Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File:                     z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier:          LTuU9Dn/njj1hLRwMDI9SvPEeVQWII1B9MIaN94I4JM=
Subject key identifier:   30:0E:93:0B:5D:80:FD:90:5B:C9:1F:8D:48:76:9A:F0:7D:D5:D2:A2
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer:       /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial:       01962ECF6FF1919BD6ACDAA3BB5387889E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number:          107E
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
                          2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: o2tASR5BwGyy/ynWXuSPe2LBYlFSu0vAwNHzOxxZHQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6f:f1:91:9b:d6:ac:da:a3:bb:53:87:88:9e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=300e930b5d80fd905bc91f8d48769af07dd5d2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:42:e1:b7:c4:45:df:52:65:95:d8:7b:5c:fa:
                    83:89:bf:76:7e:df:75:c1:d0:db:96:d7:74:c9:23:
                    3a:f8:18:82:d0:ab:66:d6:78:a4:4c:94:d4:83:56:
                    40:59:88:59:f6:d6:21:92:94:d9:01:b1:a0:aa:33:
                    b7:07:a5:d6:ab:a7:a3:01:3f:de:4f:49:ca:b3:04:
                    75:53:cc:0c:92:b6:09:7d:24:b7:7b:5e:9d:bf:02:
                    51:4b:9a:e0:92:88:1a:a7:75:57:02:70:86:81:f1:
                    f1:fa:f0:cc:ba:ab:cb:40:37:0b:cb:b8:39:6c:2e:
                    be:d5:4b:6e:c0:6c:4c:74:25:cb:21:27:3d:fb:ed:
                    9b:3a:e7:f3:e1:fb:45:14:0f:5a:54:82:ac:22:d6:
                    86:36:b3:af:63:8a:8a:23:b1:a5:03:90:1e:57:2b:
                    d5:cc:98:ca:47:a1:71:80:fb:c6:97:24:ba:5c:ae:
                    a3:df:2e:91:0e:04:37:50:df:1a:14:ec:30:9a:f6:
                    99:c8:0c:79:de:be:05:fe:ba:4e:f7:bf:73:47:3a:
                    7c:5d:17:2b:fc:6d:55:77:e4:82:b4:1f:e7:d3:a8:
                    fd:c6:33:90:6d:b9:bd:f3:c3:66:42:33:fc:db:06:
                    be:4a:e2:dc:44:65:85:02:39:0e:de:a2:45:bf:a3:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0E:93:0B:5D:80:FD:90:5B:C9:1F:8D:48:76:9A:F0:7D:D5:D2:A2
            X509v3 Authority Key Identifier:
                keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:5c:bd:f6:4c:ff:19:71:5d:aa:3a:1d:9f:a7:0c:cf:ef:
         c9:63:da:d4:ac:79:4c:a9:86:cc:18:85:32:41:a2:91:fb:e3:
         e1:44:d1:98:31:1b:74:86:02:c4:ed:a5:cf:87:2d:cf:b7:41:
         9f:45:82:c0:24:62:e2:19:78:dc:ab:dd:56:b3:49:63:6b:f2:
         74:61:39:44:10:32:86:b2:10:2f:04:4d:1f:fe:08:a1:c5:41:
         f9:ae:91:da:ff:c6:08:ce:20:73:e2:e0:de:88:b9:50:7b:61:
         01:47:68:e4:c0:9e:f6:28:ed:ee:58:6d:b7:6a:97:0e:2f:6f:
         fc:56:3c:0b:76:a7:77:73:55:86:68:09:52:a0:e5:04:02:79:
         7b:45:f1:46:e0:8f:16:5d:48:02:09:15:fb:f7:a4:71:7d:a2:
         90:21:34:e1:36:d3:83:af:54:bb:36:1f:5a:14:7b:70:55:e7:
         c0:78:02:d8:ab:0d:be:e8:45:b5:80:64:a2:b4:76:82:54:f5:
         4a:74:c1:01:a4:10:90:63:1b:c7:55:80:3b:b6:b8:78:5a:60:
         08:60:ae:54:73:92:e4:46:a4:58:99:6f:76:12:bd:ac:d8:ea:
         f2:df:eb:cc:3f:f0:2a:e6:ac:a8:9e:d8:18:aa:65:18:2f:c6:
         d1:b3:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----