Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File:                     zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier:          6H91oNBJjQq8qHgyccuNRmqmyJdRh1g9lZjTQecBegQ=
Subject key identifier:   D3:C0:C0:E1:08:D7:8D:CC:97:15:0D:B4:4C:E7:66:30:A4:4F:87:BD
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer:       /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial:       01962ECFB571B310FEFE12681668AB450483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number:          0490
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: slxDmCt2L7uCGsUsrtR25UrWHG0.roa (hash: DyUu6++jqUZQV0Vf12twiu6zSmlHweojaxYVbm0ofdE=)
                          2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: B9So/ZO0fKpRG0+izGj/Y99l9OYHYAOaL75etRf3kps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b5:71:b3:10:fe:fe:12:68:16:68:ab:45:04:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=d3c0c0e108d78dcc97150db44ce76630a44f87bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:1e:b6:8c:ae:9f:46:1a:e8:9f:af:2e:b6:
                    d7:b7:fb:95:f9:b6:67:f5:2f:15:12:ed:3a:b7:d6:
                    4a:b3:8e:f2:58:bf:78:8f:01:ff:5c:e0:3e:45:4d:
                    da:da:72:b8:25:e2:78:74:a4:2c:cd:a2:44:fd:86:
                    83:2e:9a:ed:87:15:b7:eb:d4:25:b2:1f:39:27:4d:
                    63:2d:c0:9b:b9:56:c3:06:ac:dc:b0:9c:ff:a9:cc:
                    ae:1d:a4:6c:52:31:1c:f4:99:42:85:df:2e:bb:9f:
                    38:ca:63:01:34:a3:4f:ce:5b:5e:a9:a4:21:26:4a:
                    de:2f:a8:8d:f7:56:fb:3d:f7:f5:8a:e8:0f:18:1f:
                    50:7a:ff:43:01:ec:40:fc:75:e3:90:5d:34:c1:19:
                    97:68:ae:df:0c:16:d6:84:95:b9:1d:ab:29:53:4d:
                    9e:81:50:65:b1:e4:3a:ea:c1:72:79:fd:e9:94:ce:
                    bd:31:5b:82:d0:29:5b:79:6e:a6:9f:0f:33:0f:3f:
                    50:b4:02:0a:ea:dc:15:3b:01:d2:15:de:0c:63:ee:
                    d4:37:ae:c1:d1:f6:fa:23:25:21:45:65:0c:92:ac:
                    2b:3a:c7:15:67:5b:d1:39:32:be:27:f3:2e:ec:e0:
                    84:5b:ef:05:a1:84:c6:61:86:4a:2d:40:c0:59:fa:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C0:C0:E1:08:D7:8D:CC:97:15:0D:B4:4C:E7:66:30:A4:4F:87:BD
            X509v3 Authority Key Identifier:
                keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:57:22:fa:4d:03:46:e3:7c:bf:0a:05:55:4c:40:bc:86:58:
         47:ab:63:87:65:fc:0a:39:51:62:3b:9e:69:31:f4:7d:8f:f3:
         a6:fb:20:18:0d:a9:d4:6c:b2:32:c6:24:f2:8e:c5:25:07:d6:
         27:4d:a8:84:4c:d9:cb:90:a4:f3:e6:c9:f4:74:9a:e5:1e:c2:
         0f:89:51:b7:80:97:67:03:17:38:d3:0f:bd:5d:a9:7b:0c:78:
         36:ff:84:bb:b6:be:74:09:83:a9:7f:fa:07:a9:6d:a1:cf:d8:
         c2:3e:3c:a1:18:02:e4:b5:10:a3:0e:44:66:6c:a9:d3:6c:19:
         be:02:96:a9:58:71:2d:4b:ba:49:5a:67:e5:6d:36:46:f1:0e:
         57:44:9f:b7:b5:2b:1f:e2:e2:53:87:09:d1:1c:d7:38:8c:68:
         2b:b9:4d:61:aa:14:58:34:34:1c:7e:23:16:04:03:0b:4c:eb:
         35:b7:06:b4:83:af:3d:f3:23:00:9e:65:32:41:a0:72:50:a1:
         37:2e:91:c8:97:68:b4:52:c3:3e:db:f3:f0:05:7d:60:48:f5:
         1c:9f:a3:f0:1a:78:89:30:80:5a:91:8e:22:ae:60:4d:40:d3:
         d1:1b:39:fb:df:e5:0f:fc:cb:98:1c:a6:ec:29:f4:b7:4f:6b:
         4d:37:ed:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----