Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
File:                     zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json)
Hash identifier:          S9xIYWBlmiD41ukRHNxvlbk9oK6y1FHjYQHUuZi6Ewg=
Subject key identifier:   2C:CF:F3:18:47:CA:51:C8:E9:6B:B3:52:A8:2F:DB:77:18:26:53:2B
Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
Certificate issuer:       /CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Certificate serial:       01962F064EDBF7FD5F2DC00E78FBA861B3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: DnTbZNQqyk7b1Kpp-h3yl2scJwY.roa (hash: TJ12NvtCptbjwY91XKfeBV5bJZ6ugQZ1nYOaUhjOlp4=)
                          2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: qAq0Wp2A4gAZCgRWvqgxUVCsNhjUE5P0s2xq291QMxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4e:db:f7:fd:5f:2d:c0:0e:78:fb:a8:61:b3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=2ccff31847ca51c8e96bb352a82fdb771826532b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:73:62:7b:9b:f5:96:d8:a9:96:95:3b:36:
                    f3:3a:9e:2c:29:0a:67:5b:f9:0c:26:8d:a5:b9:ab:
                    49:cd:5c:6b:07:8c:f0:55:ad:ef:a9:2c:be:27:58:
                    d2:ce:f4:da:4d:6f:79:59:fb:8c:be:1e:49:ac:e6:
                    db:ee:ae:1d:6c:60:6b:3d:89:ab:40:21:d3:cd:2a:
                    4d:4e:c8:dd:cb:65:c3:49:cd:91:21:13:ce:2d:dc:
                    8d:d6:64:64:05:a1:53:9d:5c:6c:2d:28:b9:e7:50:
                    cd:97:05:e4:d9:fc:18:5f:a1:17:02:f9:ee:c8:b4:
                    a0:32:ac:d2:4a:ef:ed:16:27:b1:15:c3:4a:6c:15:
                    2a:d3:fe:2c:7d:32:b2:1b:71:af:88:52:c7:59:1b:
                    6e:29:cf:e3:75:ce:82:cf:3d:02:e9:a4:c1:59:32:
                    f0:6a:9d:e0:4b:8a:11:49:65:9b:9b:80:2b:e0:92:
                    21:96:b2:1b:86:e6:d5:bb:44:4b:f3:2a:1b:59:14:
                    a6:82:4d:8c:0a:60:50:e7:6e:52:49:62:c9:de:72:
                    c2:9a:d4:2d:b4:06:c2:73:a2:a3:c6:d8:d5:4c:41:
                    8e:dc:e6:30:87:64:ee:11:f6:4a:cd:70:82:ac:de:
                    55:c9:0f:bd:5e:12:59:85:5b:b5:23:44:6a:2a:db:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:F3:18:47:CA:51:C8:E9:6B:B3:52:A8:2F:DB:77:18:26:53:2B
            X509v3 Authority Key Identifier:
                keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8d:4c:01:42:cd:65:2c:87:53:33:66:ed:86:81:95:ae:0a:
         50:7b:fb:e1:57:ac:ea:bd:e4:77:3e:35:b4:ec:59:4e:0a:2c:
         da:cd:dc:66:f2:84:63:78:ae:77:52:39:ef:18:ab:df:a9:69:
         92:c6:56:c9:10:52:7d:a6:68:11:c5:e6:e0:a5:25:31:35:b2:
         4a:86:30:66:fa:7e:15:49:8d:2f:db:d1:a6:ed:f9:da:7a:06:
         4c:50:d5:37:be:2b:e6:ee:fe:11:4d:53:58:77:45:31:6e:b4:
         e4:4c:0b:69:66:de:e6:da:be:89:62:7d:c2:7b:62:a0:41:a0:
         b7:a3:ed:d9:8f:17:ed:5d:8b:30:37:7a:37:89:e7:ed:7f:94:
         62:f9:89:c6:16:38:4c:fe:d4:a6:8b:ef:05:ac:e7:8e:73:8f:
         02:43:ef:5e:af:bd:17:0b:8f:cf:1e:9a:19:8b:fa:86:f9:f0:
         e0:3d:6d:52:fc:9b:f8:85:b2:99:70:e5:d6:9c:58:b3:9e:60:
         32:0b:13:03:85:85:d2:ca:e4:22:f8:9a:0d:89:e2:f5:b3:30:
         fc:00:4d:a2:ac:c4:30:13:1b:c9:dd:fd:e7:45:0d:90:5e:e3:
         c6:df:6e:be:a5:f5:07:83:0a:14:66:15:a3:ee:dc:77:41:1b:
         f7:9c:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----