Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File:                     Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier:          V/pYjPvp8oNnbRxohWOMJRg+ppVWop352mrrgHpRRx8=
Subject key identifier:   B1:43:4A:B0:3F:CC:92:5C:D5:3F:60:44:4A:0F:4A:0C:87:FF:36:B8
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer:       /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial:       01962F74BABF65126C84A7453B588AB8E2BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: J8TxeAmZBzINa9syBZ1B4yTXcxY.roa (hash: 2QfjawOPNl3mivz2h5LwmzlkbdOnVy10wna7TIvLBVY=)
                          2: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (hash: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=)
                          3: Z2S57soliueMTVEyGovf75orajw.crl (hash: SoaCLqyRooFS2Rh9DkZipGh8XT9i4LlWwafm5w6DyI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ba:bf:65:12:6c:84:a7:45:3b:58:8a:b8:e2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=b1434ab03fcc925cd53f60444a0f4a0c87ff36b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:04:e4:95:f2:56:af:c0:4a:99:86:49:47:
                    40:7a:42:9c:c9:41:80:df:ce:44:02:ff:46:65:9e:
                    18:f9:7f:df:7e:bd:da:eb:0b:53:1e:ea:5d:91:a6:
                    97:2f:33:56:53:21:84:be:a7:b4:c7:83:66:cc:85:
                    c5:23:35:24:69:76:3b:14:54:11:45:13:b8:50:1b:
                    e4:f3:61:58:95:e0:59:3b:7f:72:8b:7a:37:20:6c:
                    fd:7c:77:39:4d:f0:e0:85:ab:38:2d:3c:59:bb:5a:
                    37:3b:cc:d4:75:9e:01:29:ca:53:f7:83:9c:67:a1:
                    85:c7:2e:a1:fc:95:53:f8:a8:a5:81:9c:9e:c3:39:
                    ac:4b:f3:da:cd:17:8d:e9:c1:51:aa:e2:ce:4f:08:
                    cd:fc:b2:3b:e7:54:a6:b8:4e:0e:76:b3:b7:92:d3:
                    c8:45:88:98:db:27:7a:a0:f4:1b:92:81:ee:d8:27:
                    37:95:f4:57:71:b3:d5:0a:ca:59:10:bc:b8:a2:c4:
                    5a:9d:de:8d:09:8e:24:53:f4:fd:cd:8f:74:b2:79:
                    9a:15:d0:06:8a:4a:67:d3:fc:07:d9:b9:a0:b0:2f:
                    1e:d3:f9:21:10:1a:8c:f2:57:54:4e:7b:05:84:ee:
                    90:35:47:e7:03:d8:34:59:3b:bc:2d:ad:38:1a:7c:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:43:4A:B0:3F:CC:92:5C:D5:3F:60:44:4A:0F:4A:0C:87:FF:36:B8
            X509v3 Authority Key Identifier:
                keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8e:3d:78:4d:81:de:a6:49:e2:20:2b:2b:b3:ea:5a:ae:6c:
         de:24:88:14:38:03:16:a9:ec:af:db:92:22:4c:98:ec:24:6a:
         c7:4e:2b:f1:51:1e:28:4a:c4:fc:bd:d6:b1:76:41:7d:33:e3:
         e4:01:2b:48:70:e0:0b:7d:67:bc:e3:fa:5b:95:39:ea:6c:42:
         f5:e2:10:61:10:94:f4:ef:0b:12:85:08:ab:24:ec:45:b3:30:
         60:10:18:4d:ac:52:74:86:6e:88:bd:49:5f:2e:66:77:22:58:
         21:7a:c1:7a:20:0e:fc:65:5a:b9:47:a0:f1:f8:15:8f:a3:cc:
         1a:a4:bf:f4:8a:df:fe:e7:c4:18:fb:1f:a1:8a:9c:72:e4:04:
         dd:c2:b2:f1:58:bc:30:ab:10:f7:86:64:29:f3:01:ad:d6:82:
         41:88:2f:8b:87:13:84:49:14:3c:f2:71:60:a1:65:42:46:d9:
         ec:25:a7:d6:9b:69:fa:79:dc:70:26:a5:4c:b8:96:ea:78:89:
         4f:cd:b6:0c:ba:e5:9a:a0:1d:6f:94:5b:fb:12:25:d0:1c:56:
         7e:c6:ba:80:08:07:3f:cd:a4:2f:77:8a:a3:69:1b:14:6f:00:
         dd:2a:fd:06:b1:21:52:cb:6d:6d:58:d1:8a:87:e5:67:5e:40:
         8b:90:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----