Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          PF5vS9aLuuQe71R+dfOfAHgq40uAKX96l5JD2WyXZhM=
Subject key identifier:   65:F8:BE:34:E3:8B:20:9D:8C:7A:8D:D3:CE:C0:19:BC:A1:3C:B3:C1
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       01962F74E697C6AEBF78E8733FEE8758C8A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: ZvEba4Rdcu1awuykQmNJgPHeu5xl/xmqlyOZmHDI1lY=)
                          2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=)
                          3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=)
                          4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=)
                          5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e6:97:c6:ae:bf:78:e8:73:3f:ee:87:58:c8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=65f8be34e38b209d8c7a8dd3cec019bca13cb3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:2b:e8:1a:82:35:24:5b:13:11:a2:98:67:
                    d0:17:06:88:29:c8:82:bc:74:bd:43:c5:74:be:17:
                    f2:30:a9:98:ec:97:3b:c6:f7:4e:de:aa:1d:35:cc:
                    1d:98:37:ca:e7:64:7f:5d:5e:b8:67:c9:e1:bf:e9:
                    df:e4:ca:b5:f6:29:58:73:85:a4:19:4e:bc:31:b5:
                    a5:98:16:3c:5f:c3:cd:f1:70:a6:80:4e:fc:44:86:
                    20:f7:a6:6b:82:dc:d5:bb:58:b5:bd:ff:75:12:8d:
                    47:2c:91:be:38:5e:75:44:f7:82:d6:9f:8a:bc:95:
                    5e:2e:a4:bd:17:3e:7f:ae:a3:88:a3:4c:d6:20:f9:
                    ce:ec:51:b4:20:5a:71:6c:ae:81:37:56:88:83:57:
                    3a:c7:77:a9:26:2f:b6:29:fe:93:db:df:ca:05:63:
                    6b:44:7f:df:45:ff:90:e0:89:bd:9d:64:45:60:8b:
                    c8:09:38:74:03:2c:fe:07:35:b9:84:f3:c9:bd:bd:
                    0b:fb:6d:4d:3d:7f:be:90:9b:7e:bf:1a:63:d8:39:
                    48:f6:65:0e:15:2f:8e:ec:e9:7e:bf:fb:cf:80:50:
                    94:fc:82:e1:af:5e:e3:87:17:40:ab:78:28:4c:bb:
                    7d:91:73:d3:1c:46:c6:39:47:50:39:ae:25:33:2c:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F8:BE:34:E3:8B:20:9D:8C:7A:8D:D3:CE:C0:19:BC:A1:3C:B3:C1
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:f2:80:9a:39:6a:9d:7a:84:44:e2:37:9e:ab:39:66:81:
         52:4b:50:0c:f1:bd:ed:b5:55:43:a4:6d:cf:91:f1:df:6c:4d:
         3f:d7:6f:aa:62:72:22:6c:c3:5a:e4:f4:7f:62:91:6c:06:4f:
         f3:17:bc:3d:60:ce:cc:80:42:c6:f3:57:db:44:9e:c3:0c:24:
         c7:82:9d:49:6a:0f:f9:5c:b4:61:5a:84:64:1b:31:d4:28:c3:
         a6:c1:7f:64:76:b2:81:2d:2e:df:8e:fe:4d:17:b1:6d:40:69:
         25:54:7b:35:7a:67:ca:0b:0a:79:90:d7:af:22:af:3d:c8:d0:
         57:3a:80:97:21:d5:ec:16:ac:70:62:f9:b8:4a:11:fa:2d:06:
         0f:29:14:fb:f7:02:82:c4:30:86:c8:8a:03:cd:08:b3:e2:4d:
         58:ba:ac:5b:8c:b5:67:35:ab:b6:96:91:ba:2f:07:48:93:08:
         ad:ca:ac:6f:c4:27:d9:d2:a5:d0:82:bd:38:86:82:7b:e0:42:
         0c:47:95:c2:42:d0:90:c7:47:28:f4:80:86:e0:4a:ea:e3:a2:
         60:55:e5:36:2e:61:e5:9b:d3:ec:44:28:50:2b:4a:bd:5a:bf:
         55:33:83:14:c9:1d:cd:d8:fd:96:da:75:a5:f8:93:90:38:c4:
         de:a9:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----