Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File:                     zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier:          KE9bvHiBU6+5KVG8b8bsX3zg6HtgFI8v7G6sYr5A7v8=
Subject key identifier:   8E:23:60:89:F0:7B:D6:3A:BB:1C:3B:50:6E:39:25:77:AC:26:45:81
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer:       /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial:       01962E618CD7EE28E25A7BD905B1C547F7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number:          06FD
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
                          2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: HUn7CmBPFqsdzmmIBIKCXEFM7oCDetcgKpkp1TzA5JA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8c:d7:ee:28:e2:5a:7b:d9:05:b1:c5:47:f7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=8e236089f07bd63abb1c3b506e392577ac264581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:ad:f3:77:18:cc:c2:3d:9e:b8:bd:20:16:
                    4a:ed:26:7e:58:25:09:b0:e0:6d:ed:22:36:5b:57:
                    d1:6a:3e:b0:ee:4b:a5:ea:70:4b:2f:df:0b:77:21:
                    dd:5b:e9:64:a5:16:48:08:77:c4:d1:d6:26:55:b2:
                    55:3c:44:e7:b9:e2:ac:0e:67:e8:fc:b0:ab:5a:5a:
                    12:51:0f:d4:a3:66:37:85:da:6c:eb:56:90:bb:03:
                    1c:92:68:f6:6f:2e:7c:72:bc:7d:22:74:50:e5:70:
                    8e:c6:5a:0a:00:56:43:75:7d:8f:35:7a:73:be:5f:
                    83:1a:e1:e6:33:4d:d5:d8:a9:a4:24:f9:6a:10:60:
                    3e:6d:d1:30:dd:ba:b1:07:f0:15:2f:27:fc:8f:06:
                    96:89:e3:f1:c8:cd:a4:06:01:ec:a6:34:ab:6d:e8:
                    b1:5b:55:2e:dc:46:a0:01:d3:f0:3d:c0:47:fa:83:
                    70:53:22:dd:5b:31:dd:ea:42:93:15:83:91:b4:cc:
                    b6:0a:7f:53:b7:67:9e:23:3c:ec:a4:aa:ea:82:3e:
                    28:11:50:df:2a:d0:63:6c:85:f9:fe:38:3a:4b:4e:
                    98:24:4a:48:65:ba:2d:61:2b:0e:ba:34:74:79:ef:
                    8b:55:ea:80:55:07:f7:80:53:ec:03:7e:c2:a2:ce:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:23:60:89:F0:7B:D6:3A:BB:1C:3B:50:6E:39:25:77:AC:26:45:81
            X509v3 Authority Key Identifier:
                keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:75:d5:8c:90:1a:a2:94:f3:d1:9b:7c:15:97:d7:1c:06:
         8e:87:f5:b5:5c:7e:9a:3f:6e:51:18:c8:7c:b5:3e:24:61:1f:
         58:21:81:a7:37:44:98:4e:47:4d:1a:66:31:2d:cc:28:79:4f:
         97:bd:8b:80:50:30:df:a6:a0:df:ce:d5:d4:40:74:47:a3:0c:
         02:d9:68:bb:ca:e8:c2:77:7c:5a:d1:08:b5:79:eb:9f:34:04:
         50:d9:48:63:5e:83:5d:be:74:c2:1d:69:35:7b:72:e8:52:94:
         ca:81:ce:4e:0f:fa:23:21:0e:30:e3:c8:ab:4d:65:de:b6:5b:
         02:dd:39:dd:08:89:64:7a:7a:ce:8a:e0:53:24:f3:79:03:2a:
         e4:ff:63:72:7b:0b:55:bf:11:9d:5e:7e:69:5e:b7:f8:3e:1f:
         36:c2:c8:ed:67:ba:c8:ce:f8:65:9f:ee:df:0a:e4:0e:05:a7:
         71:b3:bf:99:a3:7f:dd:e0:33:ad:5f:cf:82:9b:7d:12:18:66:
         8c:df:36:9f:3b:1d:2f:70:65:03:ca:dc:cb:f6:21:d2:67:50:
         d1:e8:13:7c:99:a4:57:19:ae:9a:5f:45:97:45:b4:bc:94:dc:
         aa:08:a0:a5:67:39:fb:3f:5a:fa:78:bd:83:e0:37:84:b0:99:
         52:26:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----