Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File:                     ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier:          c/Q8qeWro8eOytJsSDidJcPfDJnNthG4Pqo7FMWRi/g=
Subject key identifier:   44:30:F4:91:F6:19:E3:E6:37:0E:26:6E:9C:48:74:A4:AA:AA:F5:28
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer:       /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial:       01962E98720898A3BDA7A40DD75B54E8BDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number:          11AA
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
                          2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: lQStQRRyjLtJZGBxlXNazhZw3lTazp/bquzf4cq4jMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:72:08:98:a3:bd:a7:a4:0d:d7:5b:54:e8:bd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=4430f491f619e3e6370e266e9c4874a4aaaaf528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:fd:e8:21:40:85:24:9c:99:27:c4:64:bb:
                    a7:04:0e:d0:15:e9:06:37:32:c6:0a:a4:97:7a:b9:
                    81:c9:05:be:c5:5b:4f:13:0f:22:64:43:9f:8c:1d:
                    0f:e2:0c:59:34:3d:60:ed:5e:3b:c2:fa:eb:6a:9a:
                    a8:88:64:51:24:dc:74:67:d3:40:3f:42:5a:96:18:
                    a4:51:db:ac:b8:6f:cb:fd:51:f7:0a:cf:85:c8:ee:
                    9f:50:6e:72:93:c2:8e:20:95:81:85:70:25:cd:e2:
                    9e:26:30:54:91:fe:3d:1b:0a:b8:84:00:48:a8:bb:
                    ff:9c:6f:d0:cb:c5:77:2e:3b:bd:9d:f3:f0:ea:42:
                    25:6a:5d:ef:79:cb:9a:43:e8:2d:77:46:1a:48:07:
                    6c:19:70:de:a0:82:59:d0:b5:b1:78:55:7c:cd:46:
                    8a:da:51:9b:46:55:bd:73:4f:84:f2:66:b6:3c:60:
                    8c:44:8b:1c:55:39:a1:33:32:c7:f4:f3:85:ba:fb:
                    ed:93:c2:6d:88:43:7a:18:58:27:e5:b3:90:5f:5d:
                    d9:3b:18:6c:b6:d4:2e:d8:00:2b:5e:d4:76:f8:bb:
                    94:14:1d:c4:6e:5f:a6:82:ba:be:f2:a0:9d:fb:d5:
                    ab:e7:73:5a:2d:61:ab:45:83:aa:aa:66:a8:9d:10:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:30:F4:91:F6:19:E3:E6:37:0E:26:6E:9C:48:74:A4:AA:AA:F5:28
            X509v3 Authority Key Identifier:
                keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:87:29:e7:d7:42:e4:31:eb:71:e2:97:be:1d:31:65:62:8e:
         5e:4c:51:cc:06:9e:60:fb:29:e5:24:9f:e4:91:df:f2:8e:9f:
         6b:60:65:1f:b7:a7:f8:a6:39:8b:47:0a:81:00:07:cc:37:5a:
         ca:87:58:c6:af:d1:5a:69:c0:a1:2b:2c:74:33:a9:8e:17:36:
         87:15:26:52:20:93:a1:03:bb:f9:31:27:ec:1b:c3:57:4e:bc:
         bc:cd:6a:0c:ac:fb:e8:d9:a6:be:62:b3:18:fc:02:6d:fd:20:
         a9:3a:2c:a5:93:20:96:3b:60:f8:73:0f:88:99:a4:01:24:04:
         39:08:3b:97:53:35:3b:cd:f3:07:fb:0f:ea:ac:95:01:7e:d8:
         bd:ec:3b:43:7a:b0:ac:29:f4:5c:50:9d:34:97:a4:c0:64:b2:
         c3:5a:5a:e4:25:c6:2a:66:24:9b:96:75:9a:18:f5:f5:46:3f:
         be:c6:24:18:1f:8d:6a:5a:cd:2a:f4:c2:03:89:e7:49:a8:f6:
         a4:62:08:5c:b0:40:50:37:4d:27:89:33:1e:cc:42:62:e8:e7:
         b7:e7:01:35:56:61:5c:4c:18:9c:91:49:d9:54:01:fb:02:6c:
         e6:f2:cf:bd:27:08:a9:3a:c4:bd:37:fa:fc:4b:40:61:8b:dc:
         24:6a:7e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----