Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File:                     zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier:          y829k+LCQhIydN9OPndm5RWvwtD/aPEjLriyRysahbQ=
Subject key identifier:   8C:41:69:E0:1F:69:F2:2D:1A:87:90:29:DA:5E:25:B7:20:5F:B5:1C
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer:       /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial:       01962DF3C33E58B2CD91CF9FC409272B8887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number:          9E
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
                          2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: hgrMWqdK1BblsEB/gNEusTu5v+hBfDChE5XZqxMuIA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c3:3e:58:b2:cd:91:cf:9f:c4:09:27:2b:88:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=8c4169e01f69f22d1a879029da5e25b7205fb51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:75:35:be:73:08:97:24:17:8f:58:85:05:
                    5d:58:53:36:e2:be:13:0f:4a:10:7f:13:f0:ec:3b:
                    8b:af:08:f0:56:68:e0:39:d2:98:bf:96:66:50:5b:
                    38:f7:a6:11:21:5a:56:7d:c1:3c:11:ca:0b:d2:a8:
                    09:fa:96:b9:0b:f5:c9:b5:80:3e:ec:f7:16:02:93:
                    5e:c9:07:f1:9a:b4:57:84:6f:f6:a9:19:6f:6a:24:
                    e8:8b:12:e7:4e:6e:11:ae:f6:a5:17:d0:3d:c1:b6:
                    50:d0:97:3f:ee:2a:4d:2d:c0:9b:c1:d7:cf:a7:56:
                    12:a5:e2:fd:ad:59:8c:86:24:7e:fc:ee:b4:39:0c:
                    da:30:5e:39:d4:a9:92:e4:f5:bf:4d:8e:9b:0b:d9:
                    b2:78:8f:b1:db:d7:33:49:3d:24:1b:48:79:4b:62:
                    26:ba:11:d3:3b:f8:d3:2f:9c:f3:9c:76:19:7b:a4:
                    84:5a:f5:eb:a4:bd:ae:01:69:6e:92:8e:49:fc:a5:
                    15:54:f9:11:68:e7:39:a3:87:99:ad:7d:52:83:4e:
                    80:48:76:d2:cd:2c:e3:60:3a:81:93:4b:7c:b7:43:
                    ac:6b:b3:ca:1c:9c:36:d5:f0:52:67:82:cf:ca:93:
                    68:f3:88:de:6e:76:35:09:ed:18:41:3d:56:63:7c:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:41:69:E0:1F:69:F2:2D:1A:87:90:29:DA:5E:25:B7:20:5F:B5:1C
            X509v3 Authority Key Identifier:
                keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:e1:1e:70:87:28:b2:20:a1:8e:3d:ce:10:3f:51:f6:cb:
         0b:6d:e7:4b:35:b8:46:75:d7:48:d3:4a:a6:02:e2:77:27:28:
         cd:32:2c:14:0a:ea:46:7b:55:3c:24:93:fb:a6:31:d8:31:7e:
         cb:8e:39:4b:56:22:d0:fe:93:ab:02:90:37:70:27:b3:5d:25:
         6b:3b:3c:2e:61:a3:28:20:a2:41:41:61:c4:72:67:8c:2a:d2:
         8e:f8:9c:f7:c0:47:f4:7f:a9:dc:ac:a3:79:81:75:33:bd:09:
         64:b9:a7:45:20:35:d5:40:c6:4a:b2:14:77:69:71:3f:55:df:
         63:83:60:3d:43:48:5b:93:f9:17:36:40:cf:b6:c5:51:90:b9:
         a9:f9:82:0f:1d:cb:58:3d:f9:35:3f:25:71:05:60:f2:55:00:
         be:52:85:82:b3:c5:78:c2:17:c8:6c:7d:e6:bd:e7:6f:9c:08:
         1e:47:fc:39:80:2e:df:38:11:ae:0d:f3:4a:50:6f:cf:72:b5:
         f1:e3:1f:00:11:3b:20:9b:d2:68:0f:ca:ad:91:a6:9f:6c:48:
         20:c8:27:30:8e:c5:2d:05:aa:27:15:44:51:d2:e2:6a:46:d1:
         be:0c:e4:79:27:a4:ef:4d:c2:e0:24:23:b3:fd:ab:c9:96:f2:
         cd:59:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----