Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File:                     zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier:          VLmKnXnt/dSzLiV40UDbJSREOaNJgXJSmE90SlJ8x3A=
Subject key identifier:   0D:DA:7A:BA:99:06:86:A9:23:52:CA:31:9F:C0:76:67:E6:69:3F:2F
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer:       /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial:       01962E61A8C394BC3B2E9635FD72A7AD35A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number:          0B90
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa (hash: 7pDJDV3PAprmagYY0WEztJ7b9H5DGoPcWbYIPWhc9l8=)
                          2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: BGkG+u9CWtBEj/T7RLB7zKnwpmtOQg2mVGGii8+/2rk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a8:c3:94:bc:3b:2e:96:35:fd:72:a7:ad:35:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=0dda7aba990686a92352ca319fc07667e6693f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:f0:7b:be:58:8a:c3:57:02:bc:34:29:3f:
                    14:30:ea:38:8c:d3:82:23:b0:40:09:5b:66:86:10:
                    53:47:17:92:46:9f:98:5f:26:08:5f:e6:a8:01:13:
                    ec:69:2e:28:18:8e:c5:85:9f:c2:dd:60:f7:71:54:
                    39:11:f2:78:19:9d:dd:01:25:2e:89:96:4c:69:00:
                    c1:d1:0e:90:e9:e5:ea:8c:f1:f8:50:1c:b7:c0:73:
                    d0:09:4f:4a:01:27:d0:cb:a1:79:a0:df:50:99:48:
                    6b:4c:b1:9f:1c:7c:15:0b:17:32:6d:7d:26:e5:83:
                    0c:f0:62:6f:a9:ba:70:55:73:ea:e5:43:36:da:8c:
                    cf:63:c0:f0:d4:69:f2:97:bd:83:b7:a0:d9:6f:4a:
                    51:5b:87:14:8c:00:c4:8a:70:a2:34:21:22:7a:d2:
                    03:6e:fe:14:ea:e5:7c:05:8b:7e:5a:de:ca:26:03:
                    a8:f2:bd:45:f9:66:66:67:03:2c:b8:8c:66:8c:41:
                    8e:cc:3b:c8:fe:11:a3:ad:10:b1:0f:b1:b5:02:aa:
                    51:41:f0:d1:9b:74:59:10:54:42:55:c6:55:3e:f2:
                    c3:e6:15:ee:d6:17:be:b3:3e:70:94:e9:7e:56:4f:
                    a3:ee:c7:3e:15:bb:8e:f9:a4:b8:88:ee:7f:82:c6:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:7A:BA:99:06:86:A9:23:52:CA:31:9F:C0:76:67:E6:69:3F:2F
            X509v3 Authority Key Identifier:
                keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:08:a0:35:a5:6a:6b:62:90:9f:8c:e5:1d:ec:59:83:db:
         5a:86:80:3a:66:08:e6:ea:3a:36:66:97:ed:93:9f:a3:d4:5f:
         12:05:37:db:42:8c:c7:25:2e:1b:dd:e7:de:2b:cc:db:3c:75:
         2e:1f:2a:09:9e:96:e3:18:c2:3d:8e:9d:33:e9:eb:3d:f1:b0:
         19:c4:ec:af:05:0b:0c:0b:08:2f:a3:51:82:df:7c:11:55:85:
         8e:44:0e:e3:de:6c:31:64:ad:6f:45:79:cd:b6:71:2f:4c:32:
         0f:14:d8:5b:f2:b7:a9:39:94:46:c3:f4:14:83:24:e3:50:01:
         f5:ce:43:e9:ce:c8:4a:6c:4e:7d:9a:94:2a:9b:d9:00:fa:64:
         84:fb:c5:51:ba:63:b6:a3:94:1d:95:5a:8c:c9:c1:91:e8:6e:
         67:7a:63:01:e1:7c:95:31:8a:b7:3f:22:49:c8:b5:af:ae:61:
         a2:19:da:2e:e2:0e:9e:c9:b8:9d:63:7c:e4:1f:4c:9e:0b:61:
         53:2f:7a:2d:6e:b3:de:0f:d6:4f:e4:bb:15:b6:09:6a:cf:bc:
         46:7e:42:2a:a4:b1:7f:a5:9f:b4:ad:48:02:67:09:29:56:33:
         05:fd:d9:74:3c:e4:20:12:f8:68:53:5a:62:4f:39:3b:6b:f8:
         6a:01:01:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----