Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
File:                     zf9bPNry6tG8MwlBG_lJLNmHr7o.mft (raw, json)
Hash identifier:          brXDokaSaiQNHktGDK4j7zmEIN9BedbHVzxlgjL4W+g=
Subject key identifier:   13:A5:B3:11:B6:FD:4D:A6:82:FA:78:A7:97:7C:37:05:8D:E0:3C:F5
Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Certificate issuer:       /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Certificate serial:       01962DF426F785E9FDCA3E792A42C566900B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
Manifest number:          0344
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa (hash: 4LCjfvPAnVknZ+aHhkSXzNTjWeSMT085uGaEj2C566Q=)
                          2: zf9bPNry6tG8MwlBG_lJLNmHr7o.crl (hash: CHuFmNb8uoyKBAsZK1aVdwx8Y6JCvvZXGd3gTkL1Xvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:f7:85:e9:fd:ca:3e:79:2a:42:c5:66:90:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=13a5b311b6fd4da682fa78a7977c37058de03cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:b7:98:af:21:3d:44:41:d1:a7:0b:73:99:
                    03:9d:e9:c2:18:ee:5f:6d:25:5e:49:4e:62:2d:f1:
                    42:b7:d0:aa:47:06:a2:46:7d:94:4a:a6:5e:64:85:
                    56:a8:21:d8:ec:19:02:2f:79:fc:42:4f:3d:aa:cb:
                    2b:ce:8e:3b:c3:b4:c9:f7:5c:46:8e:81:2c:69:94:
                    90:e3:ee:68:36:a0:e1:b5:01:6c:02:90:43:97:c9:
                    56:cc:70:a7:e4:14:0c:3a:4d:78:e5:50:1f:28:23:
                    39:be:c1:b8:fa:c4:e9:0d:51:6a:1d:3d:b1:3b:f2:
                    8c:78:55:be:11:10:5a:e8:49:e5:bc:8c:d4:cb:60:
                    6e:8e:d0:3c:ff:8e:e8:e9:08:1a:55:50:96:7d:57:
                    4b:1b:9f:31:aa:b6:0c:dc:af:a1:0a:01:50:b7:91:
                    b9:39:95:52:05:20:fa:11:00:0f:53:24:6b:18:f6:
                    74:73:ac:92:f9:bf:26:45:ed:63:7f:d8:97:e5:65:
                    bf:a0:c2:04:c5:54:ce:65:14:80:b5:cf:ae:65:b2:
                    d6:f9:6c:38:e2:64:19:73:55:a9:a9:25:be:cc:50:
                    16:16:13:f1:c9:d9:79:42:c0:1f:4d:ef:ba:13:f7:
                    0b:7a:10:6d:62:d7:ec:6b:09:12:e5:c7:e0:3a:60:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A5:B3:11:B6:FD:4D:A6:82:FA:78:A7:97:7C:37:05:8D:E0:3C:F5
            X509v3 Authority Key Identifier:
                keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:4d:85:16:52:43:f7:f0:67:fe:57:63:3d:30:f2:b8:ff:b7:
         bd:a7:10:45:93:bb:df:8e:71:05:7c:cd:37:3e:44:4d:5c:83:
         56:39:b9:f0:d0:d7:07:86:7b:5c:72:91:7f:e9:94:e6:15:1d:
         cd:3b:a2:a7:f7:b2:37:86:9a:0f:5f:a3:53:63:40:b5:0b:11:
         99:6f:5a:34:d6:01:36:b2:ce:c7:66:de:ab:08:6c:8a:36:ca:
         98:3c:a0:81:29:cc:49:f4:2b:4f:af:4f:7c:8f:69:0c:b5:eb:
         eb:d6:f1:45:11:2d:2c:fc:3a:9a:df:05:03:41:ea:72:f1:52:
         7c:3a:6c:5e:98:d6:69:87:9b:20:1b:bd:c3:03:ec:cf:84:99:
         47:77:79:e7:12:56:c4:11:5e:79:a7:46:87:85:d4:b6:88:26:
         cb:bf:dc:4c:bb:9e:5e:98:c1:ab:2a:9f:0c:bf:07:94:3a:7e:
         5a:70:31:17:1d:90:ae:fa:f7:8d:9f:ca:86:5f:ba:59:e3:b0:
         66:8f:99:43:5e:14:69:c6:2c:81:de:63:41:54:9d:c4:ba:ff:
         cd:8b:ba:c5:a1:aa:32:be:e6:63:8b:8d:e4:c1:45:0c:49:0d:
         2e:80:f6:e7:f2:25:8f:57:0f:ce:13:5b:53:e4:50:4e:37:08:
         00:62:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----