Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          U7ardGnrO90S2QQddMNVDVXFoSV/MVf7QcN4E1FOL4c=
Subject key identifier:   A7:53:D4:8D:68:0B:3E:FE:BF:F6:E9:F3:12:56:D0:EA:63:7D:D0:83
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       01962E2B28A5BC67A09373623099627BB417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          1009
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=)
                          2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: 0cYbL6HlsOq4z4dT1HdMPB0hfGz0furCuI3cJjHbhyk=)
                          4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:28:a5:bc:67:a0:93:73:62:30:99:62:7b:b4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=a753d48d680b3efebff6e9f31256d0ea637dd083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:8c:23:31:b4:5e:12:5c:d5:7e:9b:00:c8:
                    51:82:cd:3b:50:45:0a:15:b6:97:18:62:b7:5e:8e:
                    3c:81:6a:46:10:f3:23:2a:dc:ca:1c:80:ba:ee:d1:
                    7a:53:b8:ed:80:aa:81:4d:36:4c:d6:7d:e0:4c:16:
                    d0:3e:e1:70:18:30:fc:d2:b1:89:4d:c7:41:50:c4:
                    70:42:a1:05:08:a5:08:30:67:a9:dd:5d:74:31:ba:
                    48:c3:58:33:7c:43:aa:44:0c:c9:25:6b:31:2a:e6:
                    1b:7d:3c:35:fe:fe:d7:e3:60:09:03:83:33:13:ca:
                    0c:43:28:2f:a0:f3:ef:b9:d3:67:77:d8:2a:e7:6d:
                    53:f4:e9:85:1b:8c:2e:4d:b3:da:1d:c6:85:36:49:
                    b0:93:b6:1a:18:b1:0e:93:07:1b:7f:2f:9a:33:a0:
                    5a:4b:b1:98:85:4f:a6:57:b7:ff:e3:cf:b5:82:b3:
                    1a:72:61:d3:f8:4d:e2:48:02:5f:e2:28:19:5f:23:
                    f1:24:25:9c:55:34:4a:3e:ea:4d:b8:47:b5:1b:f1:
                    6b:3e:31:0a:c8:03:ef:2b:b4:db:b5:a7:56:3f:95:
                    a0:78:75:e6:24:a9:63:5e:b4:7d:cc:f5:7a:b0:c3:
                    57:f0:03:69:7a:c4:05:3f:ab:70:8d:3e:ff:06:a3:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:53:D4:8D:68:0B:3E:FE:BF:F6:E9:F3:12:56:D0:EA:63:7D:D0:83
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9d:53:a4:b9:99:0b:47:3c:59:e8:47:d4:83:50:18:e7:58:
         81:ba:aa:ad:10:f4:2a:f6:e2:cf:08:d1:64:5a:fa:18:a5:41:
         ba:18:e2:0b:33:ad:9b:8b:d3:92:43:6a:15:74:08:78:76:4b:
         c0:22:9a:79:ce:70:33:df:96:fc:e2:5e:ca:4d:ce:55:57:85:
         ab:e2:40:82:f5:0c:49:c7:f2:73:c9:a1:96:f2:d8:77:01:11:
         90:47:42:56:0f:68:b0:96:eb:21:c7:61:4b:6e:2a:83:32:0a:
         e4:7d:e3:e5:25:67:28:29:78:9c:7b:52:92:ae:ec:6e:10:01:
         98:83:ba:19:3b:20:4a:05:99:ad:40:3b:bd:5f:c9:07:8f:5f:
         9e:71:4c:a6:d3:43:70:61:ac:d8:6f:df:2e:96:b1:09:25:ef:
         c2:d5:4e:a3:0e:a6:02:6e:92:9c:f7:e6:84:7f:0a:e7:09:31:
         68:61:41:75:18:88:35:f3:9a:28:64:1d:b5:db:8c:25:00:08:
         de:dd:77:d3:b2:36:e8:c4:36:90:97:7c:0f:68:3b:73:0e:56:
         67:38:83:ef:ce:c5:e8:b7:8c:ec:8d:57:71:83:56:04:d1:b1:
         2c:72:8e:4c:96:f9:2b:b6:d8:ac:27:5b:b6:17:82:fc:de:ab:
         2b:0e:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----