Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File:                     skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier:          FJQTSHZIw5/o0JjLE3ueBVtVqkhORQ4f3lAWurRyRTA=
Subject key identifier:   49:29:64:DE:79:83:7C:A4:B1:EF:6C:4F:2F:F9:30:BD:D0:FE:CB:E8
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer:       /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial:       01962E992491B0D74F4B38829107E33E39BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number:          09CE
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: Y5LyyYUOXTFEg08dRczspK_kl2Y.roa (hash: ttMluHxYVIHmrZ73+Be4i0HFe1udkGlrlxsl6kstfvI=)
                          2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: LkxbBhv1h7TgLzT9blr1B17QnuyU3ntPvlNAPaZw9IM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:24:91:b0:d7:4f:4b:38:82:91:07:e3:3e:39:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=492964de79837ca4b1ef6c4f2ff930bdd0fecbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:5f:33:dd:fe:50:4e:a2:14:31:6b:67:10:
                    5e:50:ea:d6:8c:f9:a0:8d:1e:bd:a5:a8:e4:83:6a:
                    40:e1:57:2f:d2:6e:e1:df:9b:c6:b5:71:17:87:50:
                    fd:53:07:ed:65:35:6b:54:75:6b:29:e1:ac:20:d5:
                    52:13:c6:94:f9:f2:90:af:ae:58:12:39:5f:74:be:
                    f3:1c:34:45:ac:51:e7:1e:aa:4a:1e:9d:7b:57:6b:
                    31:0a:dd:df:39:de:41:06:df:90:e8:f1:5a:6c:8d:
                    55:08:6d:5f:e3:ea:1b:3c:1a:85:c3:35:a1:7e:dd:
                    0e:be:05:16:08:7c:d1:bb:f5:13:cd:55:c0:6a:a1:
                    0a:9c:c7:26:e3:e6:08:13:12:8a:5b:c4:7f:a3:e4:
                    1b:24:59:26:6b:2f:bc:0d:72:ab:49:7b:c9:e9:27:
                    e0:7b:5a:5d:b2:d1:ea:d0:0d:36:dc:e7:52:1f:5b:
                    07:51:c8:64:af:80:5d:5d:84:b0:9c:0d:8b:24:ad:
                    e5:d9:4d:1a:7c:0c:d4:ce:52:b7:5b:ce:7c:2f:56:
                    24:ff:7c:5b:e2:56:a1:8c:91:b2:e1:96:89:cd:27:
                    be:5c:71:9c:5c:fe:13:70:7a:a5:45:9b:fe:b7:17:
                    77:98:4f:17:8c:9b:54:9f:42:6f:8d:d8:1c:b5:4e:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:64:DE:79:83:7C:A4:B1:EF:6C:4F:2F:F9:30:BD:D0:FE:CB:E8
            X509v3 Authority Key Identifier:
                keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bf:69:bc:c2:92:75:c4:87:c0:4e:21:69:81:58:a7:ca:0d:
         80:78:e9:a9:a5:20:b8:5a:3c:5a:49:6d:da:d8:54:0b:44:3a:
         14:47:bf:3c:9c:f4:e0:22:e2:05:96:c6:54:d9:58:3a:e4:f1:
         8d:65:b0:4c:4b:61:cd:59:13:1d:a6:03:12:42:64:ce:7c:2b:
         98:46:8c:3b:44:e2:8c:b5:7b:40:73:e9:3b:9a:57:b3:d8:1e:
         8a:ae:da:d3:1f:a9:ab:42:79:b4:64:29:97:b3:9a:be:d9:f1:
         c3:9a:e3:e7:e7:37:8c:f9:7f:f9:4e:62:b0:77:5e:76:a9:2a:
         74:3a:37:b0:8c:0c:80:0c:2d:92:18:b0:af:80:07:9a:0b:c5:
         7d:d7:d5:17:5d:39:cf:50:8c:e2:6e:2f:bd:d3:67:f3:e5:43:
         75:b2:f0:9d:4d:bd:87:f6:64:d4:b2:77:d7:46:7c:f3:5a:7a:
         3e:98:4a:ee:6f:82:45:54:1c:3f:96:7a:a6:a3:c2:de:50:47:
         ad:76:a3:5f:14:77:68:bd:db:98:34:88:b0:89:ca:fe:43:f3:
         1a:ef:33:f4:96:0b:c1:55:0e:0a:85:df:97:79:6b:92:e4:9c:
         63:43:66:d4:4a:e8:06:48:aa:92:3e:fb:fe:90:7d:61:0d:0f:
         49:e3:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----