Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File:                     zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier:          E6/uLTBJr4nT/A+QVPyoYjrzb/utZeN66O1oBp6v1hQ=
Subject key identifier:   F9:CF:4F:3F:35:67:E9:8F:F8:99:DA:40:FA:C4:15:DB:29:7E:19:2B
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer:       /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial:       01962F3DBBE0A8D999D2822A2251C0BD14B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
                          2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: s0+c4+CEK2/0Ov3mQqe5kPlRtkTot0UF3V1AKE/X8fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:e0:a8:d9:99:d2:82:2a:22:51:c0:bd:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=f9cf4f3f3567e98ff899da40fac415db297e192b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b1:a0:28:1e:25:1e:95:ec:96:2a:3f:c0:6b:
                    6d:75:65:db:94:28:ed:57:8b:8a:11:fb:77:44:15:
                    20:2f:c6:9e:34:37:88:5c:41:3c:f5:ff:98:ee:7d:
                    e4:dc:b5:89:6e:5d:62:26:94:95:02:46:fd:f9:9b:
                    c1:c3:cb:04:72:26:9d:9d:cd:1d:e6:6d:07:4e:9b:
                    72:e0:ed:ae:37:e9:e6:c8:92:06:4c:5c:66:cc:f7:
                    ee:b2:a4:98:23:31:7b:b4:20:d9:a5:41:f6:38:f5:
                    c5:37:83:c1:5e:96:15:95:0f:a6:cc:aa:aa:6d:69:
                    cc:8e:4e:a3:04:2f:c2:32:1f:fc:39:71:d1:d8:23:
                    36:d2:7b:8a:76:d8:80:df:74:91:ea:c0:e9:e1:b2:
                    dd:76:5f:fd:cf:7a:d3:8b:87:cf:83:de:06:6c:e4:
                    21:2b:23:3b:e9:d1:bd:de:aa:92:c1:cf:c0:2e:f6:
                    d9:64:4c:72:4d:90:95:56:6f:80:af:4b:63:17:ee:
                    a6:57:69:40:a7:52:61:f5:bf:c4:8e:87:b2:92:2f:
                    7b:c0:4a:41:2c:03:52:ca:fb:3d:f1:14:5f:2f:fe:
                    aa:bb:c7:aa:e3:a7:79:90:07:d5:76:82:57:a9:6d:
                    51:1b:1f:b4:38:5e:cf:95:e5:50:1e:fc:49:35:d1:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:4F:3F:35:67:E9:8F:F8:99:DA:40:FA:C4:15:DB:29:7E:19:2B
            X509v3 Authority Key Identifier:
                keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:c2:ea:10:ad:f0:f3:0d:de:c3:17:5b:0f:d7:6c:46:f1:
         7a:f9:22:b1:c6:ab:26:f0:f2:be:39:68:ec:34:84:21:1a:16:
         43:df:d5:b0:75:9a:c5:81:34:e9:83:dc:04:9a:8b:30:bd:44:
         f9:f3:18:35:01:b4:cd:a8:62:a7:86:d6:ce:26:06:ed:7f:38:
         d6:8e:70:29:54:3d:1b:05:56:4c:35:5f:42:65:7c:a0:17:8e:
         71:07:ee:db:45:6e:08:47:24:0c:c7:d0:0a:f5:c4:7d:13:bb:
         a8:cf:d5:d0:ae:41:9e:1e:4c:72:92:97:49:10:4e:dd:78:68:
         70:63:47:df:75:25:11:b1:38:81:75:16:ec:fb:cd:fe:44:da:
         8a:11:09:55:e8:ef:c5:3a:6c:3f:98:40:96:d6:5f:0d:99:71:
         80:5c:18:28:41:e6:45:d2:6c:81:94:53:20:bf:16:3e:5c:ca:
         fc:f9:86:4a:6c:8d:46:04:4d:46:44:d2:2c:72:a0:c4:e9:2a:
         80:62:9e:e8:a9:88:1a:7c:99:7a:ed:d7:b6:e9:6d:96:d1:48:
         ce:f5:6a:fb:71:30:21:e2:7e:73:49:88:f3:87:bf:0b:95:fd:
         27:22:a0:7e:68:ff:0f:a6:b0:9d:d4:67:87:09:84:c0:f1:9c:
         21:0d:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----