Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          Ed2O5+M+p50XqSxY6wlcac465f7FIE4pTUpbzIya5sI=
Subject key identifier:   36:04:D0:8B:0E:E4:43:E5:7C:82:52:34:3B:7A:EF:51:E2:F3:8B:A4
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       01962E9914C8B67C736DE05A3DAA1D2DFC90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          122A
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: B8oRkRXtSN3T83PmuQj6501NqnrhLXYIB74b/E8UfR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:14:c8:b6:7c:73:6d:e0:5a:3d:aa:1d:2d:fc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=3604d08b0ee443e57c8252343b7aef51e2f38ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:3f:15:2d:51:00:8a:ec:2d:c7:8c:86:96:
                    ef:ee:4d:da:48:75:9d:9e:0e:0b:fd:8a:1e:53:60:
                    ee:0e:66:27:e0:90:98:bf:02:7a:36:be:1e:34:cd:
                    0f:2b:6e:a7:af:bb:20:61:53:f2:c5:f8:1c:03:8a:
                    37:da:fb:7d:1d:27:53:da:4f:7c:c8:71:ac:0e:cb:
                    4c:6d:84:dd:d0:50:3b:f4:a6:58:4d:0c:57:17:4b:
                    19:84:4f:80:56:f0:f7:24:2f:88:15:46:2e:42:d6:
                    ce:b8:f5:c0:3a:f4:da:aa:3e:e9:74:92:6b:51:f1:
                    3f:b6:0f:06:55:4d:93:d9:59:ef:69:1e:06:33:9c:
                    d8:75:ce:62:12:f8:f7:a1:3a:88:5e:b6:5d:e7:ab:
                    d1:83:92:d1:02:e2:c3:42:a6:d3:4e:e8:db:e9:21:
                    e2:f7:56:2c:a6:e6:d5:a9:ea:66:45:c5:d4:a6:90:
                    bd:01:21:be:e6:f8:f4:12:75:96:9c:d7:9b:ef:a0:
                    a7:75:44:bd:ea:33:7b:70:2e:ad:5f:bf:ed:7c:dd:
                    a4:d3:db:43:ab:8a:58:de:1e:d7:13:7e:94:cb:95:
                    e8:60:6f:f6:bd:cb:6c:29:20:d9:75:ba:3f:d2:d5:
                    ae:f0:d8:ce:94:78:51:d9:3d:c3:39:2d:cd:b1:9a:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:04:D0:8B:0E:E4:43:E5:7C:82:52:34:3B:7A:EF:51:E2:F3:8B:A4
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:70:1a:22:e9:5b:69:57:5a:69:2a:fe:a2:4d:6c:48:db:
         7e:2e:c7:e1:cd:eb:0f:ad:15:1b:f2:7e:1d:42:d7:5b:15:32:
         d3:7a:28:3c:86:48:34:34:09:cf:08:99:98:03:3a:50:32:ef:
         dc:a9:29:1b:ae:4f:5b:f5:7d:5c:eb:2c:c2:d3:e7:81:bc:ee:
         a4:bc:cc:c3:48:d7:5f:51:92:a7:d8:50:49:73:76:1d:7c:09:
         88:e8:34:9a:b1:b9:df:db:79:38:3b:b6:2f:52:c6:ea:20:7b:
         0d:cb:f8:60:16:8e:9b:57:c7:6c:5c:cd:ac:f8:b6:fa:16:0c:
         ec:27:7b:a7:94:53:b8:39:7e:25:ed:b1:a8:7c:48:c7:a1:80:
         b7:82:90:6d:17:39:ce:91:7e:f8:b3:35:23:bd:c9:1b:a7:56:
         29:9a:26:6b:58:45:2d:df:6d:01:30:1b:ab:90:9d:e6:b6:77:
         44:ad:00:f6:47:a4:a7:b3:5c:f2:51:e5:be:d3:d1:77:43:b8:
         17:4e:a5:e9:4b:1a:36:7d:9b:5b:a4:97:48:6f:ef:65:e0:00:
         92:c4:40:7f:ec:4a:3b:89:7c:86:ca:18:de:4c:b4:ba:02:20:
         f0:e1:bd:b7:fc:32:69:ec:ff:26:b2:8a:21:e3:40:5a:31:0c:
         9c:91:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----