTIwMTE3WjAzMTEwLwYDVQQD
Eyg1NzRkZmQ5MjhkYTlkMDQ3ZDc4NDQ0OTQ2NzdmZmExYjU4YTYwOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjftnGCDyAwo5orDdVTCQ2TonXSLL
hMhwMYle9QMDhjiNksy255NK7u8nG616x0mcUgAOiOCraHOTE3zLbqgo0g7zRkPX
2HUgWs0O10bUnyLo+pagZDFzwwZdTlblVneB+66X8fhrnoqv8/02G4mfkIG7WTHo
i5NUhxMj3x6NkkS6irDd76JHi6NxpBV1DwhwjwLb3Tgg+2v2xD4jm9HwIEkcb+p/
g7Bbba9YgGuuzDwOi6HwkevON3hyKDnz+b3Rr1W8WVRDYDjN0qTJsM59pFWjsczB
6bN2P9KsvTPFnAyidW8MyjNJ389vN9u7C1dRxUEHAinXDNSS9/ao4PUtxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdN/ZKNqdBH14RElGd/+htYpgjNMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMcY3cIR
FZixsnwEAoSobZpNm4hlqgNfUcOxrjlEumTRWTbCedXsMtps8YonaG2GBzPSn38i
p3S/dvOPLF4WmY6bXGdYO1ZyLcVkk7VCv40S9/C4hHeDN4aSv4I0frusdhD9mwMB
s/f7BctqYxUg7wW/AogowDlCGd/xiq+5+7ZqRep9k8gfAU3ZzxOwyAeS3JKQ2i3O
83/M6XRn70e1AwsPBjy49pkvo8zjVAQZ/rCir13+EtEMYT3h+9hQtNrGtOlI7Cm7
kPG3dojc0FpBRe7WMsISxnxE6EG0RHTO/TCZWxlG5AKJuPu6GNNzc05ShBCjOeiY
1Wz3nmJoA2+C5Q==
-----END CERTIFICATE-----