Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File:                     1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier:          XW1uhRH8GqC0rQURHaOmc7pONvO9xqR8ZlSjSzaWk+w=
Subject key identifier:   8B:BC:FC:AC:85:82:B9:77:96:E4:62:F1:6F:41:EE:77:55:F8:B0:83
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer:       /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial:       01962F74E82D5AB005384C5230C385458863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number:          1225
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: w0rZ0XzZUamwHNixE/DOcrPie2RelOY3BTfe/WCh03E=)
                          2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e8:2d:5a:b0:05:38:4c:52:30:c3:85:45:88:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=8bbcfcac8582b97796e462f16f41ee7755f8b083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:5d:a3:88:21:0b:78:d1:66:3f:8a:7f:35:
                    67:ca:55:54:41:23:38:eb:c5:b1:2b:8b:68:21:cd:
                    ba:01:96:eb:5a:af:88:5f:45:47:98:57:0a:01:98:
                    7d:76:eb:55:38:f6:3a:47:e8:c9:a9:c1:8c:c8:1f:
                    d2:c2:f4:1d:ec:6c:4c:95:b0:f3:0e:77:7e:e2:1d:
                    64:ca:9a:75:ba:20:41:01:9f:98:c2:4b:ea:b5:24:
                    de:9e:a6:8f:41:1d:a2:ac:a2:1b:d9:76:5c:28:d7:
                    43:c9:c7:d6:2b:10:e1:9a:6c:39:01:6e:d3:55:bb:
                    d2:e3:e9:58:ed:9a:af:07:23:27:86:a9:08:7d:b4:
                    68:4d:29:ef:c1:e9:91:bc:1c:2f:27:4e:3b:34:ee:
                    9c:f1:28:42:53:ba:59:91:67:8e:8e:85:6c:74:a2:
                    bd:d9:c2:bf:f6:56:09:a8:32:c8:20:7a:16:55:1e:
                    c5:7f:8f:09:5e:64:1b:e1:3f:cf:f5:09:f5:fe:c7:
                    a5:43:9d:b0:76:d0:26:17:23:a9:82:28:3d:18:32:
                    22:fc:97:d9:58:4b:aa:58:4b:57:71:d5:7c:bd:33:
                    c4:d9:c4:c9:bc:a6:46:3d:2b:01:60:1e:92:c6:09:
                    48:44:4f:52:24:42:63:ba:7b:53:50:ce:66:c9:32:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BC:FC:AC:85:82:B9:77:96:E4:62:F1:6F:41:EE:77:55:F8:B0:83
            X509v3 Authority Key Identifier:
                keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f8:ae:2a:7c:8a:98:ca:23:cd:f2:d0:61:7a:40:1b:b6:d5:
         7f:86:ac:c7:ff:48:1d:5a:50:b1:40:da:0d:67:86:ff:a6:35:
         94:06:41:96:57:5e:da:b8:73:e8:b2:dd:6b:e5:d2:c4:70:21:
         a6:d8:a1:50:f7:5d:a2:e5:67:2a:bb:a2:62:49:ad:b4:fd:4b:
         ef:ad:9d:69:9a:1b:c8:6d:0d:4c:98:2f:ea:6f:83:03:20:1f:
         cc:92:97:57:4c:39:b0:29:d3:8e:b8:05:d4:18:48:a5:fb:16:
         8f:4e:1b:6e:17:5e:b7:dd:41:c3:21:0f:d9:4b:b2:62:6e:cb:
         61:fb:94:0f:a7:7b:3f:de:e7:66:6d:50:66:8f:00:e1:81:70:
         9a:62:e0:57:21:15:74:25:b5:08:a4:67:f8:6f:27:74:26:97:
         be:84:4e:5f:77:00:0c:0c:22:0b:52:d7:21:26:34:64:b6:b7:
         23:c3:10:02:50:d7:8c:d3:e0:8e:cf:c3:f2:95:5a:0f:19:d9:
         c3:7b:e1:a7:17:b2:8b:09:3b:45:4f:44:75:db:1f:aa:91:f9:
         02:ee:cd:b7:8c:d2:f5:86:68:39:5e:03:55:a3:71:0e:e2:f6:
         05:6b:d9:d5:e7:e7:93:7d:34:ac:75:b8:b5:16:f6:18:f8:f0:
         ff:31:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----