Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File:                     zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier:          vZQ+GcCtu5TF55WeVBr5dOay6NyjEKqGe5rVe/odeB4=
Subject key identifier:   01:EE:BB:F5:09:74:8B:B1:97:64:0E:54:09:AE:46:8E:61:51:C1:38
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer:       /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial:       01962F74FA2A59B95A82509E233CBBA41710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number:          045C
Signing time:             Sun 13 Apr 2025 14:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:57 +0000
Files and hashes:         1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
                          2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: G6MJwwUZ6/mZaN0N0GeuziaHND3hkVKF65V7SwmgSoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:fa:2a:59:b9:5a:82:50:9e:23:3c:bb:a4:17:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
        Validity
            Not Before: Apr 13 14:01:57 2025 GMT
            Not After : Apr 14 14:01:57 2025 GMT
        Subject: CN=01eebbf509748bb197640e5409ae468e6151c138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:a4:bf:d3:28:4b:33:7c:2f:aa:b2:0d:61:
                    97:83:c4:79:c4:01:a3:67:11:e2:ae:8a:09:a1:b6:
                    97:87:45:60:7e:47:9f:cb:4d:73:11:33:6b:46:fb:
                    3a:e8:7b:6d:bc:02:86:93:53:31:4a:19:a2:ff:45:
                    cb:87:ba:00:f4:21:dd:24:e5:44:34:1b:52:a7:4f:
                    33:12:13:55:02:e6:b3:4d:ba:08:3c:0e:9c:a4:fa:
                    ec:0e:0b:64:d3:3a:ba:5f:b4:b3:0c:99:90:4b:09:
                    e8:92:ee:6e:9e:03:df:bd:02:84:00:a9:16:7d:fc:
                    d7:bd:df:99:ee:16:c2:d5:fe:9b:b9:83:bf:9e:af:
                    88:5c:f5:80:a0:f7:ac:38:bb:17:3b:0f:74:9e:d3:
                    24:6c:f8:f9:33:a2:e5:3c:58:cf:05:1c:28:c9:f8:
                    ac:d3:3b:a4:6f:a8:7e:83:d9:bf:57:c0:7f:cc:9e:
                    b8:f0:90:16:3b:7d:37:19:6e:1e:f9:c4:28:20:52:
                    66:16:47:96:9f:08:dc:fb:13:a9:24:09:2c:29:19:
                    73:ea:db:71:e6:37:5c:d4:32:a7:1c:e7:57:6f:d2:
                    3c:18:72:07:07:b1:95:17:c5:e2:7a:c5:86:e8:bf:
                    45:69:81:95:c6:dc:74:5a:df:5d:41:98:ea:ac:0e:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:BB:F5:09:74:8B:B1:97:64:0E:54:09:AE:46:8E:61:51:C1:38
            X509v3 Authority Key Identifier:
                keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:23:b1:3a:5f:ae:ce:18:e5:e0:52:87:d5:40:7a:57:3e:07:
         4b:6d:6b:d9:e1:89:d1:b6:99:f6:6c:ce:ad:02:40:2d:b3:13:
         d3:de:98:57:08:ad:87:d3:76:fd:43:10:55:49:3b:fa:bf:dc:
         60:91:ec:f1:24:97:d0:8d:63:3d:f3:7e:54:c4:6c:ff:f5:16:
         8f:6e:b7:b7:35:48:b0:8b:27:56:78:a5:e4:63:11:7b:98:95:
         be:57:77:26:1b:8a:3b:a3:49:1a:cb:17:04:8a:5a:fb:b5:0a:
         d5:d3:db:96:a3:c2:a8:b4:7b:0a:55:88:1a:3f:30:77:41:45:
         ea:90:e0:89:b2:58:34:cd:54:b0:da:60:71:2d:20:ed:61:d2:
         79:38:ae:8b:2b:98:4f:13:f5:f1:25:a1:cb:81:db:87:42:e0:
         5b:ff:cf:af:70:4c:e3:d5:da:d4:2f:f3:2d:46:58:a7:d7:24:
         e2:4c:43:85:91:60:64:af:11:aa:37:5a:0a:10:bb:96:a1:5f:
         a7:80:0d:fe:0c:35:64:e2:06:e3:d4:ca:1c:58:89:9d:0c:f5:
         df:93:93:4f:5f:9e:ac:1f:66:2e:26:6f:16:7d:d5:1f:08:61:
         05:2c:c1:3b:84:c4:5c:4e:31:c8:3d:68:5d:1f:d0:bb:96:28:
         5a:b9:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----