Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File:                     zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier:          79jd/ZAJM2Y8gawEwYknv5nphmjmh0Nwfb7tZkK/ebo=
Subject key identifier:   1B:4A:4D:C4:31:49:84:4A:03:9B:1C:3F:9F:AF:4E:A2:C9:6E:D8:A9
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer:       /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial:       01962E9883119A94E80DC4149F314024E545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number:          01F5
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
                          2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: vEvgJm2S4Z6hb08edzC+D/wHnDVoUWmm+96PGpqcDcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:83:11:9a:94:e8:0d:c4:14:9f:31:40:24:e5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=1b4a4dc43149844a039b1c3f9faf4ea2c96ed8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fe:69:ae:38:73:4f:28:66:d9:f3:be:e9:a4:
                    71:ab:03:46:cd:cb:48:41:da:81:8a:de:04:5d:d7:
                    cb:f6:40:d3:cd:52:9b:d9:f3:ff:95:54:b8:c7:72:
                    74:c2:18:06:db:79:6e:e7:4d:ba:cb:75:c9:b8:a1:
                    d0:4e:e9:86:c6:32:8d:17:c9:69:55:ec:d9:75:69:
                    35:a2:fa:e3:43:31:5c:44:79:35:3e:b1:93:e4:70:
                    37:94:b2:86:a6:20:60:18:12:f1:b7:a5:04:fb:cb:
                    74:6d:5c:1b:cc:b1:26:3a:29:88:7b:b5:7f:fd:9d:
                    d3:df:1c:01:3d:f7:d0:54:2f:cd:59:55:7c:39:0b:
                    e0:6d:b6:2f:e6:e9:41:f6:9d:61:96:79:77:4f:bb:
                    a6:35:94:3c:9b:b6:9f:a2:c4:de:a6:d7:ff:84:8b:
                    b4:81:da:d5:0f:03:59:60:49:26:42:33:94:1b:19:
                    5b:3d:6f:06:60:d7:13:8b:c9:58:b3:6f:8f:ef:05:
                    da:ca:d6:9c:2e:66:88:f6:58:4c:68:d5:5f:01:64:
                    67:bf:82:68:ea:bb:ac:a2:e8:60:83:a7:1f:2a:f0:
                    fc:74:5d:3e:1c:72:3a:cd:a7:1c:ab:de:58:8d:40:
                    f3:8e:b7:4d:c7:60:65:80:84:3e:01:91:b5:d9:cb:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4A:4D:C4:31:49:84:4A:03:9B:1C:3F:9F:AF:4E:A2:C9:6E:D8:A9
            X509v3 Authority Key Identifier:
                keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:68:fe:2d:f6:31:b0:f8:a9:de:7e:1c:8f:ac:b0:78:c5:
         16:b5:00:d7:46:ef:ee:76:89:c4:1e:36:eb:63:42:86:6c:0d:
         8b:7d:54:ea:65:c9:c4:5a:1c:d8:1e:55:5f:a2:90:46:9e:79:
         29:0e:aa:4c:f5:50:65:48:8f:14:ec:b7:79:7b:98:1e:c8:59:
         2b:b8:6e:e6:f5:8b:65:1b:47:96:3b:e5:4e:64:17:14:31:17:
         b6:58:2a:31:84:b0:cd:82:25:0f:b0:d3:8c:55:22:72:b9:50:
         77:1d:1a:85:e9:52:09:34:64:ab:56:56:bc:04:81:6c:3e:40:
         eb:59:48:e1:c4:50:b3:cf:ff:23:bf:67:47:53:35:a4:8f:20:
         6f:88:81:d1:4c:eb:d1:bb:cf:75:8f:9d:95:2e:d3:2c:2b:33:
         57:af:78:87:e5:26:3b:55:92:c9:df:7d:ed:c9:c3:a5:da:48:
         2f:f4:68:69:9b:77:eb:c9:d7:c3:4c:ce:23:19:b0:ac:97:be:
         07:fd:81:df:3f:a7:e8:ac:78:a8:81:1c:37:1f:81:92:ba:d7:
         0f:fd:59:ae:21:e1:24:6d:54:e2:74:88:3f:57:df:56:7b:fd:
         ed:f9:bf:ea:63:63:55:45:28:98:70:91:0e:6d:a4:ae:a4:91:
         88:90:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----