Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File:                     zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier:          u2x58DzCVTx6swnarc9v4dVwxrSz5Usfrs4e+5XhlgU=
Subject key identifier:   52:23:41:23:49:56:76:E9:32:1C:46:0D:BC:67:ED:BF:DF:E6:87:7A
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer:       /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial:       01962E61776D1BD7C29207087454E60BCA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
                          2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: lrThbAIzZsOScaDbX9CGSgWh6W14RAw4+G0hGzHTOQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:77:6d:1b:d7:c2:92:07:08:74:54:e6:0b:ca:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=52234123495676e9321c460dbc67edbfdfe6877a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:4e:4c:49:12:71:3a:13:27:f4:ac:c9:af:
                    db:bf:d3:7e:ca:83:1d:d9:c4:98:e5:61:63:c1:a1:
                    cf:ca:ce:19:a2:62:6f:09:0a:c4:98:1c:fc:17:23:
                    a9:20:be:88:84:58:08:44:67:2c:1f:6f:36:3b:ba:
                    a4:78:9c:06:9b:3d:61:d9:94:1c:e0:2c:f9:ea:dd:
                    48:75:3b:70:73:87:7e:13:5d:72:e3:f3:f0:76:8b:
                    0c:f6:04:ce:2f:ae:89:a5:e8:ef:c6:6d:3d:02:56:
                    ca:74:ab:af:70:1b:c2:9b:8d:93:27:74:f1:34:69:
                    e1:95:a7:44:d4:36:0c:f7:70:9f:73:7a:5b:f7:62:
                    50:06:a3:16:5a:d3:6c:dc:0d:a7:c2:5f:3b:2b:b1:
                    78:1f:c4:7b:8c:85:53:ba:b7:a0:f6:ec:1b:b0:f2:
                    26:68:95:8b:72:f1:0d:65:3b:72:ce:65:cb:8a:98:
                    75:a0:55:78:31:a9:54:a6:6b:e7:57:b5:f1:3a:bf:
                    d3:a2:f4:de:a3:29:94:f5:14:7b:5b:96:ba:fc:72:
                    69:4c:8c:6d:49:cd:b7:68:7e:b9:73:40:b4:06:f7:
                    36:b3:f0:c0:31:90:c8:ca:bf:74:d1:e5:d8:fc:c1:
                    08:95:5c:4a:ab:d2:39:de:7c:3d:9d:1b:7a:1f:3f:
                    97:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:23:41:23:49:56:76:E9:32:1C:46:0D:BC:67:ED:BF:DF:E6:87:7A
            X509v3 Authority Key Identifier:
                keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:74:90:06:9c:0a:ce:d6:00:cf:e2:02:72:2e:b9:f6:f8:74:
         5d:d6:74:11:59:b7:df:5a:c1:2f:89:93:03:1e:e5:4e:30:38:
         78:fe:18:ed:38:cf:f1:27:2a:47:85:e5:07:53:95:67:73:ae:
         ad:a2:ef:35:73:47:16:84:37:20:82:0d:a3:7b:57:7f:e9:12:
         90:69:98:f7:13:c6:bb:b2:f6:f3:d1:0b:02:24:50:90:51:81:
         23:60:a6:c0:fd:a5:65:0f:dc:86:34:e4:ac:80:64:f8:ee:52:
         b4:8a:91:d7:09:2b:dc:b9:8f:69:e1:bc:04:e5:7e:74:e7:24:
         cd:97:66:e8:bd:83:72:13:90:30:4f:8d:66:98:a0:4b:2d:00:
         96:c3:64:61:93:61:5a:e0:ad:51:5c:80:6e:8d:e8:c7:d8:f7:
         a9:87:7d:c9:13:c7:c0:14:4d:9a:09:1b:21:da:4a:2f:7a:09:
         f6:38:b5:5b:ec:c0:7b:55:65:2b:79:27:f7:71:f5:67:4c:d7:
         2a:74:a0:f0:2d:77:0d:7e:ab:47:79:60:f8:86:41:63:15:01:
         81:2f:ef:ed:4f:d6:34:9c:c5:aa:35:22:c9:32:6c:4c:11:bc:
         42:f0:af:59:40:2c:80:56:e9:ce:e8:fd:47:fc:04:9d:24:f5:
         3b:1a:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----