Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
File:                     jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json)
Hash identifier:          r3/dl+c3oqGNzSawgn77TnOrvvMsj8c6vHS1pYG4rAo=
Subject key identifier:   2B:12:7D:B1:40:34:B8:96:F1:07:96:02:58:F3:DF:75:DF:BB:A9:D4
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       01962E997649A19CEA27BD75A7088C9C3AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
Manifest number:          1521
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=)
                          2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=)
                          3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=)
                          4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=)
                          5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=)
                          6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=)
                          7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=)
                          8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=)
                          9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=)
                          10: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=)
                          11: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=)
                          12: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=)
                          13: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=)
                          14: iJP0BU_jrF0IVSLaBiPyUnJ_UGU.roa (hash: 9imddmR9rVxgg0XGH9YZZAgHPzYfVwLB2TeW5Sw/DTo=)
                          15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: UmN2/A7YOTJOKyTlmgdYxYPUovoo1ndXiPZVE0HHqgs=)
                          16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=)
                          17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=)
                          18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=)
                          19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:76:49:a1:9c:ea:27:bd:75:a7:08:8c:9c:3a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=2b127db14034b896f107960258f3df75dfbba9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:6d:82:15:12:36:cc:89:c7:80:ee:ab:63:
                    5a:fa:ad:03:36:64:70:ed:05:f4:55:40:3a:ba:cc:
                    12:2c:e1:0b:9f:62:ff:69:b3:c5:76:fb:34:d4:d7:
                    e6:29:08:52:da:fd:59:0d:1c:c4:a3:0d:35:3d:70:
                    0f:2f:29:b0:e6:34:40:17:ed:c1:4c:9e:c3:a0:35:
                    d1:53:e2:a2:08:6a:bb:db:b2:39:1d:62:2e:cd:a5:
                    4d:7e:28:dd:c8:d2:c0:5f:34:8d:d9:06:40:e2:ee:
                    7b:2d:e2:43:d7:52:c6:c2:f7:8e:fb:e4:d6:c2:47:
                    57:00:88:8c:2f:3a:a3:c3:4a:38:8e:71:20:90:4e:
                    68:1c:c3:0f:80:be:0c:ba:41:c8:f3:ad:09:b6:c4:
                    bd:8a:df:ee:a8:30:aa:18:5b:34:2d:bb:73:f0:c9:
                    31:03:a4:16:5d:96:99:df:48:de:e5:ef:37:7e:d5:
                    71:a8:95:03:8e:54:61:aa:74:15:18:12:9a:b1:7c:
                    d7:55:34:a4:2a:8d:8e:cd:b9:26:c1:a0:db:15:ac:
                    fd:8d:e7:85:ae:59:33:a8:9e:5b:6f:a9:93:d6:8c:
                    40:82:e2:d7:b7:9a:95:6a:08:38:e8:5f:86:47:55:
                    aa:0b:85:80:50:69:ec:8a:72:6e:3e:b8:f3:40:79:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:7D:B1:40:34:B8:96:F1:07:96:02:58:F3:DF:75:DF:BB:A9:D4
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5e:b0:cf:21:2f:16:70:d8:a3:c6:1b:86:9b:e5:44:f2:70:
         95:d7:58:d9:16:dd:68:43:c6:1a:48:bb:e4:54:ab:ec:c8:27:
         a8:57:5e:f2:61:2a:ea:10:f0:65:53:db:5f:fd:0c:e1:58:e6:
         33:d5:9a:43:cb:aa:b3:ab:5a:ad:85:8f:a4:96:4e:75:9f:03:
         8f:1d:7c:9e:22:7a:1d:f0:54:50:9e:9d:5b:3f:f8:8e:7b:8c:
         39:0f:6f:c8:d5:5c:c5:9e:ca:97:51:ed:b2:44:d7:d3:bb:03:
         2b:56:df:1e:65:75:d4:14:a0:d1:56:2d:6a:1a:ad:d1:e6:dc:
         bf:5e:ce:57:b5:c2:74:ca:7f:f8:06:13:4f:78:a4:6f:44:b3:
         bb:9c:d0:10:4d:b9:82:49:27:fe:43:1d:41:f8:98:ea:b4:af:
         fe:0a:1c:79:eb:34:84:08:2b:b5:10:c0:03:29:8d:47:5d:fa:
         36:d8:e4:0b:a3:2c:5b:bd:6f:6b:eb:8b:24:7c:6d:d8:8f:ec:
         ec:d4:67:97:c7:ff:b0:64:e6:4b:40:87:9d:0c:15:2f:28:b7:
         57:ea:61:9d:8f:26:64:52:a0:e4:7e:36:de:a7:cb:f4:9c:fc:
         6c:29:e3:36:13:23:63:ee:f6:db:00:26:f4:9b:eb:91:a3:06:
         02:65:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----