Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
File:                     zTwRDf139XdXORwPrt7r42CGVx0.mft (raw, json)
Hash identifier:          aTrOXl2lDIeBghwx/5tozr+UwEZkdgVwb8OBPFjVDok=
Subject key identifier:   41:B8:D8:BC:4F:FA:B2:B2:5E:80:D0:0F:1E:80:2D:6E:B0:D3:98:DB
Authority key identifier: CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D
Certificate issuer:       /CN=cd3c110dfd77f57757391c0faedeebe36086571d
Certificate serial:       01962F3D6C4DBBB5C989F2B36EF460DD70EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft
Manifest number:          0D06
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: n79crWM-L0W_-YTIs0SA8x1g-4g.roa (hash: WTPugh0CrOL+7geJ0TTyRViJCXrCGCyNH+3nK4QxB48=)
                          2: zTwRDf139XdXORwPrt7r42CGVx0.crl (hash: W5EGKsGLPZ67aVyhVcbiRIRZgyVUBJfGlVWS7wlIhL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:4d:bb:b5:c9:89:f2:b3:6e:f4:60:dd:70:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3c110dfd77f57757391c0faedeebe36086571d
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=41b8d8bc4ffab2b25e80d00f1e802d6eb0d398db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:61:22:5c:47:38:b7:4b:2c:43:57:11:17:
                    fb:b9:a8:81:97:30:c5:93:1e:5d:30:8a:4c:f0:f6:
                    af:d9:62:d8:f0:71:ac:40:e1:09:cb:b7:18:1a:26:
                    07:33:6c:ee:ac:52:ff:58:a7:6f:73:eb:60:57:5a:
                    b0:d8:21:94:a6:fb:da:98:3d:67:48:73:4b:ca:8c:
                    0c:ba:d6:fa:c7:a4:5a:2d:77:bb:42:4f:d8:94:4f:
                    53:f8:42:3b:83:5e:90:e4:d1:c7:87:a8:3f:d3:b0:
                    49:be:d9:6e:b3:5e:4a:44:a7:ed:ba:1c:55:68:88:
                    83:d0:ec:d8:82:6c:08:91:1c:04:63:9c:ec:4f:1b:
                    bd:91:5a:a7:ea:c1:d1:26:d7:95:d9:f0:3a:8d:31:
                    30:77:9d:59:c2:68:60:0d:8c:bb:f1:f6:be:04:b5:
                    d4:69:b2:1f:1b:e6:38:0e:36:63:0b:aa:7f:fe:5a:
                    da:7f:40:10:5d:e4:dc:04:f7:63:46:39:82:0a:62:
                    72:c4:c4:41:eb:d7:18:ae:92:cd:9e:c1:34:02:0c:
                    6e:8d:78:80:bf:39:26:82:00:89:02:07:b2:72:e3:
                    02:33:ae:4f:4d:c1:f6:c5:3f:5d:88:76:db:38:9b:
                    60:64:86:36:29:be:c9:40:17:04:02:6b:4e:9d:ad:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:D8:BC:4F:FA:B2:B2:5E:80:D0:0F:1E:80:2D:6E:B0:D3:98:DB
            X509v3 Authority Key Identifier:
                keyid:CD:3C:11:0D:FD:77:F5:77:57:39:1C:0F:AE:DE:EB:E3:60:86:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTwRDf139XdXORwPrt7r42CGVx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20e5a2-0e64-4ea3-8c86-6c02ec19b809/1/zTwRDf139XdXORwPrt7r42CGVx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:01:37:95:90:b3:e5:42:c1:4b:6d:3b:88:8d:ca:b1:a9:07:
         85:37:63:8e:dd:2a:a3:d1:7a:b6:b1:18:36:b2:31:4b:13:8e:
         92:57:9c:48:35:ce:c6:14:42:ec:7a:9f:68:00:b1:6a:dd:91:
         5d:73:72:0d:b0:9a:b5:48:df:a6:b5:49:80:89:c1:68:d7:7b:
         6f:4a:4b:23:15:24:f5:43:2b:a0:ec:1c:fa:88:c2:60:a1:8c:
         c3:72:7e:91:71:bf:83:50:e2:fa:48:5b:c6:85:16:33:38:fc:
         4e:91:ba:97:e5:c2:ff:9c:fa:f6:3a:26:18:66:7d:c9:af:87:
         7b:b2:15:b9:46:34:59:a7:df:7c:e1:30:33:dd:8e:9f:14:d8:
         bf:67:ad:c3:9c:a4:04:e3:9e:6f:88:9e:21:c6:ae:3f:1a:5a:
         4a:2a:ed:b1:56:01:aa:66:84:1e:1b:3e:5f:10:1f:70:6b:21:
         5d:30:ba:15:32:6d:1a:bb:c6:6d:a1:71:77:c6:fb:93:86:2a:
         7a:f4:2e:2e:5f:0b:e9:2d:c6:e4:1d:b2:f5:39:3d:b8:6f:a0:
         c0:a4:d4:55:95:04:67:82:7a:90:ff:69:51:b5:ee:55:8b:d1:
         46:9e:a6:b8:9c:33:ae:5a:68:22:e3:fa:d4:81:ce:5d:e1:f0:
         b4:99:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----