Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File:                     zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier:          FbIYejc2MoZJHH1RZXFAZCfZ/qaoueFH57P2r95O39Q=
Subject key identifier:   3B:94:83:83:BC:75:97:27:8F:BE:68:CC:70:B7:FA:1A:49:95:9F:EA
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer:       /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial:       01962E61F2911EA7E76F19533509375DBB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number:          09AF
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
                          2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: aYic/51alh6aKF/ZWcIqBexnxA+VgLSenRgL+M2gknk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f2:91:1e:a7:e7:6f:19:53:35:09:37:5d:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=3b948383bc7597278fbe68cc70b7fa1a49959fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:c8:38:26:b8:64:de:cd:2f:76:0c:a3:0d:
                    73:de:bc:b9:62:11:c0:b8:f1:22:60:00:7d:72:cc:
                    a9:79:4f:1a:75:d0:e0:e4:7b:40:40:e5:53:f8:f3:
                    20:d6:e1:77:3e:b8:0f:e4:13:ae:59:b3:27:6d:d5:
                    30:11:fc:99:e2:5e:b2:6f:ed:3c:09:83:58:58:49:
                    65:fe:b3:4d:19:05:61:ec:44:82:65:8f:e2:08:98:
                    49:64:b8:87:14:a5:8c:03:ba:bf:7a:41:f7:13:1e:
                    41:d5:8d:53:d0:85:4c:b8:52:1e:14:9c:49:0b:bb:
                    fc:2b:0b:c4:2b:77:bb:1a:e9:64:7a:94:d3:90:fd:
                    56:70:d3:53:0a:aa:d1:24:71:5b:49:8f:1e:a8:68:
                    61:5e:a3:1c:6d:97:7c:7d:a9:2c:c6:90:6b:d9:5a:
                    10:9b:b3:ce:c8:45:1c:c7:f5:ea:cd:07:80:2b:c1:
                    1f:24:9d:ec:51:1c:e3:21:00:92:1f:7d:1a:8b:38:
                    c2:79:47:71:45:22:77:10:4e:c0:40:92:df:11:d8:
                    1d:80:9c:58:5b:7e:83:a7:fc:01:a3:30:e7:11:56:
                    da:7e:b3:d0:c3:af:87:4b:a1:cf:96:4e:7e:d2:fd:
                    f0:c5:28:92:8d:5b:08:ac:6f:09:aa:39:3d:25:42:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:94:83:83:BC:75:97:27:8F:BE:68:CC:70:B7:FA:1A:49:95:9F:EA
            X509v3 Authority Key Identifier:
                keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f8:22:47:3b:fc:d1:c4:e9:53:c9:2c:ea:28:47:49:ed:f5:
         53:7c:90:b6:00:63:56:35:96:19:37:29:b1:13:d6:b2:0e:2a:
         38:2d:e3:59:66:35:52:7e:5f:55:ca:3c:06:4b:6a:67:d9:b2:
         af:6e:d7:83:92:3f:ae:5f:79:5f:62:f7:eb:74:48:59:6b:8b:
         20:31:96:17:cb:7b:18:94:71:83:c8:0f:5c:3b:38:80:53:11:
         45:01:fe:49:70:c9:9f:79:ba:a1:91:ce:24:6b:b2:5d:1a:a9:
         1c:30:dd:b1:e4:52:41:3b:c2:92:03:c2:3f:e5:90:b8:85:32:
         19:6d:ca:ac:89:b4:c1:2a:86:5d:b8:21:dc:13:97:0e:b1:a3:
         3d:ef:7f:1e:e1:c3:df:2d:e9:89:a9:89:7a:1f:6d:31:67:78:
         49:c8:ad:f1:99:73:f1:7b:87:78:44:0f:61:3f:62:6e:22:d1:
         bb:98:6e:ee:58:d9:a5:01:ed:93:c9:b4:7e:4e:f5:40:17:84:
         19:c1:bb:09:af:3b:6d:4a:ab:20:16:6e:24:59:63:d0:af:34:
         f9:e3:1c:e1:9d:fc:39:b1:e8:bf:4a:4a:46:09:9a:97:e0:7b:
         fd:b7:54:55:28:f1:7c:24:a9:e2:bd:25:d0:fd:46:76:94:54:
         d5:40:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----