Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File:                     Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier:          P2YzUdQdMCf18zY9S63PZJBleuBSHEEAaTVAJVxOlCc=
Subject key identifier:   AF:35:2E:88:34:72:6E:7D:D6:62:B2:7D:FB:A8:59:98:A3:3B:CF:D0
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer:       /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial:       01962FAB5CAE4AC8BA26B7EF5A99B6084562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number:          1311
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: p1r4gVLLgSJlhlqMdAxqtdb94XXZA0RM0PIE1JPNYgU=)
                          2: yojAQ3oth9lVhqX5wg8l8cBEUmI.roa (hash: o7RnG1CkyxwhqBFMnhN8mnO/r8Gaf2uetg2QG+K1/Js=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5c:ae:4a:c8:ba:26:b7:ef:5a:99:b6:08:45:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=af352e8834726e7dd662b27dfba85998a33bcfd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4d:f5:ea:30:b6:d1:a8:95:b9:ad:9a:ba:a9:
                    ce:6b:8f:e1:9c:71:81:b0:0a:80:40:e5:e0:b6:ac:
                    62:d2:5e:7a:f3:5a:0e:42:6c:96:35:2e:6f:03:ef:
                    97:fa:19:b5:3e:ae:d9:bf:1a:c5:4b:04:f5:6e:b3:
                    4a:56:05:46:f9:2a:09:e5:35:35:17:ee:af:d4:bf:
                    60:46:15:d2:f0:b9:eb:ba:a6:c7:89:96:c6:5f:f8:
                    e2:af:41:ea:68:cf:8b:9c:2c:35:bb:ae:aa:b4:68:
                    25:cc:c3:8d:34:88:f0:e3:bc:1a:84:f2:40:35:f0:
                    f8:08:87:72:a9:b7:0d:35:a5:ef:19:e7:4b:5f:37:
                    bb:54:3c:ae:11:d4:f9:41:80:1d:0f:ca:55:dc:7c:
                    4d:42:64:b2:8a:41:5d:40:c7:f0:42:36:e8:8b:27:
                    05:23:e2:63:ad:0b:48:39:4a:7a:24:f8:b7:11:71:
                    b3:38:fd:11:33:ff:f5:f8:9c:b8:2c:97:87:1f:1a:
                    4b:9a:4c:0b:2b:f2:6a:51:b2:f5:37:32:2d:00:0c:
                    84:bd:6a:7d:8e:2a:4b:79:0b:fe:4a:99:46:6f:01:
                    25:07:10:b8:a2:99:75:38:be:5c:eb:86:4c:21:ff:
                    4d:5d:94:95:a5:93:9d:fe:3c:75:37:40:4e:9a:d9:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:2E:88:34:72:6E:7D:D6:62:B2:7D:FB:A8:59:98:A3:3B:CF:D0
            X509v3 Authority Key Identifier:
                keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:46:04:72:64:eb:56:fb:50:03:31:c2:f4:30:3e:97:5d:
         a2:51:83:0e:fc:2c:76:7d:e2:0c:c5:ca:43:c4:b9:f8:3c:16:
         30:a8:1b:cb:0f:c1:bc:92:44:4f:04:b0:d3:03:4e:de:fc:a3:
         db:c3:d4:f3:63:ed:c5:d0:6c:47:48:ad:e1:eb:09:f0:65:40:
         b2:d5:1d:71:19:4d:8b:b6:ad:29:bd:2f:b6:0b:6d:68:fb:5e:
         b2:89:e5:e7:e2:79:cb:a1:ac:e0:df:f0:56:d4:9a:81:08:e7:
         fb:7a:12:47:fb:1a:48:0c:4c:b9:66:cd:b5:82:42:79:60:39:
         04:e1:59:fe:be:1f:7c:1d:5b:49:8a:1a:69:04:0e:7a:1d:4a:
         3b:8d:c8:2d:2c:9d:42:23:28:0d:4d:94:c6:77:77:e3:18:21:
         f4:b7:79:97:d6:28:c7:66:4b:2a:35:43:7f:ad:19:7f:88:30:
         86:ec:e0:27:c3:5d:35:d9:89:ed:74:a8:7f:9a:0d:0d:f3:de:
         16:bc:63:e4:f3:dd:94:7e:b4:a4:7f:2b:6e:5e:84:82:f9:1d:
         1e:ab:a0:ca:1b:1b:4d:78:20:2a:ed:82:33:44:e9:8d:d5:65:
         f4:ff:61:45:76:13:de:64:fc:77:0d:78:5a:ba:f7:dc:90:b1:
         88:3f:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----