Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File:                     ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier:          N2wlknmkFypB4cRyPrcQomWe4Du7+hMhWsEUViaIxJw=
Subject key identifier:   12:3B:08:CB:9B:8E:50:B8:EC:93:13:1A:B1:71:BE:4E:2D:76:65:35
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer:       /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial:       01962F7452CEF66590EEF2C482A19FC672C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=)
                          2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: VCfw2FbYNvSrQFbqkk7kmOyETSqtITCe5O8EikKKESo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:ce:f6:65:90:ee:f2:c4:82:a1:9f:c6:72:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=123b08cb9b8e50b8ec93131ab171be4e2d766535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:60:78:80:a4:31:12:7f:3b:6d:e1:b6:57:
                    7b:d0:9a:73:42:fc:ac:d2:4d:ab:7d:ae:14:72:c7:
                    33:23:db:b2:78:6a:79:b9:92:7a:bb:5f:da:5b:d7:
                    81:a7:77:27:b2:a1:cb:9a:e7:66:b1:50:c6:4e:93:
                    c4:5e:a1:9b:41:00:ba:93:28:15:ec:2f:2d:61:30:
                    2c:64:7a:37:b4:05:aa:2d:1b:1f:53:ef:12:81:80:
                    4a:6a:1d:1b:1f:6a:c0:25:56:0d:08:0d:ad:0b:d1:
                    f6:5f:e5:9f:85:4c:37:b7:50:c5:a6:a7:c8:4e:4c:
                    47:56:90:cb:fa:5d:07:05:a9:01:a5:26:c1:79:0c:
                    df:1a:ba:91:f8:b0:11:9b:41:e4:b1:52:9e:6d:14:
                    21:f2:db:a1:7f:43:be:49:a2:73:f8:6c:9e:ae:58:
                    82:e2:88:74:b6:1a:89:76:3f:e7:27:36:96:9d:95:
                    f1:dd:bb:84:13:f1:b6:9f:8d:50:5b:61:09:2b:7b:
                    f0:95:bc:ce:c6:fc:e1:dc:08:24:20:5e:2e:1f:87:
                    90:60:31:22:93:8f:6e:88:83:73:66:9d:ac:b0:e5:
                    6b:c7:fb:7f:b7:c2:28:06:c7:48:53:f3:91:f8:ab:
                    7f:99:cc:9b:7b:dd:f4:66:02:b3:d4:d5:ad:46:24:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3B:08:CB:9B:8E:50:B8:EC:93:13:1A:B1:71:BE:4E:2D:76:65:35
            X509v3 Authority Key Identifier:
                keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:2a:46:a6:68:9d:d1:f0:63:09:00:9f:dc:aa:00:ad:e1:
         1b:c2:6c:b3:9d:12:b2:db:75:f2:dd:91:63:1d:b4:72:9d:5b:
         05:ce:a4:92:af:37:1b:e4:bc:73:67:19:f1:36:9c:24:0b:57:
         bf:f2:31:94:ed:8d:53:d5:e9:7f:8b:48:39:83:e2:a2:e4:2b:
         2a:40:aa:75:2b:cd:68:90:b2:0c:76:30:ab:26:c3:af:c4:dd:
         91:bb:51:dd:1e:85:f0:d2:49:04:59:66:7d:dd:b3:ee:a9:dc:
         86:39:ac:56:5a:6c:fa:aa:41:0b:c2:20:c4:45:3f:3c:ea:d2:
         34:67:c1:02:5f:f5:2d:fa:56:2c:4e:fe:7d:16:42:2a:42:30:
         10:2d:5d:18:b7:32:8a:fe:4d:86:4f:b6:32:31:06:3b:e6:fe:
         92:59:59:9f:da:9f:de:7b:03:27:37:a8:20:f3:36:a8:f8:1c:
         cb:f5:50:3c:c7:09:9b:aa:11:ba:a6:1a:bb:2d:2e:23:a3:c1:
         b8:36:37:31:04:40:c3:be:df:7c:3d:ab:36:ef:d0:fb:fb:17:
         21:59:fc:25:67:70:61:2b:bf:3d:31:0f:10:f8:88:67:df:b3:
         8a:24:84:8f:1a:86:c6:5c:e9:78:c8:25:d2:a2:21:78:3f:83:
         27:fd:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----