Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File:                     ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier:          S2KPqjEdvYASOWZkFXJN8H+nfLYJ1VxMfLc7rCpOsLM=
Subject key identifier:   9D:51:4B:F9:14:79:DD:55:12:42:27:87:D0:DB:BA:97:B7:FE:91:99
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer:       /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial:       01962F74CDB63B2F26E6DF5E3D05C239884D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number:          0568
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
                          2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: V0A35MdcONxpBf8jhCx/Z5wGsn4q2TkaE2wkCIQAfFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:b6:3b:2f:26:e6:df:5e:3d:05:c2:39:88:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=9d514bf91479dd5512422787d0dbba97b7fe9199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:73:12:29:3a:0d:f0:56:f2:75:cc:d2:54:
                    9a:8d:02:db:92:e2:9b:b8:bf:bf:32:70:42:cf:2c:
                    95:78:84:8f:89:8a:5c:39:7b:29:ad:56:a9:18:34:
                    a9:00:16:28:8d:09:5c:3c:c8:c9:bc:12:f4:10:02:
                    12:68:1c:2e:bd:2e:44:ea:93:a7:c0:a3:9d:25:62:
                    f0:45:de:b6:b0:63:c6:5b:f0:a2:53:41:88:da:e2:
                    43:b8:c5:e5:69:34:d8:aa:d0:34:69:a7:6a:4b:a4:
                    c9:57:ac:fa:35:46:a9:53:57:3c:14:cd:dc:08:00:
                    9b:f7:b9:81:a6:60:43:51:a1:33:2f:1c:97:ef:97:
                    da:dd:57:dd:a8:2c:78:87:0d:f9:9d:cf:ae:ee:aa:
                    80:29:f0:38:e0:ef:49:1b:2b:13:71:c1:84:1e:c0:
                    05:2c:e4:16:67:71:64:df:2c:2f:a0:35:6b:44:c7:
                    5c:f8:92:b8:8e:74:1a:27:7a:44:d2:f7:20:f6:8a:
                    45:be:ac:38:8a:be:14:3c:74:41:c8:6c:b0:ec:1a:
                    ed:47:18:6c:75:dc:cd:ef:2d:ed:71:73:1e:01:16:
                    a2:8f:7d:cd:cb:f6:5c:6b:a4:c4:2c:de:bb:58:02:
                    cf:79:10:4d:84:88:36:26:89:71:9b:8b:0d:00:b3:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:4B:F9:14:79:DD:55:12:42:27:87:D0:DB:BA:97:B7:FE:91:99
            X509v3 Authority Key Identifier:
                keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:80:1f:9d:8f:93:78:14:7f:93:ba:48:06:6c:5e:0a:12:
         05:ad:79:54:28:0a:0e:9c:7c:ff:ef:b9:1a:69:ef:e5:02:fe:
         3c:10:8c:76:7c:b4:0b:a4:86:eb:55:c1:ff:ae:2f:40:65:6c:
         00:9d:c3:cf:14:e8:b4:8a:f3:3a:ca:c2:50:87:e9:b6:4e:76:
         4d:8e:87:c8:3d:15:7b:eb:0c:35:29:9e:58:81:32:83:84:ae:
         6f:ce:a8:3c:76:0d:1d:3c:a3:02:b7:e6:32:ad:d3:26:af:34:
         ad:77:29:0f:fe:3b:f6:b4:6f:df:93:d7:9e:4b:e5:0a:0a:55:
         38:df:43:0c:4f:44:05:84:36:69:7d:9d:ff:03:90:f5:21:6c:
         1a:0d:1a:d0:f9:79:02:a9:4d:49:04:6d:b1:1e:bd:e0:39:84:
         7b:ad:a4:88:59:57:96:e5:c0:db:dd:13:6e:2a:53:13:6c:c8:
         cb:f7:c7:2d:94:df:11:7c:66:7f:03:1f:06:2f:e1:12:b6:5c:
         d5:61:0b:2c:55:76:28:f5:8e:07:bb:7f:4d:d0:e9:8c:3e:6d:
         e6:81:c6:6c:13:9b:ed:70:c6:c1:dc:5f:82:c1:1f:d2:c1:8e:
         4a:81:41:19:3c:75:98:64:f8:1d:af:65:d9:99:dd:49:a3:0b:
         7e:30:09:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----