Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File:                     ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier:          JVfblCC+/+YScWfuPK+UcNevqBP9nB81lhCUdYG1P1Y=
Subject key identifier:   C6:CA:41:8E:CF:55:6C:03:9D:24:12:A8:99:21:C8:F2:91:89:C6:60
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer:       /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial:       01962E61868C86B688BA189B715F826EDC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number:          10E3
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
                          2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: 6SxSzbQXrN7CGuRA5okLw65SlQaB20tLlelUt14h/Fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:86:8c:86:b6:88:ba:18:9b:71:5f:82:6e:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=c6ca418ecf556c039d2412a89921c8f29189c660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:0e:2c:0a:5d:12:bf:4e:35:c0:c3:65:18:
                    51:0a:9a:01:65:2a:01:02:6f:48:e2:9e:bd:05:15:
                    11:79:f2:39:2e:51:d9:9d:41:ef:e0:d0:fa:19:30:
                    02:b7:7d:84:f1:70:14:fb:d0:b3:75:75:ed:7e:30:
                    6c:c1:6b:f5:29:c4:3d:e4:9e:77:68:12:ab:01:91:
                    e3:c0:18:b9:32:07:ec:9b:0e:db:0f:3f:d1:42:20:
                    c1:f5:37:ed:de:fb:ec:8b:8f:d5:7e:91:44:f0:dd:
                    c9:a5:ef:bd:77:e4:3b:1d:d6:9c:69:e4:9e:6e:67:
                    66:9d:61:0b:2f:67:55:58:cb:9f:1e:a9:76:be:85:
                    64:d9:e4:69:10:42:35:52:9c:67:3e:da:56:91:b2:
                    20:6c:f3:b0:9f:bd:f0:f1:76:14:72:c1:51:05:81:
                    af:65:23:43:58:b5:fa:d1:65:4b:02:4e:0b:cb:29:
                    e8:8c:68:a1:bc:9b:97:a8:7d:dc:b0:b5:60:ab:f9:
                    2c:1b:7b:0a:02:f2:cf:e3:a8:a3:5a:ba:32:e0:30:
                    52:71:b4:d1:97:f2:e1:20:cc:4a:af:32:94:65:92:
                    ea:16:91:98:af:43:57:16:4f:a8:fd:da:16:85:9b:
                    b0:37:53:9d:3c:b7:26:aa:10:8c:51:76:77:34:42:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CA:41:8E:CF:55:6C:03:9D:24:12:A8:99:21:C8:F2:91:89:C6:60
            X509v3 Authority Key Identifier:
                keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:10:2f:10:95:f7:1c:96:e7:e2:fd:2f:f1:df:c5:d5:c6:af:
         7a:ed:99:33:9c:e1:c3:62:1a:24:de:fc:30:ba:35:9f:c0:cb:
         ca:d2:e1:c3:d2:39:99:02:e5:c6:71:1c:f1:fc:06:c0:62:a2:
         27:01:2f:56:2f:ae:f7:1e:69:a5:f2:db:ee:04:72:c3:69:a7:
         f6:a2:7c:56:07:28:04:ba:32:b0:81:7e:1c:82:ad:b1:ea:ef:
         d4:14:0a:45:1b:16:31:c0:1d:68:97:3d:b2:65:a3:c1:71:5a:
         63:5f:86:ae:49:37:50:df:2a:0c:49:2c:8f:fd:a1:d3:3f:9a:
         e0:af:cd:19:b4:75:52:fd:e6:82:a9:a9:f1:94:29:40:7b:2a:
         bb:30:f9:cb:27:d6:64:69:8e:e8:c2:7f:34:81:e6:60:5d:19:
         06:42:09:e3:11:23:02:c2:3a:74:b2:e8:8a:59:d2:21:37:c7:
         85:d8:d9:80:8c:06:e5:82:3d:01:b9:ad:9e:02:57:6b:c6:05:
         07:2a:01:61:67:88:04:23:39:65:c8:4e:50:50:8f:59:a5:9d:
         19:48:c5:b7:38:37:71:96:33:7e:82:bb:ad:dd:86:9e:69:d9:
         57:4e:12:63:a9:63:3f:c7:6f:a8:cc:74:38:59:51:22:0a:fb:
         21:8e:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----