Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File:                     zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier:          6Gz3YNMlPTccs7xxj16xPmj42YWzrJZdLC/7yY8XE68=
Subject key identifier:   65:51:9D:33:26:6C:EC:E0:BA:96:36:C9:F6:D3:28:71:17:16:8E:55
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer:       /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial:       01962E61B62CEA2FCB821B337EA7EFBFA0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
                          2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
                          3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: mNOlX0gDSN4fJ7Jtpw05Vj0NH5BGC24txqX4/v4cLAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b6:2c:ea:2f:cb:82:1b:33:7e:a7:ef:bf:a0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=65519d33266cece0ba9636c9f6d3287117168e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:a9:2a:f9:d3:6f:8b:6d:2c:dd:c3:59:cf:
                    df:e8:35:e4:8b:8d:35:63:db:e4:6e:c3:c2:3e:11:
                    d3:2e:3e:a1:91:e9:0e:06:da:35:9d:2f:76:cf:3a:
                    8d:03:82:77:d6:eb:ca:73:27:f9:12:43:6d:9e:7f:
                    b4:0b:9f:cf:ce:3b:12:0a:0f:63:2d:ee:a3:e9:cd:
                    be:5f:0a:be:26:a1:18:f7:f1:f5:fc:c9:d3:23:89:
                    24:70:c8:92:53:0c:7e:60:51:e6:69:57:14:2d:16:
                    55:9d:b0:53:6b:70:6c:35:33:02:04:88:dc:a9:c5:
                    f6:18:d1:be:5e:d5:fc:cd:49:de:e8:50:72:cc:61:
                    ca:89:e3:0e:cd:7c:c9:c4:a3:df:83:c5:a6:fb:e6:
                    c9:9a:71:d3:03:46:55:a3:18:c8:f6:f1:9c:1f:b5:
                    1b:c4:bd:fa:21:3e:12:33:3a:6b:33:2f:eb:62:d5:
                    a4:79:47:b5:8d:9a:c6:6d:72:97:54:e4:32:dc:68:
                    8e:6a:6d:05:ae:43:c0:47:ac:f6:50:ec:4c:1b:b8:
                    01:10:bd:8e:f5:0e:55:9c:f0:49:7d:90:75:ca:a2:
                    0d:97:58:f2:66:5e:ff:80:92:6e:18:1b:c7:b9:ef:
                    73:de:43:56:e4:6f:f2:a5:d4:83:b4:d5:a9:10:ea:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:51:9D:33:26:6C:EC:E0:BA:96:36:C9:F6:D3:28:71:17:16:8E:55
            X509v3 Authority Key Identifier:
                keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4d:58:b1:27:c7:18:21:df:e6:2e:b8:c1:e5:4a:7f:1a:14:
         7e:df:e2:79:28:44:d7:8a:b4:11:40:98:3f:2d:f1:bf:2f:ed:
         5c:7b:93:db:ef:1d:1f:b2:60:bf:e5:46:a7:1f:a3:d7:f9:aa:
         68:e9:b8:9d:7f:ef:8c:1a:cb:73:11:47:88:1b:0b:f2:58:d9:
         ee:c4:51:02:df:5f:34:ff:c0:e7:38:24:01:a7:e2:3f:c4:da:
         af:98:38:b3:95:12:ae:d9:c5:1d:da:c3:24:59:a1:ab:9f:f5:
         b3:61:b7:24:4f:50:28:d4:43:33:14:53:36:0a:bc:1a:d3:e1:
         6c:22:32:3f:61:69:5c:b1:8c:43:f4:91:6c:21:03:2c:20:ca:
         5c:a2:f3:5c:1e:be:be:02:52:bb:1c:84:8d:bc:9a:93:b3:9d:
         ac:bc:7e:6a:c5:d3:1a:73:bf:1c:e3:6a:8c:c9:e7:00:b3:8a:
         bd:b0:31:c4:b9:10:6c:13:5b:65:b1:37:c6:15:31:4c:88:39:
         d8:ea:60:b9:68:15:f9:a4:26:44:8c:d3:c7:8a:62:f4:4b:62:
         4c:4c:e3:c0:6e:0a:10:4b:f1:a8:4b:ba:78:34:b4:e3:4b:dc:
         16:38:58:ab:03:61:78:ec:d1:4c:8c:58:66:cb:ca:20:d0:33:
         03:3f:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----