Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File:                     ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier:          +l5pb2EdRbPWRD12/7lsEM83T68CM+y6Xi6O6+ZaHyQ=
Subject key identifier:   C4:98:E6:FA:91:5D:A5:08:B0:7B:9D:89:29:BD:75:04:4A:1D:2B:88
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer:       /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial:       01962F06E4204A600EB72F4664F1C1FD01C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: q/r9KZfw4DBIVawC7D4A3AcpvdS7rOvX8+pcMech8aY=)
                          2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e4:20:4a:60:0e:b7:2f:46:64:f1:c1:fd:01:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=c498e6fa915da508b07b9d8929bd75044a1d2b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:3d:31:36:6d:f3:07:b1:7c:05:9e:b0:e2:
                    39:8f:c1:15:c9:12:36:0f:76:25:30:d9:76:d2:2f:
                    c0:62:e6:9d:4a:19:0a:1b:71:ea:02:4c:35:92:29:
                    f5:b0:e6:4a:69:53:4f:1d:ae:4d:e3:e6:c9:fd:15:
                    bb:6e:e6:80:47:52:1e:fd:09:92:33:1e:62:52:09:
                    b5:4a:be:c9:c1:42:b6:fe:be:39:80:8a:3e:a3:4b:
                    58:71:28:eb:57:ce:e8:06:a0:5c:4c:3a:2b:6c:e3:
                    58:ea:ce:d1:38:8c:77:ab:93:f9:ea:bd:2e:94:01:
                    44:d2:4d:35:f5:ea:f8:ec:e9:a2:14:c5:09:8d:28:
                    24:ba:2b:3e:a7:fb:d7:a4:70:8c:a0:3d:62:83:85:
                    42:53:74:71:e3:e6:bc:bc:7a:36:e6:92:42:37:7f:
                    22:21:98:49:98:73:91:34:42:27:18:d2:01:11:cd:
                    7c:d3:54:10:be:ae:eb:1d:2f:cf:4e:f3:37:4f:9f:
                    08:5d:91:6c:c0:47:39:d1:3f:de:66:18:39:8b:b5:
                    62:63:46:b9:58:1d:07:a2:37:21:4c:47:62:5a:01:
                    8b:02:ec:f3:f4:d8:a1:41:b4:84:fd:90:74:5e:e1:
                    58:dc:18:3b:68:dc:78:0a:a3:6e:b0:a0:91:39:5f:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:98:E6:FA:91:5D:A5:08:B0:7B:9D:89:29:BD:75:04:4A:1D:2B:88
            X509v3 Authority Key Identifier:
                keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:30:ec:9e:73:07:97:12:65:f5:d1:4b:fd:8e:87:bc:c7:
         9d:27:8d:3e:cc:d5:9d:81:c7:a3:72:7a:1c:ab:7c:2a:a6:0c:
         59:ef:c5:a1:96:d1:71:67:cd:4e:63:18:ef:ca:24:8f:58:29:
         36:f7:d7:59:ed:18:c2:f5:44:b3:ef:61:3d:d7:2f:dd:80:c0:
         49:a2:4e:5d:cd:dd:97:12:8b:cf:58:b4:ca:40:09:3b:67:84:
         eb:0b:f8:16:0a:1c:d8:70:5a:c7:b5:fb:8c:3c:fe:a9:1c:93:
         e0:85:f5:92:8d:8f:df:3f:46:a8:c5:25:13:c1:bd:84:28:02:
         83:5b:97:97:42:bd:09:3c:0b:4a:04:e5:60:0d:00:39:6c:e8:
         58:76:34:12:e5:be:d7:45:58:b9:a2:a0:03:4b:50:d4:3e:80:
         3a:6b:be:06:57:ab:13:1e:10:08:07:1e:05:ab:43:e9:4d:70:
         13:e5:ba:69:08:60:20:64:be:b7:85:12:21:43:bd:a2:50:12:
         0e:71:72:3e:39:92:27:95:72:05:48:f9:8e:fa:f7:fb:fc:df:
         ea:61:00:d6:a5:34:ca:2e:c5:fb:e1:c0:eb:a2:24:2f:2c:44:
         9c:10:e9:54:21:ea:6c:41:f5:e2:f3:ca:42:1b:4b:c4:47:0f:
         d1:09:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----