Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
File:                     pz1kDZC_PWfySYE4zDcfZUZH3a0.mft (raw, json)
Hash identifier:          ZsjX87o9WwU4SBmJ8/NqkNztwvNXR7/UfFbPEJWnvzU=
Subject key identifier:   31:AF:D8:87:BD:2E:DC:F5:F9:9B:20:57:2A:36:AE:50:E2:73:33:1D
Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Certificate issuer:       /CN=a73d640d90bf3d67f2498138cc371f654647ddad
Certificate serial:       01962E995DDC4CF55CC20855122DF765EECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: 5fcpJVl5DXDFgBV-5G0BOvh2tGg.roa (hash: urXegQalP46Ga7kO5s8Ojf4B2voXZNk4EbUTvjtFENw=)
                          2: pz1kDZC_PWfySYE4zDcfZUZH3a0.crl (hash: vEKOQyv3od2ans+kqS0KIno32W9CKRXJHzVnf+pwE9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:dc:4c:f5:5c:c2:08:55:12:2d:f7:65:ee:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=31afd887bd2edcf5f99b20572a36ae50e273331d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:32:10:40:bf:eb:e0:f1:ce:a3:0e:79:13:
                    74:14:18:0c:15:d6:99:38:8a:b5:d4:6a:51:45:5a:
                    81:8e:76:7f:0e:c3:1f:02:77:8f:bb:eb:d8:da:b8:
                    3a:ed:f6:0a:60:98:70:0e:65:00:89:f8:54:19:50:
                    12:0e:64:14:5d:4d:db:90:4c:a3:e1:71:da:19:05:
                    65:10:0b:ad:44:4a:27:6e:ea:e4:8c:13:d7:21:c4:
                    0f:62:f0:1c:29:22:7e:af:a3:a2:d2:3e:6e:63:60:
                    c3:f3:84:f0:d8:9f:cd:27:a3:35:59:bb:93:b3:e6:
                    77:aa:fc:a9:51:1d:c3:9a:58:6f:80:68:9a:09:93:
                    ce:07:d5:e2:b7:61:04:66:c8:d2:dd:d6:e1:d5:4d:
                    06:cd:fa:a6:49:27:45:30:a4:59:b3:5d:af:2a:de:
                    2c:35:b8:f5:b3:58:59:0a:05:d2:d1:9d:a4:ce:af:
                    14:bb:7d:4d:c9:29:4c:7d:d6:20:48:9d:5e:95:7e:
                    1f:7e:4b:40:ae:4c:8b:0b:2b:7f:2c:dd:c0:17:8c:
                    48:9a:5f:f7:cd:ae:cf:46:25:5a:1f:1c:aa:c2:a7:
                    01:5f:6b:56:61:2f:34:a2:ec:10:6c:56:44:05:6b:
                    16:43:90:db:87:52:29:31:57:ea:02:11:9c:e5:15:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AF:D8:87:BD:2E:DC:F5:F9:9B:20:57:2A:36:AE:50:E2:73:33:1D
            X509v3 Authority Key Identifier:
                keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:9b:7c:92:d7:81:8c:30:4a:24:30:6c:f1:da:3a:87:c0:
         64:e7:64:22:6b:aa:fc:15:07:54:e2:87:ab:52:14:2a:63:9e:
         0c:90:4a:7a:a3:f9:40:ac:2d:be:6e:52:14:e1:fd:6c:bc:69:
         72:9b:11:84:03:d2:34:b8:ac:9b:08:8c:88:5b:bb:b0:e6:de:
         8c:fb:ab:7d:53:6f:26:e0:25:bb:e6:49:86:9b:ce:73:3d:3f:
         a7:38:fb:f7:96:89:f2:04:09:7f:6a:4c:90:b8:74:64:f8:6b:
         57:d7:b1:d9:c0:2b:fc:20:1d:a9:9d:ea:5c:5b:9d:0d:6c:89:
         b1:35:83:e2:45:6b:e5:f0:c7:8d:5c:82:5e:91:60:48:50:64:
         e0:85:04:c7:b6:57:40:83:da:07:f7:a5:25:87:4d:cc:31:50:
         a3:9b:4c:1c:62:cb:6a:82:b3:d5:01:8f:8b:48:52:d4:c3:7f:
         31:42:4a:c2:5f:eb:9b:ed:08:f9:23:b8:c8:7c:98:66:1b:52:
         10:b6:ac:eb:79:59:0f:b6:b2:8a:b4:16:7f:0b:4d:73:d5:4c:
         c6:d5:96:f1:a8:63:ca:17:08:21:da:4c:57:5f:21:f9:af:e3:
         22:33:ba:c2:97:28:b4:9f:b9:45:0d:d4:36:1e:a6:7b:44:91:
         3a:da:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----