Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File:                     ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier:          lCkbnn2rNt3UmLcEhj+WkBUVip6gbZx4T5OWHt+rHOw=
Subject key identifier:   68:58:0E:9A:FE:47:AD:6A:46:2F:7B:EC:AB:6F:E2:7A:94:72:F2:25
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer:       /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial:       01962FABA65F29125B4660863809846F1EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
                          2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
                          3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
                          4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
                          5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: MkiRm7IiAgpGG+8kPSML6w7alXoBzTDxj076RMo5NI4=)
                          6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
                          7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a6:5f:29:12:5b:46:60:86:38:09:84:6f:1e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=68580e9afe47ad6a462f7becab6fe27a9472f225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:3e:01:a2:aa:73:1f:38:0d:38:d7:45:f2:
                    80:e2:36:42:8f:b0:fe:ad:9b:91:78:6f:5a:fc:33:
                    b5:9f:24:f6:1d:f9:dc:4b:e3:6c:54:76:03:48:82:
                    b4:10:1a:73:a3:95:ef:a1:42:d9:d5:87:91:f8:c7:
                    03:fc:ec:82:73:e1:a1:cc:2e:27:b5:87:b6:99:1f:
                    3c:a0:9d:8c:d3:94:c5:28:a9:51:8d:b6:79:1d:ba:
                    d8:c2:20:68:82:4d:c7:79:92:91:4d:ae:bc:8d:1f:
                    24:ee:29:a6:5e:cb:04:b0:ed:25:55:fe:04:53:a8:
                    ab:98:da:4e:77:56:2a:38:7d:95:e1:90:3b:ed:70:
                    d7:3c:bd:bf:a1:00:78:c5:5c:1f:a7:af:27:ae:b3:
                    40:03:a1:30:37:c8:94:0e:e1:34:6c:4b:78:85:38:
                    4b:7b:6c:6c:42:5b:28:4e:3f:cc:96:ef:74:b8:14:
                    34:fe:65:5d:0e:9d:6a:ba:40:8a:58:8e:f0:70:f1:
                    ac:15:f2:86:09:54:8b:d0:2f:07:9d:08:87:75:72:
                    bd:2a:43:cc:a9:38:ed:c6:e9:c9:04:0e:41:f0:0a:
                    1d:c3:b0:68:49:9f:51:b6:28:8c:4a:4c:39:24:63:
                    73:1f:1a:c9:ff:36:3f:00:44:3a:ca:66:1c:fe:4d:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:58:0E:9A:FE:47:AD:6A:46:2F:7B:EC:AB:6F:E2:7A:94:72:F2:25
            X509v3 Authority Key Identifier:
                keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:df:92:57:66:e4:d4:d2:a0:a9:81:cf:7e:85:71:43:fe:d6:
         90:a6:f0:79:61:aa:95:78:62:01:49:4e:80:99:6f:33:38:11:
         be:c0:2c:81:bf:e6:24:5b:e8:3f:84:08:9b:e6:0a:23:cc:f9:
         45:41:81:60:c5:ac:34:70:8a:78:10:c4:e8:07:b0:f7:f2:67:
         1e:80:b0:e0:1b:e8:3f:71:82:43:51:a1:af:95:35:0f:8b:b7:
         65:91:25:9c:ab:6c:ed:84:f4:9c:ee:53:2a:93:b1:5c:72:21:
         d8:a8:c3:5c:e5:e1:51:55:d2:e5:57:57:93:6d:c2:6a:b6:62:
         7c:d0:bc:9c:a7:d4:b2:1d:83:7d:0e:52:77:83:bd:c8:75:55:
         93:93:db:d6:fe:93:5e:d6:1c:f4:c2:fb:84:53:7c:a0:c8:b9:
         3b:0d:4e:06:bf:66:ae:e4:92:f2:1d:df:55:5a:bb:6f:f2:c2:
         ef:55:b1:69:1a:cc:42:37:0a:3f:20:35:6d:ab:c0:d1:3e:b6:
         23:bb:58:29:5f:41:da:c2:0f:be:b5:66:41:9a:a5:85:43:3d:
         3c:1c:36:37:62:aa:b5:f9:e7:36:ef:e1:86:9a:25:05:42:fd:
         b3:ec:d2:39:c0:1c:d7:3f:f2:c5:31:43:83:3a:28:33:b4:ec:
         53:3d:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----