Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File:                     ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier:          0qTmw25OfvDdmL8IVVgn1MbdOJbR3yi2Un2tOrwzqk0=
Subject key identifier:   7F:F9:43:B3:D7:75:EC:FC:FE:AD:87:81:8B:C8:1A:07:27:A7:A7:E4
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer:       /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial:       01962E61AF4FAB2E27AE8CF4FFE2D5E8B2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number:          13F2
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=)
                          2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: Rkd3U7kU56bTi7o7YgPSmbB4Axvr4vbj1ecevLf7bzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:4f:ab:2e:27:ae:8c:f4:ff:e2:d5:e8:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=7ff943b3d775ecfcfead87818bc81a0727a7a7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:74:bd:6c:2f:a4:4c:2b:23:4e:b3:ce:5e:
                    60:94:6c:9a:6e:12:51:7e:99:5e:b2:03:38:6a:d1:
                    e5:56:02:f6:54:5e:dc:3d:9b:1b:46:66:ba:eb:17:
                    c2:7c:da:d1:cc:8c:4f:64:bb:9e:da:d8:1a:f7:1b:
                    2d:a7:75:e9:a7:6e:79:ac:be:a6:fc:8d:e6:97:79:
                    31:90:c5:1c:e4:67:25:c4:62:e7:10:eb:66:c3:90:
                    40:ea:92:cf:9b:9f:9c:74:0c:23:4b:f5:26:a2:ff:
                    ad:c7:5d:22:28:d9:b8:fb:91:b9:0e:8d:a9:0c:46:
                    13:58:6d:95:04:b6:d2:04:a9:ba:03:c4:a6:55:39:
                    7e:a6:fc:52:11:e5:6d:47:e3:86:90:82:98:33:7e:
                    1e:39:8a:7b:f5:5d:6a:f7:a0:5b:44:7d:e1:8e:15:
                    02:4c:d8:99:86:4f:cf:00:1c:d4:28:3a:cb:ff:74:
                    b9:93:81:62:95:ac:64:a2:f4:6f:64:40:e9:6a:3e:
                    3e:d9:63:b4:0b:14:4b:0d:ad:23:53:45:ff:bb:2e:
                    f1:4f:ed:a0:ba:32:0f:0f:4b:28:63:72:99:42:d0:
                    85:6f:95:b6:91:82:a6:1b:14:44:a9:96:3d:6a:fe:
                    67:a8:06:3e:50:aa:db:87:f6:7f:bb:8d:25:ed:1d:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:43:B3:D7:75:EC:FC:FE:AD:87:81:8B:C8:1A:07:27:A7:A7:E4
            X509v3 Authority Key Identifier:
                keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ef:21:22:57:0b:c1:dc:ae:a1:d4:18:18:3c:d0:89:c8:11:
         27:ce:ef:3e:b3:64:61:84:72:78:a6:44:e2:c2:b5:39:04:ce:
         74:c1:ff:df:57:3e:31:0f:7e:61:23:f6:9f:35:c8:ac:ba:9b:
         7d:ce:4b:73:a8:69:1f:4d:7a:6e:f6:39:6b:00:2d:50:69:25:
         e1:36:9e:69:50:ca:ab:91:75:d3:31:35:39:ff:67:23:71:a8:
         d2:0e:f0:6a:5c:40:ba:9c:91:c7:ec:fb:61:d5:6e:07:4e:8c:
         38:32:ee:6a:4b:97:9a:0a:f4:48:a8:ec:12:a8:40:dc:80:b6:
         67:44:39:da:ba:68:2f:44:88:02:49:73:21:42:c2:0c:7a:9b:
         73:36:98:b3:12:9b:d9:cc:42:51:30:04:96:58:9d:66:8a:6a:
         d1:76:2c:15:9a:30:73:32:e3:d5:8f:d0:25:a0:e4:5d:a0:85:
         92:ed:03:07:37:2c:9c:46:8c:83:b4:3e:72:75:44:74:13:b2:
         f8:5a:19:cc:ed:d3:74:af:cd:7d:7e:36:cd:1c:44:84:ea:dd:
         45:84:66:3a:e1:b9:80:dd:e6:e2:47:9a:cf:2c:d1:e5:65:4f:
         ec:10:a7:24:98:23:96:90:a4:2f:ba:46:79:41:b6:a3:6b:0f:
         75:79:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----