Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File:                     z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier:          qwJdav+yhlRsT+uwtxj3qFSDeEObLAzhDsSOmVR+VJw=
Subject key identifier:   5B:24:6E:69:A6:C3:43:F2:16:F3:B7:2C:93:B8:A1:2A:6F:87:9E:40
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer:       /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial:       01962DF441287DF8C8963DD724693372B335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
                          2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: bfIz4XdMVy+5ggjDkzt7BoSXCSa86yLm3SuB0JkXLN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:41:28:7d:f8:c8:96:3d:d7:24:69:33:72:b3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=5b246e69a6c343f216f3b72c93b8a12a6f879e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:c1:b9:2a:cd:8a:6d:54:7e:64:af:08:8a:
                    56:bb:7c:40:f4:6c:85:fc:5e:b9:bd:cf:aa:ae:ec:
                    0c:ea:85:6b:a3:10:40:74:4e:e2:c0:e6:cd:8e:5d:
                    4f:9b:4b:e8:cf:b8:16:c9:d0:b3:a1:15:f4:d8:44:
                    bf:ff:a8:bb:c7:7a:66:55:94:40:96:39:3d:06:74:
                    03:dd:87:2f:2d:14:f5:32:a6:a7:93:2d:6f:e8:02:
                    e6:10:cf:2c:32:7b:12:35:cf:9e:81:b9:0d:0c:7e:
                    c9:98:8e:f9:7c:42:ce:13:57:d3:f3:c7:69:be:25:
                    11:20:f5:00:5e:a7:ec:8b:d8:5b:b2:a1:4e:a8:af:
                    46:a1:42:a4:b2:3a:54:83:52:c0:3f:af:08:c0:91:
                    42:53:8f:8e:8e:98:5a:cd:57:2c:2e:cf:85:c5:a6:
                    ba:f6:c4:fb:4d:cb:c7:40:6a:ae:d1:53:06:f3:99:
                    b5:6d:98:98:ab:8a:dc:7e:5c:4a:a7:2f:84:27:a9:
                    76:a4:8c:7d:de:b6:a2:e4:16:1b:2b:17:49:0d:91:
                    8b:fc:6a:ee:44:d9:ea:14:7a:9a:4b:93:52:c2:e4:
                    e3:21:70:fd:76:e5:c6:d1:93:ba:8d:46:09:70:7e:
                    1a:f8:35:7a:aa:79:58:75:f3:3a:3d:7e:ec:36:41:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:24:6E:69:A6:C3:43:F2:16:F3:B7:2C:93:B8:A1:2A:6F:87:9E:40
            X509v3 Authority Key Identifier:
                keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:80:36:aa:a9:16:5a:d3:25:02:b8:7a:fd:b9:70:1f:10:b8:
         ee:fc:06:79:9e:2f:6a:3c:23:b3:20:7b:ac:02:74:94:b5:19:
         f0:88:6d:23:75:15:3c:3f:5c:38:1d:c3:bf:a3:b3:66:2a:29:
         ce:54:63:71:bd:17:28:52:f7:17:72:df:8f:57:64:6f:83:9d:
         0c:e5:f8:5d:01:42:db:c8:cb:8e:25:ff:eb:7a:81:79:e1:4d:
         33:83:1e:7f:65:53:59:58:f6:bf:b1:77:c0:5f:3b:ba:28:b0:
         c8:f4:79:d1:a5:1e:21:cd:df:a3:2d:41:38:8a:ff:31:1b:8a:
         e2:fd:da:07:1d:8e:27:c7:c0:75:f3:51:29:79:9f:40:7a:1d:
         c4:65:a5:37:6b:ef:01:7c:51:43:ae:04:ab:87:e3:4f:33:1c:
         88:14:59:f0:b6:da:46:17:e0:6f:d2:ed:73:7b:33:65:8e:98:
         8f:ef:0d:23:92:4d:25:19:1d:48:c0:d9:de:3a:30:6f:4e:94:
         c8:cc:11:c4:79:21:c3:cd:e2:79:6f:46:fe:77:b4:e0:12:ea:
         4f:56:48:b7:f1:04:c7:ed:e5:16:91:8d:50:1c:08:0c:13:2f:
         c7:51:33:f9:72:44:ea:47:7f:22:52:1c:d2:74:3f:18:d5:44:
         ca:10:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----