Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File:                     zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier:          UiuAQjJ6skwa5CuHlA6vPjnQUd8lMaLYzIO9xno2WEQ=
Subject key identifier:   07:67:15:0C:CF:FE:66:49:75:7D:56:AA:BA:A5:9E:1B:55:DE:7E:C1
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer:       /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial:       01962ECF7518C0C25DED44A02B5FFBC0BE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
                          2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: nF1WWAzL8bkBEpwPhu5gJT6GuK35icVYsaaBcwa/YcY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:75:18:c0:c2:5d:ed:44:a0:2b:5f:fb:c0:be:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=0767150ccffe6649757d56aabaa59e1b55de7ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:68:bf:c6:31:3e:05:7b:94:c7:55:a7:7a:
                    6e:d7:9d:91:9b:91:a6:87:76:94:5e:56:3a:39:3c:
                    c2:53:34:d9:fd:bc:09:46:2d:69:86:29:5b:c0:56:
                    3d:38:06:22:e2:55:e9:6f:a5:d0:10:bc:6e:f5:43:
                    5d:5d:a7:c6:fe:f6:dd:64:43:b7:13:49:19:d9:49:
                    a1:99:77:9f:36:ee:f4:3e:fe:ca:73:91:be:d6:92:
                    4b:28:e1:c2:d7:58:01:83:13:4f:4c:f4:0a:de:97:
                    05:21:17:c8:19:65:32:c6:bd:c8:5e:e4:8f:b2:ad:
                    dc:6d:85:24:71:99:4a:7d:73:98:57:38:33:1f:b0:
                    9d:c3:cc:33:6f:27:c9:18:4d:29:e6:77:71:1f:09:
                    fc:9e:6b:95:58:bb:0a:9f:ef:fc:da:d7:1c:d5:af:
                    b7:6c:59:f6:03:3a:27:9f:f2:c7:7e:c9:26:7f:b2:
                    f7:c5:e0:31:74:57:c3:f1:b3:89:a3:87:e3:e4:c7:
                    db:40:37:05:24:b1:6e:cf:b4:36:31:ca:a5:64:b7:
                    76:1b:e9:f2:f4:da:34:30:c0:dc:65:52:f3:dc:6d:
                    d0:9d:d6:51:e0:f7:18:fc:aa:37:55:8a:89:ef:2e:
                    38:12:a4:b4:f0:f9:ff:8e:9b:5e:7b:df:6d:00:14:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:15:0C:CF:FE:66:49:75:7D:56:AA:BA:A5:9E:1B:55:DE:7E:C1
            X509v3 Authority Key Identifier:
                keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:28:81:ab:d5:4e:cf:50:58:82:53:87:02:44:ef:09:ee:f2:
         3a:33:b7:ae:ec:e2:bb:4f:3e:68:c2:0a:36:93:e8:ea:fd:83:
         e4:65:d0:4c:12:6d:49:b6:7d:21:2a:87:ba:96:1d:a5:ba:2f:
         36:e9:2e:73:d8:b5:2f:b3:9e:ed:de:c5:15:59:1d:c0:a8:ab:
         fb:83:81:dd:2e:a1:64:13:e9:b1:eb:27:03:0f:3b:f6:97:74:
         22:19:98:63:46:a9:5e:93:a3:2b:7d:3f:48:4c:e8:c5:eb:5b:
         5b:f4:00:9d:98:ee:03:c3:54:50:8c:60:c6:f7:34:89:68:f2:
         fb:3f:fd:72:45:08:b5:d7:15:ff:25:57:29:e8:5d:1a:bc:de:
         48:87:aa:47:a1:ff:64:32:e9:93:0f:cd:93:59:1c:f6:b9:e9:
         ea:24:3e:63:4c:bc:43:90:14:24:53:ac:2e:b4:f0:8c:5d:11:
         e4:17:5f:a3:0a:6a:ba:e6:2b:1c:3a:6e:a2:d1:c1:03:58:4d:
         8f:5e:b8:49:68:43:3d:7f:87:37:80:38:91:ce:52:66:c6:ec:
         a5:16:b6:9d:bf:62:97:90:fa:91:cb:04:1d:57:74:04:99:6d:
         62:b4:12:65:39:ec:8e:57:3c:db:ba:40:8e:9e:fd:b1:d7:83:
         75:73:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----