Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
File:                     zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json)
Hash identifier:          IUtWpjvzmcnrTUQ7Imu7tnek+qWsGaMO3BCFoKehOfg=
Subject key identifier:   DB:87:A8:B7:82:68:6C:36:C1:BF:E5:76:C4:3D:8E:B8:89:C0:42:22
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       0195E00FC9F6EEFD49F85336C207D794FB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
Manifest number:          14DB
Signing time:             Sat 29 Mar 2025 04:01:25 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:25 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:25 +0000
Files and hashes:         1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=)
                          2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=)
                          3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=)
                          4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=)
                          5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=)
                          6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=)
                          7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=)
                          8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=)
                          9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=)
                          10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=)
                          11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=)
                          12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=)
                          13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=)
                          14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=)
                          15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=)
                          16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=)
                          17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=)
                          18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=)
                          19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: dD1ZtxOb8evhHdPmUf2ZvhNAJPLzF2d1Dl/2cM4rJAg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:c9:f6:ee:fd:49:f8:53:36:c2:07:d7:94:fb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Mar 29 04:01:25 2025 GMT
            Not After : Mar 30 04:01:25 2025 GMT
        Subject: CN=db87a8b782686c36c1bfe576c43d8eb889c04222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:d3:2f:e3:44:12:5b:cb:5e:f2:ee:6e:76:
                    ba:f3:88:2d:a0:c0:c2:dc:e5:3d:b3:24:f8:24:39:
                    d5:53:6b:ff:99:02:66:d1:51:12:ce:5a:4a:87:0f:
                    59:48:aa:6e:a0:8b:6e:54:4b:7f:81:18:68:76:14:
                    98:d5:73:b4:68:28:ac:c6:55:38:4b:a1:b3:4d:cc:
                    ae:d6:3c:05:d7:cd:c5:cd:e4:c2:1f:30:46:9a:51:
                    cb:c5:fe:1f:d7:df:e3:e3:ac:68:8f:be:60:60:a8:
                    c6:e1:c6:e3:cc:e2:9f:cd:a1:a1:f3:79:05:dd:8c:
                    9e:00:35:fd:5b:82:08:5d:bf:df:8b:47:9b:b5:e2:
                    70:39:c5:0b:64:4e:dd:ac:9c:03:e3:01:cb:37:13:
                    92:56:81:65:c4:f8:23:1d:53:d0:45:78:da:f0:d1:
                    b5:62:d0:f4:37:86:00:f1:a8:c8:0f:03:80:f3:a0:
                    0f:32:78:37:ab:35:19:f0:41:fb:52:7e:ab:ae:f8:
                    84:28:40:3a:e3:b8:3f:d7:4c:d7:6b:5b:3f:14:ca:
                    f3:b8:e3:2d:f0:fe:f5:3e:34:82:da:12:cd:25:6f:
                    52:f0:c8:da:64:f9:09:78:cd:8e:e8:a2:9b:7a:7f:
                    4a:74:f5:cb:4c:2c:2c:e4:dc:a0:1a:92:6f:b0:36:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:87:A8:B7:82:68:6C:36:C1:BF:E5:76:C4:3D:8E:B8:89:C0:42:22
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:bc:0a:26:b9:97:b4:bf:f8:0c:46:ca:45:25:4c:50:7d:
         53:ef:eb:37:a6:84:b6:7a:eb:01:78:36:c0:01:fd:5e:c9:71:
         5a:d3:3b:46:64:4d:83:78:14:1c:c1:d5:9f:91:9c:b9:cd:be:
         44:fe:f4:07:7a:43:79:6c:9f:1b:de:ac:6b:1a:e8:6d:fa:69:
         42:67:66:de:73:0d:91:ce:47:98:ea:ef:25:6f:ef:39:fa:38:
         38:05:8d:94:38:0a:6a:5a:e0:69:69:de:f8:f0:09:1f:f0:61:
         c9:99:12:07:43:ca:1e:5b:64:cb:09:54:fb:ed:ec:4d:fa:fc:
         98:d3:04:2b:61:69:31:d4:74:f0:0b:7c:1a:ef:e2:8b:fa:df:
         1b:ec:f2:10:39:c1:e2:18:84:f8:8f:7f:a2:be:99:14:7a:69:
         7a:f3:2a:07:28:a8:97:9a:d9:86:11:00:a8:0f:3a:34:b4:2f:
         b2:74:d1:09:49:aa:97:a1:eb:0f:4f:2f:af:01:98:9e:21:a8:
         6c:74:fe:c0:cf:a9:8e:20:0d:ae:71:f0:6c:e5:43:0b:83:56:
         69:b3:94:2d:5b:ab:5e:08:ff:36:d2:7d:d9:6b:71:6a:4c:b7:
         cb:01:26:71:fe:b6:27:08:08:21:ea:bd:0b:e0:c5:38:d1:ab:
         d0:c4:af:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD8n27v1J+FM2wgfXlPuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy
NWYxZjMwHhcNMjUwMzI5MDQwMTI1WhcNMjUwMzMwMDQwMTI1WjAzMTEwLwYDVQQD
EyhkYjg3YThiNzgyNjg2YzM2YzFiZmU1NzZjNDNkOGViODg5YzA0MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gTTL+NEElvLXvLubna684gtoMDC
3OU9syT4JDnVU2v/mQJm0VESzlpKhw9ZSKpuoItuVEt/gRhodhSY1XO0aCisxlU4
S6GzTcyu1jwF183FzeTCHzBGmlHLxf4f19/j46xoj75gYKjG4cbjzOKfzaGh83kF
3YyeADX9W4IIXb/fi0ebteJwOcULZE7drJwD4wHLNxOSVoFlxPgjHVPQRXja8NG1
YtD0N4YA8ajIDwOA86APMng3qzUZ8EH7Un6rrviEKEA647g/10zXa1s/FMrzuOMt
8P71PjSC2hLNJW9S8MjaZPkJeM2O6KKben9KdPXLTCws5NygGpJvsDYslwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuHqLeCaGw2wb/ldsQ9jriJwEIiMB8GA1UdIwQY
MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt
YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj
LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR28Cia5
l7S/+AxGykUlTFB9U+/rN6aEtnrrAXg2wAH9XslxWtM7RmRNg3gUHMHVn5Gcuc2+
RP70B3pDeWyfG96saxrobfppQmdm3nMNkc5HmOrvJW/vOfo4OAWNlDgKalrgaWne
+PAJH/BhyZkSB0PKHltkywlU++3sTfr8mNMEK2FpMdR08At8Gu/ii/rfG+zyEDnB
4hiE+I9/or6ZFHppevMqByiol5rZhhEAqA86NLQvsnTRCUmql6HrD08vrwGYniGo
bHT+wM+pjiANrnHwbOVDC4NWabOULVurXgj/NtJ92Wtxaky3ywEmcf62JwgIIeq9
C+DFONGr0MSvkA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:06:49 2025 by rpki-client