Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File:                     zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier:          GmYupQoIrojsNDH1ETDAwl7nJtz/UK0xSngWlOmEveY=
Subject key identifier:   46:EE:11:EB:3E:01:8E:9D:55:40:37:B6:C3:39:63:70:47:9A:BD:04
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer:       /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial:       01962F74ECD7652A60759273C5086A34AB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number:          0F62
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
                          2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
                          3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: K0WJ8AXOOsujfvMNAMLTyuL9cpLPYwM4rU9rjExWoEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ec:d7:65:2a:60:75:92:73:c5:08:6a:34:ab:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=46ee11eb3e018e9d554037b6c3396370479abd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:43:91:49:14:95:2b:29:9c:4b:f9:53:11:2a:
                    6c:e4:ba:40:f9:e3:6e:f3:9e:a0:f4:f1:64:84:eb:
                    10:98:3a:fc:3a:f2:cd:f6:64:76:04:57:5a:94:ad:
                    86:44:dd:39:4d:59:4f:c7:66:f4:0f:b1:7c:be:cf:
                    11:61:ab:5a:9d:24:41:16:9d:d3:8f:cf:cd:bd:46:
                    07:27:ef:f8:3a:c1:c8:2b:ef:43:8d:a5:ec:3a:15:
                    10:84:69:5b:91:7c:ee:6b:a6:68:24:7e:01:ee:e5:
                    12:e2:f8:fa:40:62:b3:fb:2a:c4:56:ed:2e:64:29:
                    cf:d3:b4:b3:d5:e6:fd:d8:7b:fe:d4:b3:a6:86:b2:
                    0e:dd:c9:9f:1a:80:74:4d:59:ba:59:93:be:ab:14:
                    00:14:d7:e3:d1:88:9b:3d:e3:d3:64:f9:dd:04:69:
                    64:f8:a5:f9:17:56:61:70:0e:21:2d:a9:45:fc:7c:
                    e1:c5:48:7d:a1:1f:5f:6e:61:75:8c:bc:39:b5:0c:
                    75:62:5d:65:e5:26:28:4a:3e:65:22:16:66:d0:1e:
                    e4:1e:44:37:89:35:b0:4a:7e:82:7c:3c:f8:ba:22:
                    e3:fe:97:49:2e:1e:2c:68:02:4f:38:96:c0:38:41:
                    05:aa:5a:34:5b:9e:2a:13:89:18:04:7b:63:ef:1c:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:11:EB:3E:01:8E:9D:55:40:37:B6:C3:39:63:70:47:9A:BD:04
            X509v3 Authority Key Identifier:
                keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:72:61:3e:c3:b1:21:d3:22:e3:53:1b:7e:e6:18:19:89:fd:
         d7:82:99:aa:12:64:e4:e0:4e:22:eb:70:e7:50:d0:e8:ec:4a:
         14:6f:37:c8:04:64:c4:40:2a:ce:b7:72:ed:f6:42:f7:1c:85:
         4f:62:a3:f1:ce:c4:ac:28:23:1e:2a:2a:70:03:9b:1a:0f:ec:
         5b:b3:ef:5d:7f:e4:57:b8:e4:e7:ec:a9:ca:1d:14:96:95:3f:
         08:f6:72:d7:68:f3:3f:0a:5c:09:57:2c:d9:b7:f8:f8:8c:bc:
         78:37:b1:6e:ba:15:09:4a:92:72:5a:5b:a2:ec:59:3c:db:f5:
         6d:ec:a8:91:79:09:95:4a:4c:cb:a4:0c:13:cd:ca:f0:84:02:
         2e:86:21:d4:ae:8d:c9:85:bd:64:ed:0c:8f:de:f4:10:4c:92:
         22:f5:47:c3:f7:d3:96:58:d9:0b:74:a0:f2:0e:10:a6:36:9b:
         0a:d2:7d:b9:a0:72:e5:1c:05:4a:7c:60:68:54:81:77:d3:61:
         f1:c2:53:69:65:a3:a4:48:e4:b1:d4:1a:8c:f1:bf:36:09:bb:
         c5:6a:e4:93:83:ce:88:07:8b:5f:fb:20:24:96:d3:37:5c:73:
         d5:63:8c:7b:3a:2c:0b:d1:cc:d6:6e:6f:4b:12:5d:a5:75:40:
         26:12:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----