Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File:                     t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier:          XfcHlKAgf6SUjdlSmwz/6HGdhTtULRpeCs5eLzDCp30=
Subject key identifier:   0E:9F:27:6D:12:68:45:E2:51:2E:8E:FA:8A:7D:51:27:F8:FD:B8:9C
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer:       /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial:       01962F3D7CE8496A963B2BA06CC5B86263DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number:          093C
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: edmqt8k6h22iakaymKCLi7swQIUVND4vQoB+zrsal4k=)
                          2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:e8:49:6a:96:3b:2b:a0:6c:c5:b8:62:63:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=0e9f276d126845e2512e8efa8a7d5127f8fdb89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:3a:00:73:f1:70:de:18:3f:23:d8:20:17:
                    da:b8:c0:d5:ed:30:7a:bb:62:fa:a4:57:8a:b7:54:
                    2a:2f:66:72:aa:b5:ed:1c:e2:96:37:89:02:d3:2a:
                    57:5d:9f:d1:2a:54:9d:bd:0d:ad:08:3d:c6:f5:e0:
                    9f:f4:82:71:48:65:78:98:c8:ec:74:1f:9a:47:b4:
                    07:eb:f9:57:69:4e:00:93:59:30:4d:a1:5f:70:d0:
                    ae:6c:a9:b8:0c:98:f8:a4:6a:a9:5e:ac:20:5e:c6:
                    47:ad:60:80:a8:b9:f5:fe:e2:3c:b9:ad:53:ef:d2:
                    82:7e:b1:7e:29:4a:f7:55:ff:cb:70:c9:a3:66:0d:
                    62:1d:42:e2:e0:72:b3:09:48:b4:1c:05:f6:50:b8:
                    17:e9:a2:31:39:ee:97:09:37:df:a5:5c:63:13:22:
                    4d:cf:b2:d4:e1:2d:9d:49:ea:9e:17:3d:19:4a:a1:
                    01:55:90:bb:34:41:d6:c7:06:f2:ca:9d:8f:20:85:
                    06:cf:92:8d:93:1b:c0:ce:ce:95:c6:75:83:af:8b:
                    ab:27:14:fb:ee:2d:a1:08:17:89:67:dd:5b:84:f4:
                    c6:9e:ea:99:c9:a1:9b:72:e5:8d:b6:0d:19:88:24:
                    35:21:00:8b:44:6e:dd:ad:5a:93:20:3c:e4:5b:6b:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:27:6D:12:68:45:E2:51:2E:8E:FA:8A:7D:51:27:F8:FD:B8:9C
            X509v3 Authority Key Identifier:
                keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:15:e6:9a:6e:61:4f:84:53:a5:0b:2d:de:9b:54:55:c1:
         de:f1:0f:1a:95:26:d3:93:9c:0f:6e:48:be:bb:c5:3b:2d:4d:
         42:1d:b6:2f:95:70:78:13:c3:7a:b8:70:7a:1c:5f:66:88:d7:
         d7:79:b3:c0:08:95:4d:cb:5d:97:99:0d:b7:7d:8c:21:ed:c9:
         d8:1d:a9:e2:5f:48:ff:3c:ff:ba:bf:92:0e:9f:94:03:5e:62:
         c7:b0:7a:99:0a:86:ff:82:84:09:45:1c:60:c6:3b:63:b7:6e:
         85:60:06:10:68:d1:34:4b:8e:30:70:b1:73:23:09:f9:19:f1:
         da:77:5a:7d:35:e8:b8:08:9f:18:e7:c4:14:80:0e:f8:e1:63:
         1d:0a:41:ff:8f:8c:58:76:e8:00:5b:39:ed:2e:e8:b3:17:fe:
         5c:ba:72:ed:fd:31:1f:9e:5b:85:a1:71:6e:fa:a5:80:cc:ec:
         72:9b:ca:bf:c2:9e:c9:aa:8e:6c:99:7f:b5:a3:33:5a:af:6b:
         d9:5d:de:3a:65:15:c1:d5:a6:5f:89:a9:53:99:65:10:c6:23:
         81:f7:87:2d:03:22:6a:61:f9:b3:b2:a0:9e:ca:30:a4:10:6f:
         9c:3c:92:a4:98:8d:03:8e:96:d6:0e:28:96:31:49:1f:be:cd:
         ae:33:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----