Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File:                     Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier:          O+UY/hd9TYAjA9QCtE3s37mSXBNRK3tAtOljXUS2FcI=
Subject key identifier:   3F:B4:40:75:E3:82:12:44:15:75:CA:E1:E5:10:B3:FA:27:3B:D6:DF
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer:       /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial:       01962DF46352567BEADE2E9E2ADB088B9D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number:          0485
Signing time:             Sun 13 Apr 2025 07:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:52 +0000
Files and hashes:         1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
                          2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: 9jU0/eXxykAP8iOGpCkjHQdq5XDBE+BhR3cn0DzbzM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:63:52:56:7b:ea:de:2e:9e:2a:db:08:8b:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
        Validity
            Not Before: Apr 13 07:01:52 2025 GMT
            Not After : Apr 14 07:01:52 2025 GMT
        Subject: CN=3fb44075e38212441575cae1e510b3fa273bd6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:43:ae:44:2c:6d:ab:ee:4d:02:cd:1d:72:
                    83:6a:5d:a6:84:d4:0a:a4:83:ef:64:9b:0a:1a:c7:
                    75:0a:1b:4e:e5:11:96:de:9f:55:54:b6:1e:df:11:
                    08:b2:2a:53:a0:f5:bd:5c:ed:dc:f8:e5:5f:be:5f:
                    1c:0d:6d:02:e0:1e:87:4d:87:77:f8:64:8e:11:d4:
                    01:f4:28:06:5f:22:28:02:c5:41:c5:45:b8:d4:3d:
                    24:ef:b6:12:d1:c1:12:da:ce:2d:fb:05:8b:6a:17:
                    d2:24:af:df:7f:78:e7:c4:f6:cb:37:89:c5:b0:32:
                    2c:f1:0d:7e:8f:ce:a8:81:0a:0e:6c:3b:c5:21:08:
                    42:f6:43:bc:f5:80:8f:fc:57:de:39:5e:e2:77:93:
                    be:f2:5f:04:c2:75:0a:7a:ea:2b:c9:ff:4b:9e:91:
                    fe:63:ca:a6:2d:e4:85:b3:ef:fc:86:62:ba:8d:3e:
                    c3:4c:d2:1d:55:a2:d2:e3:8c:bf:04:40:1b:00:19:
                    e2:0a:91:ed:db:29:2a:c2:a0:4d:7f:9e:4b:44:c6:
                    3b:27:97:5d:04:4b:4c:03:8c:f4:0b:a0:4e:91:66:
                    a6:62:a8:03:de:24:e1:b2:8f:8c:e8:81:2b:bb:2f:
                    ff:d5:17:67:b0:bc:14:f8:1f:aa:09:6f:88:96:18:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B4:40:75:E3:82:12:44:15:75:CA:E1:E5:10:B3:FA:27:3B:D6:DF
            X509v3 Authority Key Identifier:
                keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:73:c6:cb:62:bc:ea:ac:4a:30:d1:5e:47:65:a0:6a:0b:8d:
         38:c3:3a:3f:86:86:4c:43:3f:59:c6:30:09:e3:0d:ff:17:4b:
         9c:02:f1:e6:0a:9a:09:26:f9:b1:2d:6e:4e:a1:b3:a2:ee:0f:
         2c:04:04:25:e5:14:30:65:f7:72:6b:15:c7:f3:ab:94:a2:58:
         47:9c:59:0d:75:96:c4:81:fb:0f:a5:44:10:77:db:80:ba:57:
         07:08:40:c3:3c:1d:aa:cd:94:f8:bc:dd:89:96:80:6c:1f:78:
         55:ff:9c:a2:b1:b0:3a:51:c7:1e:f3:ac:5f:e4:db:50:c1:51:
         4c:36:ed:bc:a1:d3:62:97:1b:31:60:45:9b:bf:56:f5:ff:bb:
         86:bb:21:d3:a7:ef:bc:45:dc:08:16:d3:6e:24:72:07:39:93:
         b0:3f:06:48:f2:5d:8c:d9:22:5f:1e:36:46:b0:89:6d:53:9b:
         ea:76:16:a2:c8:07:99:1a:9f:42:bf:1d:89:b6:a0:d2:b6:dc:
         6a:e9:7c:38:2a:20:39:6a:b6:34:43:92:46:dc:95:cd:56:3f:
         b7:09:88:02:6e:9b:a0:01:13:c3:4a:e7:28:29:81:77:2d:b1:
         5a:a6:65:d9:a2:de:5f:e2:17:40:16:ea:a5:88:a0:17:39:0a:
         28:9d:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----