Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft
File:                     zTu8GVzaflgkWmHLMLlv5XL9eBE.mft (raw, json)
Hash identifier:          I2b7WoeufD/JGPdWwrHS47gWtU1no/l7GItIAzOn7do=
Subject key identifier:   FB:CB:F2:D3:1F:EA:10:D1:53:73:25:03:EB:6B:4F:0B:F2:06:A3:3B
Authority key identifier: CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11
Certificate issuer:       /CN=cd3bbc195cda7e58245a61cb30b96fe572fd7811
Certificate serial:       01962F064E14D726DBAF04CC445AB8369D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTu8GVzaflgkWmHLMLlv5XL9eBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft
Manifest number:          0E3D
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: clDd21QzHwOlwdLoUbCFlA9N4Bc.roa (hash: b4fVPg9ViPXbDXBeIAFrk3g5qdFMK0V6puBPZsjXHfs=)
                          2: zTu8GVzaflgkWmHLMLlv5XL9eBE.crl (hash: pJQcpfqowmBAlsn58QDg+Xl9nbkhHRCZYMSskLE/st4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4e:14:d7:26:db:af:04:cc:44:5a:b8:36:9d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3bbc195cda7e58245a61cb30b96fe572fd7811
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=fbcbf2d31fea10d153732503eb6b4f0bf206a33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:3f:1c:b9:51:68:52:47:9b:37:97:2e:6f:
                    d1:76:a3:3b:03:f5:fa:07:33:26:02:cc:dd:ff:41:
                    0b:d5:9f:c0:a6:50:0a:a8:f2:96:57:d5:91:72:56:
                    8b:1a:e8:fe:85:dd:24:14:9a:7e:9c:90:91:fe:08:
                    6c:fb:d1:10:73:f3:71:dc:89:74:06:97:b3:b3:c1:
                    0b:27:e9:a3:d7:0c:8c:26:41:72:fa:96:32:cb:dd:
                    21:6f:0b:5d:d5:2f:b6:90:b3:30:f3:df:cb:0f:0f:
                    c5:73:68:90:57:53:bd:18:b3:48:b0:13:c4:cd:b9:
                    0e:dc:71:e7:3e:61:a1:35:46:06:42:b8:57:fa:52:
                    67:32:38:de:2d:37:a1:de:d5:21:3d:d2:3a:b1:99:
                    f3:40:c1:6b:b9:bd:f6:db:df:56:c4:8a:3c:38:9b:
                    d8:f3:b0:7a:7e:30:81:4b:8d:52:ca:30:44:cd:0b:
                    b0:f4:64:46:f9:1c:8b:51:ce:2c:82:1e:2a:dc:a8:
                    7d:81:14:8e:71:97:36:84:3e:95:3d:33:96:09:da:
                    9b:4b:7a:5c:c2:fc:89:93:62:60:b0:31:81:7c:cc:
                    e0:86:a7:13:66:83:b1:62:59:09:05:2d:1b:d0:14:
                    5b:42:df:aa:77:5a:cf:40:3f:e7:92:98:74:47:3d:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CB:F2:D3:1F:EA:10:D1:53:73:25:03:EB:6B:4F:0B:F2:06:A3:3B
            X509v3 Authority Key Identifier:
                keyid:CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTu8GVzaflgkWmHLMLlv5XL9eBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:4f:23:bc:44:d5:71:61:d0:e3:9a:4f:9c:ac:6f:19:d7:
         d5:f4:68:8f:8c:eb:dd:c2:8f:88:73:37:23:57:1f:19:a8:23:
         73:87:90:1c:7e:56:9b:58:93:85:77:24:38:5d:e5:36:d6:5d:
         b8:51:cb:c4:a9:e0:de:12:9e:bf:97:9e:32:86:0a:c1:80:8f:
         0f:d2:58:0f:eb:2e:c6:86:b9:3f:f0:6c:7f:10:5e:7a:88:1d:
         8a:e9:50:56:9f:6d:cd:6d:9b:aa:f0:1f:ee:67:76:87:b4:00:
         65:5e:8f:e0:ac:b5:89:42:a6:4c:44:bb:d4:c3:d1:08:ea:88:
         c8:b7:74:b1:1e:1d:d3:ed:bb:bf:be:2f:3c:3e:72:16:a2:be:
         ae:f4:0b:6c:4d:24:2d:c2:6c:fa:b7:bc:0d:f7:9d:0a:b1:94:
         21:b1:55:e5:1f:7e:fe:79:97:64:1d:3e:60:ae:bc:9a:0e:ff:
         8d:25:94:08:71:28:c8:aa:13:c0:6c:45:da:1e:b2:8b:62:12:
         83:3c:d4:fc:1a:01:f4:dc:10:d3:3c:4c:ce:af:26:08:96:b1:
         18:e6:21:4d:8e:1b:5f:04:dc:ba:98:95:9f:49:9d:69:1c:09:
         57:98:85:5c:71:a2:00:22:22:65:c3:71:da:df:0d:3a:bd:32:
         e0:45:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----