Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File:                     rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier:          RGd76FbgbNln0CZFuwnWTBWVA2ZcKk4s+RMKEM4BR6M=
Subject key identifier:   66:C0:78:15:50:7F:28:EA:93:EE:E5:38:D0:1E:BB:AD:5B:3B:79:B5
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer:       /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial:       01962F3DC7480DA603E1354F728C5C8D486C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number:          0BB0
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: 7kwxwLH2Bdg13heHAk5XiO9QUx0lbvPLcrWK4O/FjGE=)
                          2: zHaHHwpWkvwMR4EBkRKLj2nL7g4.roa (hash: dEmOAj28ftGGpyQRnDV2quElsA9Yrv1JJIOo7l9XjEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c7:48:0d:a6:03:e1:35:4f:72:8c:5c:8d:48:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=66c07815507f28ea93eee538d01ebbad5b3b79b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:9f:1f:9f:79:e3:7d:27:09:db:e2:ad:af:
                    f7:15:0e:e9:7c:06:71:30:ee:58:51:33:5e:f4:ca:
                    ed:2e:84:f4:3e:86:f5:b8:6f:77:2f:81:2f:6e:85:
                    2f:62:3b:1f:6a:8d:57:12:1a:16:03:4a:76:bf:c5:
                    86:a6:1b:ed:c6:f4:8a:2f:5d:e6:cf:3c:72:ab:3e:
                    52:3f:1f:7a:d0:da:ac:9f:fa:56:ae:7f:03:ff:c5:
                    9b:df:c7:80:3e:08:ef:c2:15:fe:0e:9f:2c:7a:dc:
                    a1:c3:da:ca:49:bc:e4:fa:7c:8d:59:cc:9b:1c:0b:
                    98:18:b2:cc:6e:be:b8:f2:ca:33:7d:75:34:5d:58:
                    52:05:ba:2e:f1:02:72:34:73:ee:c1:31:c7:ce:4e:
                    71:78:3a:1d:d8:b6:0b:e9:2d:a4:5a:57:54:88:f6:
                    a8:e5:84:a7:ba:8c:94:3a:51:8e:dd:a9:bf:08:27:
                    d1:22:b3:6b:9b:68:83:ca:b9:b3:4c:19:05:cb:e6:
                    6f:c7:a6:8b:6b:f2:be:a6:46:64:b1:3a:cb:6e:59:
                    68:07:08:07:b1:e1:e4:98:be:83:bd:b8:7a:ed:68:
                    6b:45:d1:7e:77:5b:ed:dc:a8:7e:00:da:69:25:fa:
                    00:3c:83:04:58:4a:26:fe:4c:b7:ea:4e:99:2f:48:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:78:15:50:7F:28:EA:93:EE:E5:38:D0:1E:BB:AD:5B:3B:79:B5
            X509v3 Authority Key Identifier:
                keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:81:f0:2d:96:12:2f:3d:a6:e7:a3:4b:61:34:b8:ef:9f:
         83:56:11:b6:15:d7:b1:92:07:46:7f:43:4d:74:71:5f:ee:af:
         bf:73:6f:0a:6f:bb:a0:7a:3e:35:65:d0:2a:e6:d4:83:d2:81:
         f3:4b:6a:12:8d:6e:35:99:a0:8c:3e:a3:2b:e0:a9:da:c5:51:
         8e:f4:66:4f:4e:8f:28:11:ac:8c:28:a5:46:0f:b4:2e:a9:4f:
         66:03:47:48:b7:70:de:fd:6e:bb:95:7c:3c:26:38:51:eb:f1:
         3e:7f:83:3d:c8:75:1e:a2:c3:e5:2c:61:1e:97:7a:73:5d:1d:
         ac:24:e3:04:39:96:1d:7f:c0:08:14:6e:70:0d:a7:b0:95:c9:
         71:d3:07:dc:cd:c1:bc:fe:9c:e7:bb:19:c7:d7:46:40:73:93:
         31:d4:34:f2:92:4f:cc:7c:d2:ad:05:3a:86:dc:26:f0:34:92:
         4a:67:14:3c:f5:34:d1:b3:9c:d7:ba:8e:5d:0b:17:5c:74:15:
         01:a2:2f:51:e1:94:3c:4e:41:d1:29:66:9f:09:ae:d9:8c:af:
         37:8e:a7:37:b6:bc:ab:a2:a5:53:ff:8d:6b:91:34:0a:3c:58:
         4d:69:68:9e:4d:4d:14:27:61:cb:1e:ce:c3:42:f6:cc:a0:21:
         81:23:2b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----