Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          duWwUDLtuY4YV36FdObvxIXFE+UvWD8AA/K8qiCDHYE=
Subject key identifier:   FD:EF:78:D6:A3:7A:E9:D7:FC:8D:77:2B:56:AE:63:7E:76:27:67:0B
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       01962F0688BF982C6FB34519A43C7416FED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          10E7
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: CmLcvrzndB6LeWvaSRWeGJHHD2mggH93X1+NJI5WrxQ=)
                          3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=)
                          4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:88:bf:98:2c:6f:b3:45:19:a4:3c:74:16:fe:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=fdef78d6a37ae9d7fc8d772b56ae637e7627670b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:ce:52:d6:6f:35:57:a6:4c:9e:f0:da:38:
                    f6:8d:b9:0f:01:7f:fe:39:cc:da:b4:34:ee:56:20:
                    a8:96:92:fb:48:16:11:29:e2:b9:d3:da:49:fc:4a:
                    d0:21:66:fe:3b:5d:b3:0c:ff:ec:5e:08:1d:e0:2a:
                    93:7f:24:e1:9c:e0:68:c4:ea:a2:bb:3f:70:88:56:
                    6b:58:73:76:80:21:3f:01:8a:c0:84:2c:71:26:85:
                    8a:20:a0:3f:2f:d7:de:18:78:af:03:a2:62:13:c1:
                    84:88:0d:85:e0:ac:c9:0c:d6:06:51:2d:fb:42:4e:
                    d3:07:16:7e:36:92:c2:1d:c8:70:af:f7:ef:91:5c:
                    32:da:d7:58:b0:37:47:c0:77:a0:f9:c6:48:35:1a:
                    c1:5d:b1:20:bf:6b:bf:2b:3a:56:f2:d0:e9:eb:db:
                    a9:bf:10:f4:ca:ff:95:26:f9:2b:c2:0b:81:76:d1:
                    26:51:2a:ae:20:50:d7:1c:9f:f2:3a:c2:05:3a:e1:
                    9b:f2:02:94:2b:72:db:a1:78:fe:91:d8:41:bf:81:
                    bc:f2:2a:3d:e8:79:67:91:20:67:9a:74:c5:16:b3:
                    31:c4:3f:02:30:8b:0e:59:0f:52:1a:df:e6:18:d2:
                    57:80:b2:92:be:76:9e:cc:57:ff:c6:e9:85:38:f0:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:78:D6:A3:7A:E9:D7:FC:8D:77:2B:56:AE:63:7E:76:27:67:0B
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:e4:10:41:2a:9c:eb:99:85:28:29:4d:a4:29:24:7b:38:
         63:14:87:70:da:1c:5a:89:15:4a:db:d6:1f:0d:13:07:c7:09:
         24:98:77:2c:80:b6:e8:4b:8e:65:3b:cb:2a:dc:18:ab:15:0f:
         7c:26:2b:37:93:17:86:9f:36:d0:a8:10:fa:e2:cf:40:11:61:
         93:33:43:ce:dc:92:d5:fe:f2:60:d1:18:27:a9:cf:43:c9:2c:
         0e:fe:8d:21:dd:6d:60:48:06:e3:d4:b5:f9:96:0d:c2:2b:80:
         3f:64:17:32:85:e7:7a:65:67:6c:4d:b1:af:4a:95:6f:13:54:
         37:93:8f:24:f1:0d:19:9a:85:60:2d:16:f6:7b:f3:62:1b:4f:
         45:20:b9:ef:23:9f:46:59:68:5b:12:6a:80:21:2f:59:12:a3:
         84:a4:67:dc:26:02:07:d8:de:e9:f8:35:fa:78:7c:ea:91:fa:
         2b:56:91:e5:06:98:82:6f:09:65:af:25:9f:b8:97:1d:91:e5:
         7d:49:29:3a:c1:58:c6:00:49:40:73:95:08:bd:be:be:73:0d:
         ff:25:c2:85:df:7a:0d:fc:3b:98:eb:e8:d5:e0:d7:fb:61:eb:
         ee:0a:dc:e9:40:8a:94:db:cf:bc:7a:44:7d:09:87:e7:37:2c:
         c6:c7:99:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----