Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File:                     csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier:          4EBgbbtViZaBt9Lm4jPXa5dqAhJ+r79kXwP9Re+GvaU=
Subject key identifier:   6B:DD:93:56:73:44:2A:C1:3F:81:A4:AB:AC:BB:6D:C8:5C:03:27:13
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer:       /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial:       01962E98DCCB007F30D1EFC64A55AB317E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number:          0857
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
                          2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
                          3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
                          4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: jq3eaQAIhYnEwq46s5/F6Mwa+LPbv97S4MEnkEGyFmE=)
                          5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
                          6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
                          7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dc:cb:00:7f:30:d1:ef:c6:4a:55:ab:31:7e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=6bdd935673442ac13f81a4abacbb6dc85c032713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:51:36:9e:ce:76:d3:71:f7:ec:35:75:d1:
                    61:4f:75:93:84:90:16:58:30:81:f0:90:01:e9:29:
                    53:f9:b5:f4:06:7c:ff:ea:a2:46:8f:b0:32:52:8a:
                    cd:9a:2d:bb:41:19:af:63:42:6b:fc:26:11:88:12:
                    39:49:8d:4a:a3:a8:09:ee:41:78:48:26:52:b5:94:
                    b1:68:49:7e:96:4a:ec:ea:21:70:e6:9e:9a:d5:f4:
                    73:0f:ef:58:5a:40:2e:97:c0:4a:62:bd:51:b0:77:
                    0a:02:2c:a5:c5:cd:e6:c1:41:58:6f:83:72:9c:8e:
                    e3:bc:bc:16:3b:27:34:68:80:24:8c:91:fd:ec:6e:
                    8a:a9:9f:e8:4e:60:94:91:fe:36:c2:39:3c:7a:60:
                    6c:6e:73:2f:1d:6c:02:e2:46:e4:08:88:64:f8:0d:
                    a9:86:c7:c5:fe:9b:61:f6:74:50:28:d0:7b:5d:3f:
                    6a:4a:84:33:c8:34:e6:83:2b:f6:bd:ca:40:56:4c:
                    aa:d6:19:aa:e4:1d:ef:63:1e:10:65:43:d0:f4:86:
                    40:6f:f3:c1:28:6c:bf:46:24:6d:44:b7:55:99:a1:
                    a0:ef:89:77:00:3d:a7:d7:cd:73:48:56:c4:d1:83:
                    db:ff:20:4c:58:a9:64:ef:cc:63:3d:e0:15:f0:b0:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DD:93:56:73:44:2A:C1:3F:81:A4:AB:AC:BB:6D:C8:5C:03:27:13
            X509v3 Authority Key Identifier:
                keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:85:ce:c4:6e:81:08:c8:f1:28:79:81:0f:16:28:35:3d:
         81:4d:6f:0d:ed:05:fc:03:90:e3:53:24:18:e5:4a:7e:89:0d:
         4b:2c:06:32:3c:30:91:e1:07:43:a4:8f:da:16:b2:6a:91:30:
         6c:7d:bf:6a:15:cd:58:a2:06:f9:59:a3:8c:07:33:c4:d3:9e:
         ac:32:1d:55:98:1f:58:0b:db:34:ca:c3:4d:3c:51:84:bd:70:
         5a:cf:b4:c2:b8:b6:06:c0:b5:91:18:1f:53:db:dc:2c:a5:18:
         c1:c0:0f:55:9b:f9:db:b4:a1:01:7f:32:4d:24:16:82:4c:c5:
         b5:b0:54:f9:0d:dd:27:10:4d:eb:41:53:fd:90:a7:2c:d4:64:
         cf:21:d1:1d:c0:45:ef:19:18:d5:54:cb:65:6c:70:76:07:f4:
         09:f2:0a:be:f1:ca:ac:34:f3:90:f3:6f:f9:0b:bf:11:ca:56:
         ae:ba:66:19:ef:46:cc:51:bd:34:97:0b:ac:31:87:58:7f:d7:
         43:fd:5d:02:c1:e9:18:20:24:b8:d8:a8:65:18:96:ae:ac:72:
         43:64:ff:18:03:ea:1e:d9:2e:14:73:49:42:9b:df:88:08:61:
         b0:1d:0e:45:00:43:d7:5d:7d:14:f0:74:6f:d7:b2:2e:b8:88:
         8c:42:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----