Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File:                     ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier:          GVrR7AXL27uxgmhW0xnRAM4H3T0CJ+ln6PiykUsZTAA=
Subject key identifier:   2D:3C:F0:50:1C:EB:38:D0:71:0E:A8:58:8D:3F:7C:E2:98:32:81:D0
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer:       /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial:       01962F06B9A49A60D99581CB35CBCD104BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number:          49
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
                          2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: T7nbghaFtb5hyQHtNYn8kKCCcM7E9tHZOGihrPvzMZM=)
                          3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b9:a4:9a:60:d9:95:81:cb:35:cb:cd:10:4b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=2d3cf0501ceb38d0710ea8588d3f7ce2983281d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:51:50:1e:82:84:04:09:12:24:29:ef:f5:
                    38:08:4f:3e:f8:4c:c3:a8:aa:2b:d8:24:76:48:38:
                    7d:55:df:66:19:78:3b:dc:72:c5:5d:16:4d:11:6b:
                    cc:7d:4f:5b:83:e7:a6:bd:dc:29:77:93:7b:94:15:
                    3d:94:2c:5a:0e:71:dc:0e:0b:92:94:99:71:e9:5d:
                    e0:cd:af:d5:70:b5:cc:39:64:67:b4:18:57:5f:26:
                    b4:b2:61:ae:97:e3:b6:6c:de:b2:15:bb:37:fb:20:
                    53:f9:65:32:66:a2:a7:04:06:db:25:fc:df:29:40:
                    5f:b9:5e:5c:d1:91:15:ae:f1:92:2c:a0:36:83:0d:
                    47:5e:84:91:77:52:0b:5b:51:31:09:d5:ef:db:6f:
                    66:1b:ad:e5:63:82:b3:0b:c0:db:71:b2:6d:a4:ef:
                    2c:4c:09:5a:d7:20:4a:93:f9:f7:5a:32:2c:2d:01:
                    00:70:7f:4e:c3:9f:08:b6:40:2e:74:50:cc:84:dc:
                    c9:2e:32:2a:a4:ec:b0:c6:79:e7:98:a2:59:86:d1:
                    a7:18:68:79:19:d1:26:e8:4f:08:cb:b6:a7:ca:a5:
                    72:59:c3:69:b2:20:ec:44:5f:8b:dc:6a:ec:02:6b:
                    5f:7b:9f:fc:14:6f:2a:01:28:dd:03:8e:55:f2:0c:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3C:F0:50:1C:EB:38:D0:71:0E:A8:58:8D:3F:7C:E2:98:32:81:D0
            X509v3 Authority Key Identifier:
                keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:a9:0d:4f:58:18:84:f8:ad:d5:7c:1a:0e:cd:f3:77:13:
         8e:44:4b:22:81:42:63:2f:ab:c7:88:da:9b:b4:91:30:ba:ea:
         07:b3:57:f5:1f:f2:fb:83:7c:fb:3c:a7:38:5e:b4:cd:40:c0:
         b7:c8:6c:72:06:81:0e:e1:8c:f8:3e:74:d7:6a:1b:66:11:ab:
         40:69:e5:e0:c5:09:12:04:56:a6:fb:d4:9f:d4:7b:ce:7d:70:
         a5:0e:c1:43:a2:93:c3:9b:b1:29:d9:1a:3e:d2:bb:d9:18:9f:
         d6:d7:29:8d:c7:fc:4b:69:ee:03:a5:10:a6:ee:c9:85:30:f3:
         7d:ba:4a:21:69:f9:43:a8:bb:43:b7:4e:84:52:65:de:5b:63:
         78:95:22:e0:bb:45:3c:ff:0b:3e:df:c8:8e:38:f8:0d:db:14:
         d9:5b:d5:31:7b:20:bf:30:37:be:22:4a:7f:b4:82:bf:e9:cc:
         ac:23:d0:b5:7a:13:21:33:1b:55:4c:64:4b:3a:89:cf:8b:1f:
         68:90:c9:45:de:4b:71:ac:f5:9a:79:df:86:58:fe:45:11:19:
         8e:1e:a9:76:0b:e8:b4:80:e6:f5:42:25:f5:f0:37:19:67:3a:
         db:90:70:61:4e:2b:0a:a3:8a:36:cb:37:4b:9c:fd:52:ce:69:
         70:82:87:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----