Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File:                     ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier:          DNg4o3rfeycH38zDUPWWcXvBOJc5uZ6WPd4a8hvFG2s=
Subject key identifier:   7E:C9:88:1D:FE:2F:84:C5:B9:6B:6C:F8:D0:B7:C5:23:9F:EB:6F:1D
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer:       /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial:       01962E6204040E802284E9EC6F2E24D221F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
                          2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
                          3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: a03zJXr73bbHB+EbqDXBmvn1b2KJspgFz80tNx1FCNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:04:04:0e:80:22:84:e9:ec:6f:2e:24:d2:21:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=7ec9881dfe2f84c5b96b6cf8d0b7c5239feb6f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:42:74:07:4b:88:96:80:98:8e:6e:aa:c0:
                    b5:1c:16:a9:82:ec:4d:5d:cc:c2:a3:9e:0b:90:a2:
                    f2:79:8c:e6:53:a7:4f:7f:af:98:82:94:f1:d4:68:
                    86:18:fe:b8:7b:f9:46:28:9f:eb:70:3d:44:f9:d8:
                    20:f0:18:0b:f4:f0:d0:5e:4c:46:74:f3:ab:b8:f4:
                    05:f3:b6:fc:d8:f2:00:3d:07:2e:49:5c:bf:82:20:
                    dc:32:ad:0e:5d:af:b0:51:76:2f:1c:11:b7:49:93:
                    18:a6:08:be:d7:b0:c1:00:45:21:63:c7:89:fd:bb:
                    e2:9a:af:02:76:5b:c9:9b:23:22:3e:e3:aa:eb:7f:
                    ee:22:e2:70:7f:ba:60:1c:82:82:d9:8d:67:70:10:
                    43:6e:ce:19:eb:02:07:bd:c8:ee:01:f0:0e:75:c2:
                    83:bb:6d:9e:df:ba:43:76:d2:37:47:f4:ef:a8:d6:
                    44:73:7a:70:76:f4:d6:0a:13:01:7e:db:ff:ac:d2:
                    db:03:22:ca:d9:44:66:06:08:61:48:78:89:92:9b:
                    0c:9c:aa:48:fd:3a:b9:ce:77:0f:ab:d8:60:d6:f1:
                    ad:e0:db:f2:a6:4c:5f:64:bc:97:f6:5d:62:49:a3:
                    c3:b6:23:2e:0b:d1:b9:14:d6:d8:74:55:51:26:ab:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C9:88:1D:FE:2F:84:C5:B9:6B:6C:F8:D0:B7:C5:23:9F:EB:6F:1D
            X509v3 Authority Key Identifier:
                keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:11:03:14:88:89:c7:87:9b:66:62:62:a1:d3:22:7a:a7:90:
         c2:fd:2f:5f:b9:87:90:19:15:96:aa:d8:00:b4:7e:90:61:e1:
         89:a2:29:68:05:e7:ce:d0:de:8f:d5:a0:fc:a5:fb:fe:fa:e7:
         7c:90:75:7e:18:e8:9c:15:c7:c2:58:89:71:36:61:9b:93:23:
         9f:a3:17:d5:65:12:b8:98:22:97:0a:3b:7c:ab:83:8e:b4:25:
         52:75:2f:ba:e4:4e:d8:7b:11:1c:6b:37:a2:6e:f6:a8:04:d8:
         ec:91:16:cd:4c:54:b0:68:72:65:9b:9c:13:b0:0c:70:f4:02:
         32:3a:6a:8b:3b:8a:6f:d6:37:60:76:81:2a:6e:4f:5f:8f:fb:
         af:72:27:af:be:39:30:4a:47:bf:6f:3a:cc:95:88:8f:bf:4a:
         84:b7:9d:18:c1:d3:dc:b8:04:45:09:31:d6:2c:48:7c:2f:e3:
         95:e7:43:34:10:4d:80:66:3d:53:aa:45:23:95:e9:47:66:90:
         e1:7a:51:22:d1:a8:d0:87:63:fc:c5:f8:d8:35:94:84:bf:86:
         5c:a6:5e:f8:62:ae:8f:d3:05:41:f2:40:e2:e2:9f:f5:e5:e7:
         34:73:2d:fe:fc:49:c9:69:4a:fd:c8:16:2c:23:a8:99:14:0f:
         89:1b:32:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----