Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
File:                     zCdbIX3x3piMohkqg64R3fQjpE8.mft (raw, json)
Hash identifier:          aLnWBnqyX+TTr6YYxRiJPpsYplJL7+ZRfl8OuSjt/io=
Subject key identifier:   79:86:17:14:5A:44:E2:9F:9E:8C:DD:C2:6C:88:A4:1D:34:4F:40:0E
Authority key identifier: CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F
Certificate issuer:       /CN=cc275b217df1de988ca2192a83ae11ddf423a44f
Certificate serial:       01962E2B3A895D0E6ECF13907BD1970ECC40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft
Manifest number:          09A1
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: Nr1R18FVhyzjXhL2YKl54Kz1CcM.roa (hash: Ka3gajN2kG5bn7od03MC2i4kFc5aTTook8osIu09I1U=)
                          2: zCdbIX3x3piMohkqg64R3fQjpE8.crl (hash: +2LtFSN8Z9OZ3h5NqqKqsxnyGyvWDVx1OXftLRJTNdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3a:89:5d:0e:6e:cf:13:90:7b:d1:97:0e:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc275b217df1de988ca2192a83ae11ddf423a44f
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=798617145a44e29f9e8cddc26c88a41d344f400e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:b4:df:7a:58:08:6d:c3:c7:a0:53:f4:40:
                    30:91:39:7a:cc:bf:65:7a:28:5e:15:44:a4:3b:0d:
                    45:a5:20:09:56:33:e7:35:9c:e6:76:3f:b1:71:22:
                    d0:9d:4b:15:04:6a:25:af:95:8f:7a:93:43:ca:c3:
                    85:57:05:82:32:be:73:7d:01:aa:e1:69:90:40:3d:
                    ad:ce:08:ff:cd:b2:54:1c:01:2c:cf:e6:1b:1d:df:
                    34:12:b8:df:b9:1e:79:36:6f:54:76:13:82:54:a8:
                    24:ba:43:20:6f:a9:d4:5b:4f:59:ca:b4:1f:5a:4c:
                    99:04:db:78:af:59:16:5b:5a:5c:04:a3:76:3d:bc:
                    e0:da:e2:b4:c6:24:64:27:8b:99:6b:c5:98:30:2f:
                    a1:63:98:ab:72:26:3b:a8:f3:01:f6:eb:a6:3a:45:
                    8b:16:5c:1a:e9:91:e2:29:a3:01:fc:8b:c4:1a:47:
                    0b:a0:34:1e:1c:98:5f:9b:57:9b:c1:f1:3d:27:c6:
                    5e:f7:79:0d:51:02:65:8c:76:fa:61:23:a4:82:79:
                    d0:ea:95:57:11:88:17:0d:33:6c:2c:73:26:7a:bd:
                    e0:67:68:49:99:1b:fb:af:1a:a8:50:6a:5a:e2:1f:
                    23:ac:fe:96:a2:27:8c:e0:69:16:a3:ee:96:e4:8b:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:17:14:5A:44:E2:9F:9E:8C:DD:C2:6C:88:A4:1D:34:4F:40:0E
            X509v3 Authority Key Identifier:
                keyid:CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:04:07:de:0b:45:b2:e2:7f:c5:b1:16:51:a0:41:7b:2d:03:
         8a:ad:72:ef:22:e9:37:eb:ed:d7:cc:d3:0d:d2:6e:f7:9e:60:
         08:a0:cc:08:9a:53:a1:f8:6c:3b:d8:f9:b9:c2:77:47:5a:51:
         29:b3:42:7b:4b:1a:b3:a0:47:05:03:f1:74:e2:04:dd:4e:79:
         da:70:cf:b2:82:a6:9e:bd:16:3e:b8:3a:6b:3f:26:33:d6:82:
         2a:a0:5a:06:a7:c2:01:59:62:a2:86:51:35:eb:e1:f4:af:13:
         1c:07:a1:8a:6b:7c:38:f4:7c:d0:8a:12:e5:bb:18:89:fa:eb:
         f3:86:f6:17:5b:92:f3:44:31:1b:d6:95:3b:87:60:56:c6:5d:
         d9:24:0b:a2:35:5e:4e:93:95:f4:f3:33:a0:04:b8:06:13:93:
         01:8a:a1:5f:7b:8c:30:42:81:95:25:31:32:d3:35:e4:1c:c1:
         d1:3d:92:04:8f:ec:61:8a:c4:de:4c:14:97:fa:de:49:7a:55:
         6e:52:93:9a:3f:0a:34:21:dd:60:68:56:95:70:3a:a6:11:33:
         d8:9b:b5:83:f8:d7:79:8b:b8:b7:00:52:89:78:4f:30:bd:3e:
         29:ba:99:5b:37:9c:97:92:b1:c2:0e:a0:15:3b:b6:1b:1d:a3:
         3c:47:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----