Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File:                     zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier:          pHPXtwfR3JrucUzLsnSiSHXLfsLJ/f17rRv7m3/CO34=
Subject key identifier:   65:ED:8E:35:E7:C6:E4:D5:B0:B7:4B:00:04:C1:F2:50:A6:5D:71:38
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer:       /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial:       01962F748BEC7D10EF7421CF7033021C321E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
                          2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
                          3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: YBbjrMjI+7MtaDRWxFxNWgZE9sIhzH4dFdyWAG2RrrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:ec:7d:10:ef:74:21:cf:70:33:02:1c:32:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=65ed8e35e7c6e4d5b0b74b0004c1f250a65d7138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:5c:e6:0d:d6:b7:b2:e7:c1:6d:b1:19:64:
                    76:53:28:00:a7:c0:da:fe:39:f0:75:6e:95:83:9d:
                    cc:2d:60:cb:53:94:91:91:d5:8a:6a:2a:a3:d5:fc:
                    08:06:ef:c0:67:24:89:1a:d5:ef:67:da:06:9c:e8:
                    be:7f:9c:de:1c:8e:92:a7:d0:de:c1:04:08:75:f4:
                    28:96:d6:18:94:be:63:e8:29:32:52:28:29:a6:4b:
                    af:6d:88:99:64:75:d2:f2:9f:38:9a:52:9a:39:00:
                    7d:8d:a4:3c:c2:51:d0:63:16:d0:7d:bf:c1:f3:df:
                    ea:07:98:2f:2c:b3:85:34:e2:22:83:f0:dd:3c:54:
                    ef:f4:9c:9b:8c:cd:60:75:d7:f4:39:61:8d:89:71:
                    f8:49:59:8c:c9:27:a0:73:e9:81:20:0d:fe:d8:cc:
                    87:83:ea:10:cd:02:80:f9:d7:1e:9a:85:55:32:02:
                    00:b0:47:a9:62:e3:15:4d:86:af:24:bf:4e:05:c7:
                    ad:96:35:21:97:7d:3f:e1:4a:56:cb:5a:5a:e7:42:
                    f7:7f:fd:04:9a:ee:0b:1b:6a:b7:5d:5e:51:20:74:
                    de:27:fb:ab:41:a8:e1:9c:c7:97:01:b8:c7:49:28:
                    d3:19:80:86:4f:0b:07:5c:2d:6c:7b:3a:61:28:a7:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:ED:8E:35:E7:C6:E4:D5:B0:B7:4B:00:04:C1:F2:50:A6:5D:71:38
            X509v3 Authority Key Identifier:
                keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:96:34:f2:6a:f2:2f:1c:98:08:d4:ea:e1:57:d0:5f:62:38:
         3e:ce:6c:bd:57:64:ac:f9:c4:e4:36:a0:0b:8d:7e:12:f9:25:
         d3:ed:46:f6:8d:f5:a5:bd:43:e8:e9:cf:ae:63:e9:b3:69:83:
         3c:0b:52:87:13:37:33:07:10:0d:60:0b:74:52:00:67:78:19:
         c4:89:89:2d:3f:0e:e4:6c:a0:60:91:f6:70:b2:8e:85:f5:61:
         39:1a:86:1e:14:98:f1:07:03:00:d7:2f:4d:0a:13:d6:ab:1f:
         40:9c:7a:1d:6d:ee:c6:fc:d8:8e:64:6f:a1:f4:8a:70:33:ae:
         fb:d7:2f:ec:c7:46:88:6b:37:f1:3f:3c:f5:28:d5:9c:a3:17:
         4b:03:cb:41:22:15:a5:07:50:cd:02:9c:e1:e6:90:cf:d1:f4:
         39:6a:10:23:45:48:6d:da:b4:43:19:21:a6:f5:b6:03:56:26:
         7b:93:8e:c6:d3:a8:72:3b:9f:7e:6d:f9:b7:41:3f:78:67:0c:
         b0:b9:07:0d:8b:bb:c7:3b:ba:0e:53:1a:75:1f:e7:99:fe:44:
         e1:44:a6:39:24:8b:69:1f:6b:c6:a1:eb:05:3c:3d:ae:e3:b5:
         10:5d:b0:a2:aa:a2:5c:db:72:cf:84:48:bd:43:e4:90:5f:3e:
         ee:09:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----