Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File:                     zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier:          8bNlYL3aJxz2n39lvsCDqo7smEua8l8xS2KlNlv/38Q=
Subject key identifier:   DF:30:36:FB:FD:A3:03:01:E2:60:13:75:86:38:78:A0:5A:4C:5C:C6
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer:       /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial:       01962F066604A18A46C843CBB6CB48A91725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number:          11FF
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
                          2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: I92WxEsnbEZqabee5dygeEXLKz2yzH0n3Ttqfx/RGv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:04:a1:8a:46:c8:43:cb:b6:cb:48:a9:17:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=df3036fbfda30301e2601375863878a05a4c5cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:1c:cd:bb:1b:44:06:2a:b9:32:eb:31:d9:
                    cf:bb:a5:db:ad:a3:22:8f:11:8b:2a:6c:30:70:25:
                    61:67:14:23:8b:a4:ec:df:f0:38:ea:46:52:98:88:
                    43:66:7f:08:57:17:e5:26:31:5e:a7:83:e3:29:49:
                    c6:aa:08:2c:84:23:31:64:d9:63:d8:ac:83:fa:42:
                    9c:10:0f:ab:a1:c4:b1:73:5e:18:e8:5e:c4:78:f2:
                    2e:8a:9b:a4:cd:20:df:ff:fb:a8:53:78:cb:f8:e3:
                    7e:7b:29:39:9e:72:c8:30:44:9e:31:8c:90:8b:e9:
                    36:cb:82:f9:b7:11:a0:2c:a5:48:ba:a0:ab:96:a1:
                    25:26:47:a1:32:54:81:cd:c7:64:e6:7c:3d:1d:0a:
                    d3:79:1a:46:55:a2:b5:a8:62:a7:83:54:45:fc:b1:
                    58:84:e9:6d:0e:52:0b:ce:70:83:05:0c:b3:d5:f0:
                    8c:53:88:88:de:2f:37:60:c3:06:90:23:68:8d:90:
                    ff:f0:e7:81:37:df:a1:62:bc:9b:49:49:4c:f7:26:
                    d9:46:18:46:3c:83:29:09:33:64:80:3d:c6:8f:e4:
                    b3:aa:d3:14:65:b4:c7:aa:8c:1f:db:13:1b:9c:94:
                    46:87:ca:6a:7a:44:97:5c:fa:94:28:93:5a:7a:ec:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:30:36:FB:FD:A3:03:01:E2:60:13:75:86:38:78:A0:5A:4C:5C:C6
            X509v3 Authority Key Identifier:
                keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:49:e9:1c:28:ee:21:96:c2:f3:b2:41:49:be:5a:53:af:
         35:63:e0:80:2b:21:54:a1:9b:a3:4d:85:d8:be:0d:97:02:be:
         65:39:1e:48:0b:d8:42:0c:93:6b:ef:c0:23:3a:93:ba:94:ee:
         8b:68:59:00:5b:0e:fa:57:57:68:9b:0d:1e:49:e6:c5:86:39:
         4d:f2:2e:e7:2a:91:ee:6d:dc:91:cc:70:55:cb:78:13:19:47:
         a6:4a:bd:a3:ac:4f:35:46:74:df:c8:f2:58:46:73:a4:10:a7:
         50:dd:f5:8b:6c:55:b2:3d:50:18:69:53:f3:f0:dc:73:d8:ee:
         39:90:2b:d3:94:18:5d:a2:06:07:a7:01:e7:76:11:cc:60:ca:
         31:5a:a3:0c:ac:66:e9:25:37:25:31:bc:b6:6b:0e:64:17:e3:
         c0:39:26:c2:01:62:20:2f:8d:09:ee:d2:1a:ef:cc:2d:47:6f:
         1d:fc:90:b9:aa:9d:ac:1e:87:95:61:62:3b:80:c8:67:d8:00:
         49:fd:84:46:08:c7:c1:d3:63:47:9e:53:28:52:81:df:aa:25:
         88:1b:c3:fb:85:70:29:5f:26:df:7d:a0:ab:97:95:bd:5c:d8:
         e1:e2:4b:4d:91:11:06:54:44:12:f6:e9:25:56:50:75:44:07:
         9e:38:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----