Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
File:                     pzh53iWUz91MnkIlVWKBsgjZRhQ.mft (raw, json)
Hash identifier:          NMJ0iDuul6QHVq6cMZLEkewbd3d9lMpE0XKboaGV98E=
Subject key identifier:   E4:1C:B2:E1:B3:FB:DE:C1:7A:73:43:97:AD:9F:AB:95:4C:B5:84:CD
Authority key identifier: A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
Certificate issuer:       /CN=a73879de2594cfdd4c9e4225556281b208d94614
Certificate serial:       01962ECFE6E8FAE27F1E6335AE86AAB251A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
Manifest number:          07A6
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: jCdTYmvYMmAVCpwgaEf86kYug58.roa (hash: ztqwVKV63uIGzbrcGebHuh3wlQjH5xZyStSjcOzpGqU=)
                          2: pzh53iWUz91MnkIlVWKBsgjZRhQ.crl (hash: wbIKCFaMagIfsesZcNgpqZChFZRnrz923KSoSSOScgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e6:e8:fa:e2:7f:1e:63:35:ae:86:aa:b2:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73879de2594cfdd4c9e4225556281b208d94614
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=e41cb2e1b3fbdec17a734397ad9fab954cb584cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:89:f9:e2:d6:c3:53:61:9b:ad:f0:99:16:
                    2a:90:6f:2f:e9:a1:c0:d6:25:b7:d7:67:0f:e5:48:
                    39:56:5f:d1:0f:57:22:e8:51:47:2a:70:15:b9:ed:
                    2a:0e:d0:31:43:e1:58:26:c9:1a:71:bc:24:b6:05:
                    90:70:bf:db:4c:ee:b9:55:cc:38:0d:18:29:26:7c:
                    19:88:f9:09:fc:6d:b2:e5:d3:06:14:45:d7:03:c1:
                    fd:1c:5c:4b:42:ea:0a:3b:9e:12:f7:4a:43:87:6d:
                    9d:9e:13:58:e6:14:65:44:5f:68:17:59:95:f8:19:
                    ec:84:a1:3e:c6:ec:13:0e:2b:c7:9d:67:16:3f:6c:
                    aa:36:d3:ba:dc:11:a4:53:29:59:d1:b7:db:5f:48:
                    0a:2a:8c:80:69:fb:8e:c5:81:b5:f0:eb:40:d7:50:
                    22:1a:6f:73:d4:b4:ab:43:a2:e1:0b:28:5c:c3:cd:
                    0b:db:16:e8:26:d4:7f:5f:65:2a:d6:b2:85:5e:93:
                    fd:32:1a:a6:0b:71:93:09:52:74:de:5a:08:ac:3b:
                    1f:91:8d:af:06:90:a1:bb:ac:b0:fb:ef:aa:c7:fd:
                    d1:fe:ff:dc:91:5b:8d:1e:f2:e3:4e:91:2c:7b:97:
                    a3:db:91:5b:c5:1c:37:3a:1d:be:3e:5d:ac:11:94:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1C:B2:E1:B3:FB:DE:C1:7A:73:43:97:AD:9F:AB:95:4C:B5:84:CD
            X509v3 Authority Key Identifier:
                keyid:A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:4b:41:18:01:04:49:45:59:fe:a3:5f:ae:40:1b:10:0f:
         fc:09:0e:cc:bb:19:0a:6e:a0:9c:93:8d:94:29:b8:29:e0:95:
         38:07:35:ac:4e:69:75:8d:84:d0:6c:34:a1:2e:de:b2:87:b9:
         0d:1c:a2:68:42:34:6e:02:1e:bf:60:2a:46:9b:53:7a:24:83:
         66:24:ec:dc:8e:71:be:72:4f:ee:73:f6:76:3a:69:8d:8e:c0:
         89:fd:28:bc:0a:53:8f:0e:6c:02:b3:a1:f6:3f:d8:c4:db:58:
         ef:6a:34:97:df:0d:92:8d:90:bb:f4:29:fa:5a:2c:22:bf:67:
         64:e9:21:62:b5:76:da:5e:19:ff:4e:45:56:51:08:1f:7f:b9:
         46:0a:34:87:63:c6:f2:cb:d7:8b:e5:94:d3:2a:68:aa:57:e0:
         ef:e0:1b:bd:64:7d:24:c8:f0:bd:e0:5c:02:c3:44:f1:f2:eb:
         c7:b5:10:6f:aa:33:49:39:a6:18:71:8f:87:27:01:17:93:29:
         65:e3:d8:b4:f7:c6:de:c6:75:3b:11:6a:c2:00:ac:e7:37:b2:
         a4:aa:7d:21:3e:dc:ff:5c:4b:40:a7:fc:1d:f9:8c:47:d2:34:
         6c:ef:a1:8b:0f:1b:39:62:b4:34:c2:1e:07:26:84:aa:62:40:
         b4:50:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----