Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File:                     c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier:          4f7DrVBQQaM5ZfT63O6+YwGX4WHRTtKLvjKKzuTuyU0=
Subject key identifier:   31:94:9F:EC:F3:F0:6D:36:AA:65:89:CC:B8:93:A7:66:DD:82:35:24
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer:       /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial:       01962F743D57C0271B8E4B75FE7D87651B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=)
                          2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: JVg4lPeTokstVo0mOo0eVDRj78pqRy55JCi/Rqaayqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:57:c0:27:1b:8e:4b:75:fe:7d:87:65:1b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=31949fecf3f06d36aa6589ccb893a766dd823524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:1b:10:ba:92:76:3b:88:39:15:4c:32:2d:
                    88:e9:57:c8:89:98:4e:1b:50:d2:a9:cd:46:b9:00:
                    e8:6d:48:16:c9:a2:df:e3:70:84:e9:ce:d0:a2:c2:
                    7d:1e:bb:1c:53:98:ce:99:2a:8c:46:4d:9c:e3:8c:
                    15:51:90:b5:72:a2:01:d3:1b:7f:ab:e9:f9:64:d0:
                    c2:c4:f2:d7:87:c9:5f:23:a8:7b:ae:12:e2:ee:5d:
                    a2:7e:8c:8f:c8:55:24:d8:48:f6:3f:b6:6e:bb:9e:
                    b8:a1:e4:00:82:ec:ac:f5:06:84:05:6b:20:04:f7:
                    b7:bb:fc:1e:8b:ce:17:ba:0a:9d:10:b6:5b:64:28:
                    14:bb:14:4b:25:78:64:ca:d3:ce:17:77:4b:88:e1:
                    77:45:3d:71:ed:dc:a8:60:2e:6f:25:7b:9b:bd:da:
                    0e:a0:36:7a:ca:f6:71:c8:35:5d:49:db:80:72:a5:
                    22:c8:a4:c2:d5:8e:0d:6e:8f:4e:97:6b:e6:ff:1d:
                    83:43:c9:70:b7:5e:9a:e2:82:09:2c:82:b2:7b:0f:
                    6c:79:88:10:d3:06:13:1e:01:21:4a:97:f7:60:85:
                    09:23:46:9b:94:2d:59:4b:62:8c:6c:c7:b9:90:37:
                    02:72:59:6d:0e:0c:f6:6b:f1:2c:3f:dc:8c:cf:65:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:9F:EC:F3:F0:6D:36:AA:65:89:CC:B8:93:A7:66:DD:82:35:24
            X509v3 Authority Key Identifier:
                keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d4:72:3f:93:63:83:29:eb:db:f0:0c:ee:5c:e4:cb:da:92:
         ef:44:94:76:e8:64:4b:44:09:35:c8:5a:29:25:f3:da:8b:3a:
         3b:81:f3:cb:09:12:91:95:ee:eb:67:e4:4b:65:64:a3:a2:cf:
         6f:7d:68:60:c1:0e:64:f2:1d:5c:57:eb:f1:ce:cf:cd:55:51:
         c8:b7:94:8f:03:94:4b:9c:2e:a9:6a:a9:14:b2:5e:f4:3b:28:
         fc:0f:c9:51:e7:a0:f8:93:ac:b8:ea:22:6d:38:b7:1e:9c:fa:
         9d:d4:07:03:b5:8f:57:78:7e:cf:c3:cf:33:89:58:14:4b:26:
         b5:ab:af:46:af:0b:c9:93:42:e9:e2:43:76:fc:62:b6:81:4c:
         79:6b:41:2a:51:ac:95:66:c6:05:ab:b8:82:bc:b9:34:4e:e5:
         85:f7:cc:57:42:86:e5:a7:2d:ac:d6:22:81:c1:f3:5c:eb:45:
         82:93:ed:e2:69:01:72:d1:1a:69:5e:39:bd:ad:09:d2:80:ff:
         4b:37:a8:e1:96:00:f7:7d:2b:d8:eb:94:54:09:55:aa:66:99:
         d1:a6:c2:33:79:75:a4:84:70:a8:5c:5a:5a:a3:62:5e:69:33:
         21:3f:f1:dd:0f:89:e1:ef:70:66:ee:59:66:e2:92:b6:b1:2c:
         2c:14:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----