Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File:                     zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier:          udf1aAqW/+Toqtz6DSPHdxP7o3wEnOr+VwdyTjYsySU=
Subject key identifier:   D1:2B:F4:16:91:8B:D3:C9:65:F2:CE:67:42:3F:32:AF:4B:2A:15:27
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer:       /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial:       01962F748CCEAC01C45867FD32644677101F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
                          2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: +9tEBL2NmOYNIguMjEPjMKIvgiTFpCtWl0F4S+c2QCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8c:ce:ac:01:c4:58:67:fd:32:64:46:77:10:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=d12bf416918bd3c965f2ce67423f32af4b2a1527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:5a:d9:47:ae:b2:ee:a4:26:5c:67:94:4f:
                    7a:0e:f1:b4:63:ce:63:76:85:ee:7f:c6:bc:11:92:
                    55:ab:7d:e1:f2:52:42:37:b5:a8:3c:62:e6:5c:20:
                    ba:9a:c9:3c:33:77:60:9b:70:7d:66:f4:1e:72:a3:
                    f0:7f:59:42:ec:1c:5a:44:91:b1:77:fd:84:80:17:
                    8e:a5:12:4c:a1:d7:e8:f2:ae:0a:87:2a:14:b5:bb:
                    29:3c:06:d4:8c:09:b5:ed:b1:57:f4:bf:a0:78:c4:
                    5b:de:22:95:c1:c0:55:8e:40:d3:49:79:d9:c2:c2:
                    9f:31:70:96:6e:d1:12:c1:40:b8:6a:12:5d:f4:54:
                    e4:14:ab:20:38:4d:79:cd:97:6b:89:0f:ac:52:8f:
                    19:28:2c:31:34:fb:cc:4f:ae:af:03:16:90:23:b4:
                    23:ef:76:cf:0c:5b:05:8f:59:80:d0:1a:35:43:af:
                    43:ba:9b:8f:5a:d5:50:82:d4:21:82:6d:98:fe:66:
                    22:1b:e8:1d:af:34:c1:9d:45:dc:2c:5d:dd:3a:d9:
                    cf:ae:76:7a:36:86:ba:44:17:3f:43:65:04:78:40:
                    ad:ec:1d:aa:98:07:e2:27:8c:c3:12:71:3b:d2:76:
                    49:87:02:a4:0b:e5:3c:12:4a:7d:70:a7:04:cd:f1:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2B:F4:16:91:8B:D3:C9:65:F2:CE:67:42:3F:32:AF:4B:2A:15:27
            X509v3 Authority Key Identifier:
                keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:78:2f:10:27:58:0e:ee:de:90:39:29:d8:d2:6e:fa:cb:cd:
         ae:0c:fd:cb:f2:2a:61:6b:8f:d9:10:07:96:e0:ed:7d:74:e7:
         db:bd:04:51:0a:76:b7:4c:94:e3:f3:cb:dc:a0:fe:63:75:c2:
         9d:76:9e:8f:61:3d:46:5a:9d:68:2d:d1:fb:5f:03:ae:1c:32:
         3c:32:db:5a:5b:83:78:1a:d2:bf:1d:17:f1:04:cf:65:15:54:
         fd:95:e1:7b:d7:c4:94:92:12:15:f7:b2:6b:2c:6a:63:6c:18:
         25:f4:56:e0:42:d7:6f:7c:0d:22:8b:91:50:2b:da:13:41:c3:
         1a:32:0a:d6:f2:5b:73:89:03:52:67:81:51:5f:28:e3:74:3a:
         c8:d2:e0:0a:26:04:07:d3:84:fa:5b:d1:eb:be:ce:df:e6:d1:
         c5:fa:37:d2:ef:13:5f:94:00:76:44:26:d9:68:88:b6:b3:50:
         13:b1:eb:ed:b4:94:5d:90:90:9a:07:20:5c:fa:6a:b5:6e:de:
         0d:0f:81:df:01:ef:75:a5:cf:a9:1e:dd:31:67:39:b3:5e:f5:
         fc:a9:c9:2c:e5:42:4f:b6:71:35:ee:58:53:b2:af:a3:d2:e3:
         c3:ec:32:6e:f6:72:76:e6:83:de:93:0a:37:c2:0b:2d:ea:7c:
         34:b6:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----