Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File:                     zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier:          wS4zjX2PQGyCh2Nn0WssaRQKV+G4k9D5YGlw9MynEB8=
Subject key identifier:   19:60:71:90:46:13:C7:E7:89:19:12:FB:17:69:59:0A:29:BD:38:11
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer:       /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial:       01962E61E617CD8D96138018B828412090F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
                          2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: nFOP+LJ6vHJoqfiRnhcKQct4/6lim6ODbFhOWaFHZu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e6:17:cd:8d:96:13:80:18:b8:28:41:20:90:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=196071904613c7e7891912fb1769590a29bd3811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:82:8f:1c:57:02:0f:c9:3b:de:fd:b7:00:
                    f8:15:4e:17:7b:5e:92:36:a8:56:f1:0e:7f:a9:36:
                    9c:83:d4:28:4e:c8:8c:65:1a:35:84:0f:08:70:ba:
                    e0:51:93:c3:21:6e:3f:b1:3e:06:4f:d7:8e:4e:86:
                    88:2d:8c:06:80:6c:a8:bb:e2:51:7a:fb:07:8f:48:
                    df:74:ae:e1:59:11:41:64:1c:70:34:ab:c1:74:ca:
                    bd:b8:51:9d:8a:bd:8a:3f:36:e6:f7:ba:7a:49:22:
                    4e:05:10:b5:3f:f9:ff:b1:49:8f:e4:58:1d:21:e7:
                    3b:27:22:84:40:1f:b3:59:22:2b:89:18:90:e7:49:
                    6a:39:48:6c:fc:79:ec:3d:b4:ab:c5:3e:c1:ba:0b:
                    8a:5a:e6:91:c8:fb:43:c8:72:30:ae:69:f6:2d:e4:
                    a7:08:71:43:6f:a1:24:f3:bf:7b:7a:37:e2:e0:e9:
                    aa:f1:6e:78:89:01:fd:1a:24:02:28:46:58:44:6c:
                    e4:6f:50:d1:12:b8:fa:66:02:19:d9:00:3c:f9:8e:
                    1b:fc:df:71:c4:62:02:bf:0d:25:11:e6:d6:9d:ca:
                    e5:9b:1d:ee:3b:73:af:eb:ed:ce:3f:bd:2b:8e:ef:
                    e2:59:97:ea:11:4c:37:1a:19:91:b7:ba:e8:cf:05:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:60:71:90:46:13:C7:E7:89:19:12:FB:17:69:59:0A:29:BD:38:11
            X509v3 Authority Key Identifier:
                keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:c8:ef:f0:3f:2b:46:b1:6c:63:34:46:78:8f:e7:02:04:
         13:e1:44:de:6e:52:17:dc:5d:68:97:be:0f:17:a5:51:3b:4d:
         22:fa:d4:8b:b4:8f:3f:88:0a:af:8c:48:46:a0:49:a9:91:da:
         2c:78:cf:06:5a:4a:3a:25:7f:7c:c8:4b:20:4c:f9:46:6d:df:
         d1:da:da:20:48:4b:de:e6:91:65:cf:5b:a4:94:f5:64:c0:46:
         a9:0e:4e:6f:82:22:17:44:96:36:49:73:9f:71:fe:b1:ec:2b:
         83:c4:d3:0c:9a:78:c4:d3:9d:0e:c6:78:46:72:7b:0b:64:86:
         f5:3c:49:3b:2f:2e:2d:30:88:0a:7d:62:4e:57:1f:74:c1:4b:
         15:a6:c1:0e:b2:b1:53:9d:ef:71:cb:ef:cc:a8:46:95:f4:49:
         eb:fe:e7:7e:4f:74:dc:43:80:c3:1b:70:a2:89:81:2d:ca:98:
         0b:c6:13:79:75:20:60:5d:68:4a:4c:c4:f3:33:69:32:f2:de:
         c4:05:36:e9:0a:a7:67:2b:ed:10:db:bc:b1:7c:6a:c4:7a:d9:
         e3:c7:1c:48:4f:ca:75:cf:a2:c3:5b:c6:d8:27:e4:ca:b7:4d:
         1f:30:a3:cc:a2:6d:4d:8b:80:91:13:25:22:33:56:fd:1b:75:
         ee:19:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----