Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          caec9ViOSE/v1jWYs4MzcNWaJLIELfhXe8dHzmWQOhw=
Subject key identifier:   32:4F:9C:FE:03:4F:DC:73:48:9E:8C:38:90:DD:47:65:FD:DB:57:52
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       01962F0699286136CEE5A364CA8BBCB01D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          052E
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: M-hl5kfxem0FvK73oMF7geibFPw.roa (hash: kiasuv7TGgsqASbNQOaoav2Adv17JAVzsKrjP2y4W90=)
                          2: MR2SpvAg6EKH9P9IdFI47Bp2qbY.roa (hash: bCpvV1/uI5x/Oj1Nb1ZTA1IC/FEWUDBDGVun6QLD8Vw=)
                          3: cFotkS6ux0_MLeGzyK_DeWIUeaM.roa (hash: 4CuT/CFbyV2w8Qh8mF53vlpw9DoBWeAo/yfxDDSS1VE=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: JfliTgm9kGrcfjcDE2icwF+wli19z8j6iqscBc53PKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:99:28:61:36:ce:e5:a3:64:ca:8b:bc:b0:1d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=324f9cfe034fdc73489e8c3890dd4765fddb5752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:4a:02:1b:41:fb:66:d3:2b:ee:5e:32:08:
                    c4:18:fb:17:b3:1c:8c:5a:41:52:78:3a:d9:7e:57:
                    63:b3:7c:01:3a:22:55:33:e6:6c:b7:11:3f:91:61:
                    5f:ee:60:a4:a3:47:b3:bc:18:0b:ea:1c:05:58:4b:
                    66:39:12:91:38:ed:00:d2:06:c2:29:58:27:60:94:
                    9e:8d:c9:fa:29:a7:94:90:1b:40:67:d2:39:9d:79:
                    2c:d8:fa:60:2d:69:96:64:1a:fa:b9:bb:29:8c:b6:
                    a4:67:f1:5b:fc:f6:88:4b:66:05:c5:eb:cf:47:61:
                    84:ac:df:7f:b7:25:38:c9:22:2d:ff:5e:f1:f3:82:
                    83:26:9f:b0:c2:7b:3b:6c:b1:8e:23:ef:b5:ee:cf:
                    c2:69:fd:2c:a8:53:a7:0e:cd:85:f4:b7:8d:47:81:
                    91:89:62:07:ea:29:bb:4d:73:c3:02:ac:95:6e:30:
                    3f:0d:b6:2c:9d:94:d2:b7:1b:a0:f7:cb:ba:c9:66:
                    85:e3:ab:ad:7c:5e:43:e8:3a:4e:fd:4a:6f:e8:44:
                    77:f6:65:1f:4f:1d:06:92:c3:04:bf:58:d0:3c:a0:
                    86:df:1c:56:06:dd:7e:27:0c:82:36:59:12:38:5b:
                    aa:6f:fe:fa:c8:0b:2a:16:1b:27:89:4a:e4:cc:09:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4F:9C:FE:03:4F:DC:73:48:9E:8C:38:90:DD:47:65:FD:DB:57:52
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:de:4c:8b:ef:53:33:47:4e:64:5e:5d:bd:c5:2a:60:c1:
         d3:64:b1:31:bb:65:7c:26:32:ca:b5:7b:0a:51:3f:5b:a5:70:
         44:6f:bd:52:86:24:4d:b0:8f:aa:4e:83:3f:8a:18:44:fe:55:
         c0:ce:5b:3e:5e:80:76:e4:4e:fb:7e:34:d3:70:a8:e1:a7:87:
         e4:5d:98:7d:cd:7a:3b:eb:b8:51:aa:56:cf:b9:8d:a3:b7:60:
         81:4c:11:4f:5b:07:52:38:b4:c9:6c:83:ca:18:71:50:88:b3:
         ef:c9:42:88:5b:ee:09:de:b3:ae:91:79:af:5b:c1:d1:7a:53:
         d2:04:f5:c0:fd:82:ca:21:70:22:8f:4c:a5:14:92:0b:da:81:
         c9:c8:3b:bf:04:1f:e4:e5:21:a4:98:53:7f:a8:01:ba:6b:11:
         4f:8f:e8:da:d5:d0:3e:44:f7:75:e6:0c:15:33:39:dc:d4:d1:
         e2:df:20:fe:d2:31:20:69:03:1a:e5:86:39:3b:3d:a7:bd:ee:
         8e:03:b6:eb:86:ae:57:eb:cf:80:39:42:35:21:17:28:3d:d1:
         ed:10:3e:4b:ca:f3:34:9d:bc:7e:4a:0f:8d:65:84:a0:5a:67:
         c0:3c:5e:fb:68:09:bd:e5:24:5c:82:3b:fa:67:9c:b7:5c:13:
         de:27:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----