Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File:                     zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier:          tjY1xu/YkNNshiyHXcId3leREy3Headk+qBFxN7QPmE=
Subject key identifier:   D0:7E:AB:A6:FA:6D:73:07:EB:F4:02:98:A1:A8:65:E1:F3:61:4C:A4
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer:       /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial:       01962E992993E1B93FFD6E02026BD42C4B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number:          0B48
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
                          2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: VfeiOpOaqHhRru+Tq5r0w1e/mcDkc8XHPNozXNUG4Lg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:29:93:e1:b9:3f:fd:6e:02:02:6b:d4:2c:4b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=d07eaba6fa6d7307ebf40298a1a865e1f3614ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:66:fd:78:54:be:06:00:ca:34:41:4e:d8:
                    a9:01:cb:68:00:ea:68:df:9a:58:ec:04:45:8b:bc:
                    11:fb:1f:0a:7f:c2:72:fc:f9:31:fb:90:47:0a:22:
                    b5:0e:ef:2c:08:89:27:71:b9:20:5e:19:ec:6b:93:
                    41:a8:26:6a:2e:ea:65:fe:70:e0:d7:c3:f5:43:1a:
                    a9:3b:f0:d7:04:9c:86:78:63:09:5f:f8:65:75:c5:
                    ae:7b:c7:80:84:1a:89:be:41:0b:6f:b8:0c:0a:50:
                    df:1d:09:cb:da:5b:71:e1:5d:99:73:a2:bd:25:b3:
                    2c:65:20:20:ec:81:f8:3a:b4:8d:93:4c:d5:27:09:
                    86:3d:5d:8a:9b:be:4b:3c:d3:a3:48:0d:46:1d:47:
                    15:ff:29:1f:d7:81:38:d9:6f:67:e3:98:09:5b:5c:
                    9b:a3:e4:80:0c:ca:ad:55:d2:62:4c:4b:5c:44:dc:
                    be:4d:1e:07:6f:62:b6:eb:55:83:2c:e6:c3:5c:9a:
                    65:dd:02:58:04:2f:6d:84:92:25:b8:96:71:79:a6:
                    24:61:ab:5e:77:dc:0d:e5:8f:9d:8d:07:c3:66:0e:
                    18:f6:2c:a3:b8:fd:4b:2d:48:fc:17:65:0b:06:e9:
                    16:36:cf:54:a2:53:76:c3:5c:54:a6:cc:63:3c:c3:
                    3d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:AB:A6:FA:6D:73:07:EB:F4:02:98:A1:A8:65:E1:F3:61:4C:A4
            X509v3 Authority Key Identifier:
                keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e9:08:b7:07:46:72:6b:98:23:01:09:d8:08:de:4d:15:92:
         d3:b4:34:d8:da:7b:df:5e:14:b4:af:e8:f9:7b:53:91:f6:13:
         8b:1d:8d:a7:fe:a8:66:e3:33:da:20:2e:01:e2:a5:ef:e7:ff:
         d1:db:37:cb:36:4a:23:72:28:03:85:89:e4:50:39:2a:88:de:
         18:0a:7c:d5:ab:a7:36:57:ae:cd:33:d9:25:a0:98:aa:4c:90:
         ea:e6:e6:ed:1e:f1:f6:e2:0d:9f:54:79:b8:b6:d6:6a:70:51:
         87:c5:19:75:2e:37:3c:f8:97:3c:52:10:96:7e:16:21:07:aa:
         97:73:83:82:32:5b:11:5d:3e:ba:7d:69:5d:94:1e:79:e6:87:
         1e:7f:cd:89:04:97:d5:cc:c3:fd:8d:b1:c9:7b:ad:d2:fd:25:
         2c:fc:93:a3:c2:7c:46:fe:39:02:8e:13:21:ee:08:f4:7c:9b:
         51:49:2e:21:89:44:46:fa:15:f6:09:17:64:89:4f:9f:28:44:
         17:38:b3:02:ea:ce:92:bc:22:11:57:02:5f:ff:97:cb:e2:9e:
         2c:20:11:c7:11:68:69:88:0e:02:e5:15:23:91:aa:24:16:ac:
         82:39:17:35:f2:06:8e:af:2e:16:ca:dd:70:aa:14:b9:13:e5:
         e0:b7:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----