Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
File:                     zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json)
Hash identifier:          nAEt2h536CY40YGlJSU35fzIdi5DuiohnRXGCcImBpM=
Subject key identifier:   9E:9B:7C:F8:7D:B6:1C:20:9E:96:B4:07:B4:A5:39:E9:DD:21:06:2C
Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Certificate issuer:       /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Certificate serial:       01962FAB333AD20F9A54FEDAC2D4691FCF8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
Manifest number:          055E
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: n3lj8Imlf54KOqF_Kqk-h0qcwVk.roa (hash: 2POYPsdH+jKImtpOmPpWEy8yit+ATY6Eb8geD/u6vK4=)
                          2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: xjAICFCGewyEhZfvb9NRonyITjRbsm3JY3Cg2U0c2j4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:33:3a:d2:0f:9a:54:fe:da:c2:d4:69:1f:cf:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=9e9b7cf87db61c209e96b407b4a539e9dd21062c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:80:f8:af:83:13:e0:9b:7f:3d:87:99:61:
                    df:83:31:75:a6:3d:a6:74:89:16:60:a3:6d:97:89:
                    45:bc:25:31:88:0f:9f:c0:7f:3c:53:f4:01:e9:d2:
                    7d:59:73:76:b7:f9:ca:6d:a1:7f:a3:e8:61:4b:58:
                    2d:7c:bd:6e:f2:d5:c7:bb:bd:1b:87:a5:fd:88:b8:
                    74:cb:58:c3:0b:c9:01:7e:9a:6b:72:84:2e:11:86:
                    c6:7c:8b:15:17:b7:26:ff:a1:41:07:8e:6a:60:d7:
                    f0:ab:96:25:68:71:76:e6:28:11:53:f9:85:d8:25:
                    c5:12:de:ac:96:84:dd:ef:04:07:c4:f8:59:1b:f7:
                    98:46:d4:57:f4:0b:ef:8a:d8:ab:f6:42:37:c8:f4:
                    f9:1a:ed:f0:ec:b8:53:31:89:52:e9:3b:1d:8c:2e:
                    15:96:c9:bb:5a:ae:1e:70:49:f6:78:2f:cf:4e:46:
                    ae:0b:ce:db:e2:68:45:0a:de:79:1e:88:29:11:7a:
                    c0:14:0b:c9:12:3f:7e:4a:9a:bf:67:4c:c5:67:dd:
                    b4:67:99:37:6a:4c:67:ec:45:e6:72:47:4f:3f:68:
                    92:04:52:df:ed:18:d4:05:f5:e8:36:a4:28:0a:de:
                    11:e9:2c:5d:fa:08:43:b7:f0:da:c7:b4:e6:c9:23:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:7C:F8:7D:B6:1C:20:9E:96:B4:07:B4:A5:39:E9:DD:21:06:2C
            X509v3 Authority Key Identifier:
                keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a8:46:3b:48:50:79:d6:11:1c:9d:1a:93:1d:5d:85:41:13:
         44:1f:76:f4:35:29:6a:07:e0:68:f2:1d:ae:e1:28:f9:dc:5a:
         f6:c9:bb:b5:a8:1c:31:15:3a:96:8c:8b:4b:cf:53:fc:de:f6:
         2b:4b:5c:b5:30:c5:d6:10:8a:e6:d9:ef:c1:e2:5a:d0:ca:17:
         51:28:71:37:45:6c:02:03:df:4d:07:ac:3a:bc:a9:98:32:a6:
         5d:4c:37:da:72:fe:37:d6:1b:18:11:3e:33:7a:17:39:6b:e9:
         3b:44:eb:81:f1:7b:57:46:7e:bf:cc:1d:4e:e9:9a:7a:14:44:
         13:63:82:3f:2e:bf:4d:5c:89:ff:6d:e2:e7:01:23:93:64:13:
         ba:17:b4:00:3f:4f:96:7e:ef:c8:58:9d:af:e4:89:23:d6:b0:
         09:e2:e4:57:1a:84:5b:74:2a:b7:a4:42:9c:b5:7c:2a:27:74:
         b4:7d:c4:0e:65:18:0b:29:0e:62:b7:f7:9e:95:71:86:13:2c:
         56:a5:82:92:9b:2e:31:1c:a9:23:09:eb:b7:ae:d4:52:b5:74:
         fb:74:4c:52:04:cb:71:58:2d:ca:76:31:c9:62:78:30:0d:f6:
         13:49:91:9b:54:05:02:1e:e9:d1:cf:20:11:70:65:f6:31:28:
         d4:9a:56:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----