Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File:                     ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier:          G+S+KnUPfm2IaAhivipeKqka+++bY2osTJlndV8gKC8=
Subject key identifier:   03:13:74:19:0C:FC:8E:91:E1:01:BE:8D:5B:3E:85:22:F7:D4:BB:5E
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer:       /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial:       01962E620464EF29A06350B2B146F5F77EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number:          13AA
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
                          2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: +sfZRAyFiI3/6RTYIq0mQxNiI9uD7kV3X/w780ctrew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:04:64:ef:29:a0:63:50:b2:b1:46:f5:f7:7e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=031374190cfc8e91e101be8d5b3e8522f7d4bb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:90:93:06:4c:35:22:fa:f0:22:b1:05:21:
                    39:2b:b1:96:4d:f1:f5:e0:aa:f6:3c:76:05:de:82:
                    e7:7b:e3:be:21:59:22:80:0b:96:bf:c9:f1:c6:7a:
                    df:cb:4e:e5:62:a2:7a:70:a4:d9:d4:ae:ec:58:ac:
                    62:7d:fc:05:4f:c5:e1:bf:b4:04:b3:b6:79:5d:05:
                    9b:d1:bf:ec:31:4d:49:e2:fc:49:aa:80:0c:6b:f5:
                    84:2c:cf:98:1c:6e:fe:63:b8:5a:62:eb:7d:95:68:
                    1d:24:2a:76:5c:f9:10:f7:32:aa:97:1b:61:b4:84:
                    df:d2:3f:ad:98:c7:16:45:3c:3c:36:73:24:71:88:
                    cf:9e:21:f0:c7:81:38:20:07:e4:74:52:20:3d:42:
                    90:2e:da:cd:50:b8:6b:02:43:f2:f9:df:a2:c6:e3:
                    98:07:61:fa:76:8c:2a:57:99:b7:5f:2a:c5:14:aa:
                    34:e2:9b:3b:af:86:d8:ed:7a:a0:00:ce:81:41:4c:
                    4d:03:3a:6c:d7:7c:34:9c:5e:23:e0:26:bf:c5:6e:
                    bf:3e:8f:72:0c:5f:cd:0e:8d:ea:21:87:39:69:8c:
                    81:ff:37:19:d8:05:fa:cb:5a:58:09:1e:10:6c:2f:
                    f0:67:72:3a:aa:71:a0:7a:2b:8a:2f:3e:12:ba:a2:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:13:74:19:0C:FC:8E:91:E1:01:BE:8D:5B:3E:85:22:F7:D4:BB:5E
            X509v3 Authority Key Identifier:
                keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:de:57:3f:0e:91:a8:63:75:b2:8f:df:2c:46:e2:f3:64:d9:
         a4:af:31:60:0f:39:37:ff:eb:7e:8f:e4:cf:e5:b8:95:c4:5d:
         1a:37:98:6b:23:10:ce:d6:60:c8:36:2b:60:1f:34:3e:8e:e4:
         c2:c0:82:92:b0:ad:07:b1:d7:8c:f3:bd:9d:4c:4a:36:f5:5a:
         45:35:67:97:b0:4c:98:ac:d4:3b:51:c0:02:14:f2:ff:dd:85:
         75:d2:00:5b:de:3e:1e:8b:6a:e1:32:1b:74:34:9e:84:88:59:
         71:d1:5e:b3:cb:24:65:ee:bd:34:cf:91:2d:c2:92:a6:a1:8f:
         dc:dd:ed:c6:68:7f:67:fb:36:50:b1:31:e7:6d:e0:4b:76:17:
         6e:23:de:7e:e1:fa:a9:f1:25:f2:71:bc:f2:c8:e3:a1:f1:05:
         7f:51:68:86:01:2e:22:69:2a:aa:db:1e:cd:e7:91:96:b2:d8:
         4c:8d:61:b0:f0:59:4e:25:f4:5a:4c:59:b5:d2:2c:56:44:d3:
         1d:ed:34:06:7b:e6:a8:f3:44:b2:c1:cf:c3:af:d2:60:b7:5a:
         10:a5:4b:2f:50:32:04:bc:25:78:88:1b:6b:3e:4f:22:5f:58:
         16:a2:3c:44:2c:f9:f2:ed:14:92:b9:5b:bb:d3:2b:15:94:e2:
         09:7b:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----