Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File:                     ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier:          sZVPwJCzLLc4lGH0r30eMeMVc23n5v6Jzm3jLlEwuIs=
Subject key identifier:   03:A8:0A:B3:64:99:01:AC:02:52:2F:2B:5F:09:4B:CD:9D:91:C5:23
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer:       /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial:       01962E98D971D7B1A5CFF9883C8D0FBB9B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number:          142A
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: dnKJD/PvTJPoUxYhUwkWIE9NpbrFyQMPCDZi2LvZKPw=)
                          2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:71:d7:b1:a5:cf:f9:88:3c:8d:0f:bb:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=03a80ab3649901ac02522f2b5f094bcd9d91c523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:05:00:09:a1:55:35:8f:d3:67:de:8a:02:
                    ca:7e:31:33:db:eb:23:9e:a8:16:da:1f:53:40:fe:
                    e0:86:55:78:62:4b:ed:a5:54:89:1d:71:35:cf:c6:
                    90:99:7a:4d:d0:ba:c7:f4:42:aa:ce:a5:e2:a3:cc:
                    57:4d:28:15:80:6a:cb:67:4e:48:c1:29:48:6a:c5:
                    e3:c4:12:d4:d1:21:00:4e:e5:23:3a:80:d4:f4:d8:
                    ca:0f:3a:42:fe:e1:b2:8f:2e:d8:63:7a:e8:7d:7c:
                    23:3e:8b:ac:84:92:fc:6c:9f:a4:19:22:56:45:bf:
                    f5:a0:71:a5:ca:bd:50:2a:74:75:31:b7:e8:b9:3c:
                    9e:32:91:5e:1a:e9:86:18:18:6b:dc:d1:cd:d0:2c:
                    08:1b:db:fd:98:32:71:db:6c:e3:91:c0:44:6e:a5:
                    28:56:1e:2a:2c:af:ca:2e:8a:9a:dc:0a:0c:d0:ae:
                    b4:c1:1d:ac:d0:aa:79:d4:64:a1:0e:1b:b7:28:d4:
                    b1:8b:28:30:77:2c:51:60:d4:97:5d:8e:77:3c:95:
                    db:da:1e:a2:21:b1:46:23:9d:2d:8b:2e:c6:8b:37:
                    53:de:7b:3c:f8:84:cf:de:d2:ab:b3:10:0c:f2:5f:
                    cf:3e:10:e3:f6:22:52:1d:c9:03:63:e3:54:47:ca:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:0A:B3:64:99:01:AC:02:52:2F:2B:5F:09:4B:CD:9D:91:C5:23
            X509v3 Authority Key Identifier:
                keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:f0:ad:c3:90:b1:8f:28:7d:a0:f7:1f:47:2e:38:1a:ff:
         f3:50:b5:44:6e:13:82:ec:92:a2:48:2d:76:bb:18:18:8f:e5:
         57:65:a1:dc:de:e6:2f:7f:08:9e:86:6d:91:b0:2a:2e:0f:c8:
         e2:13:ef:63:62:71:7a:51:12:ba:68:81:c7:49:9e:51:f4:41:
         b7:8f:4d:6c:3a:c0:08:15:73:e6:4a:7f:7d:b0:bb:3d:02:b5:
         2d:67:ae:64:3c:a1:c5:05:98:da:ff:33:91:12:37:5a:52:17:
         a9:0a:17:e1:a7:9a:1f:40:37:93:e5:f4:81:00:0f:26:27:c4:
         02:2c:6c:ae:2c:3f:1b:f3:4b:24:25:09:dd:20:3e:af:03:e5:
         7a:f9:72:c5:17:65:50:cb:cd:83:6b:f0:88:88:15:85:96:08:
         06:d2:13:0d:9c:bc:f3:eb:f6:80:4b:ca:9c:1c:7d:fa:5b:cb:
         57:99:33:94:8a:fd:fc:81:da:5b:69:42:bc:10:b6:3d:8a:b9:
         30:52:e4:14:bf:e5:6a:cc:a9:8d:8f:3a:3d:4d:91:61:1d:ab:
         84:55:ca:bb:92:a0:23:ff:10:5a:d8:e9:c3:77:b4:40:b1:18:
         1c:7a:ce:0d:e3:2d:7e:92:38:ea:1b:a0:7f:4e:89:cd:d9:31:
         06:b9:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----