Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          tGz4J1C9JeQ1LBbr1pgkROyRGVu1bsVE+vXiZcl1zKE=
Subject key identifier:   10:DC:AB:43:8C:A0:BE:72:CE:FF:4A:5F:33:E2:40:E9:DC:4F:DA:AB
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       01962F3DCB0055284E41BAF012C9FDB67B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          1512
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=)
                          2: BhPT9ct0QQhlS6BTxHGKvPWfHxs.roa (hash: tck+K1FVcy2vP5iiS6BlAFqWfmvUmMWsdXvC/gdh9iQ=)
                          3: Ove3y5qjQ6KJduHbyBUEf3crDrU.roa (hash: Yg8G2jPObXRRMkd9TbBnulOGLBdfFwyyifHYbJD+bvI=)
                          4: U_xhzHfeoz3UECSz77CSeBreJSw.roa (hash: lqFJXg3vKAvQ4xE2hhrJv1eYOgDHS/MO2VODnSDgN6o=)
                          5: aGKbrC-2TFRuIRSo1mubaaBlJwo.roa (hash: q6Z4oiV5clUVLrYMvRMuNkNUlVbH7YullaT3MBgUCzY=)
                          6: sdklJRyXBMo5vnAMtJAE76-VseA.roa (hash: PMzYVxP4SD61xcc+iiMJiAjcEetP/Z1JcExC2sCVIX4=)
                          7: xoh9FTAHs_hmP4K1CkQuj-ry8Ko.roa (hash: VOMsRj+nLvAw+FZepArV/G+EZzcMGSLvjHlntZp93WA=)
                          8: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: 9J6/ab8XpHf8x1AujlEfMjAc41V5nDoL+RrbcgQgFzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cb:00:55:28:4e:41:ba:f0:12:c9:fd:b6:7b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=10dcab438ca0be72ceff4a5f33e240e9dc4fdaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:79:cc:b0:36:f4:44:01:65:90:0f:46:f7:
                    fc:02:22:9b:91:e0:ab:a6:cc:df:c0:41:2e:55:1a:
                    40:0a:d5:21:d7:61:1b:1b:fd:58:8e:ba:ff:c1:03:
                    5e:32:08:e3:32:85:6f:00:1f:7d:3d:d7:42:16:27:
                    ad:53:d1:55:e3:cb:3b:83:9f:d6:ea:7d:52:61:18:
                    ef:a7:63:01:7c:14:2a:1b:2e:fc:b1:0b:05:cc:24:
                    01:df:ea:a5:ad:15:c1:c7:d3:68:47:f2:dc:62:dc:
                    17:43:03:f9:e1:40:7a:75:d3:b6:ff:45:16:61:27:
                    f6:cd:b4:0d:f0:b8:a8:d9:53:a9:93:58:28:fb:8d:
                    87:3c:55:ab:b9:3e:f5:9f:6a:e0:5c:8c:84:1f:5e:
                    e1:ea:7c:8c:56:30:f4:84:0f:2e:90:b9:86:ea:5b:
                    f7:73:2c:c5:0b:21:84:c4:22:d0:33:f2:67:b4:05:
                    07:73:4b:21:9b:15:ad:bf:44:1d:a0:5c:f2:9b:16:
                    bd:22:b5:41:7e:3d:90:d9:bd:92:37:09:60:f6:27:
                    29:11:0f:d5:39:fd:c9:7c:e2:d6:61:01:13:fb:f4:
                    76:3b:4d:f6:55:20:bf:bc:2e:40:fb:e1:d5:45:f4:
                    0d:9e:83:20:19:14:3d:7f:fd:92:3f:79:58:c3:13:
                    12:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:AB:43:8C:A0:BE:72:CE:FF:4A:5F:33:E2:40:E9:DC:4F:DA:AB
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:82:61:47:f9:52:2b:c2:c0:4b:56:b5:f4:e1:22:25:26:
         56:84:e9:42:9f:4b:36:bd:89:15:5e:2b:34:dc:8d:f7:b4:66:
         e8:cf:a5:0c:6c:9e:86:a6:2a:b0:5d:00:19:f2:87:73:9d:76:
         3d:a9:0f:21:65:c9:57:26:14:76:19:9f:40:9b:71:4b:13:4d:
         71:17:56:21:4a:a0:9b:f0:56:23:fa:e8:2c:cb:4f:8e:56:e0:
         d2:de:34:fb:1e:d8:d4:de:4b:02:25:1a:b0:87:99:c0:fe:1c:
         ac:e1:f5:56:f9:02:04:22:a1:e3:34:d1:e4:3c:9b:66:7e:02:
         6a:48:2b:65:d9:a1:38:7d:9e:75:eb:f9:82:26:de:72:bb:44:
         f1:ea:9c:71:f9:1c:2e:1b:89:aa:68:01:ea:71:e8:41:14:41:
         98:50:82:40:b9:18:6f:4c:ca:2f:e6:05:9a:e9:95:24:0c:ff:
         12:d9:2b:1a:33:af:2c:22:3e:07:66:16:f6:82:bf:d0:c5:f1:
         98:52:ce:ef:3d:0f:61:26:8a:0b:8b:37:7a:20:b7:8f:e8:d8:
         a9:73:32:55:2e:42:79:b8:b8:8b:12:bd:c3:7a:75:70:12:66:
         07:47:c3:cc:82:a9:e1:9b:8d:49:09:59:15:76:71:17:b2:1b:
         ff:7d:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----