Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File:                     z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier:          /58cjVZBtXxyWfHIQwllhmaLLtjUedIz5/T/9VYvLmA=
Subject key identifier:   6F:38:88:61:47:8F:4B:0C:A4:BE:4B:B3:F7:AB:06:11:35:62:60:24
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer:       /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial:       01962FAB410F2629281AECC71930A74E1269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number:          0D51
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: _BNYdzVBVSUeXINGJrysLOoOwfM.roa (hash: hYn60LUqBKRakCcFPhMXiHrGnB1pZCgNDpIpAl6eI3k=)
                          2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: TLhlVwoqwBxXtdR8s4bjlEsiWHKHS2tMc/LaaesVNsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:0f:26:29:28:1a:ec:c7:19:30:a7:4e:12:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=6f388861478f4b0ca4be4bb3f7ab061135626024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:3b:e0:e1:d1:9a:5d:76:b2:3c:fc:65:40:
                    d1:74:9e:9f:b4:b6:d1:db:c4:bf:89:07:c5:94:ba:
                    48:65:56:8e:46:94:3d:b2:cc:ae:83:31:b3:08:85:
                    ef:31:aa:4e:44:0d:df:d4:72:02:2b:e6:f5:df:e1:
                    33:07:e3:a5:cf:02:f7:5b:db:b2:d4:56:09:b1:e3:
                    16:63:91:f1:e8:f5:25:18:e0:3d:47:45:42:f9:54:
                    64:51:81:ac:25:fe:43:c0:59:27:db:8c:2e:85:0f:
                    e1:1b:f3:ab:41:0f:be:25:2a:3a:f7:be:4d:8e:e7:
                    33:66:19:59:fa:57:c7:4f:8b:fc:23:0a:1e:3e:db:
                    fe:75:e3:ab:de:93:d6:d5:7a:64:20:5b:d5:d7:76:
                    76:63:5b:59:61:90:ff:42:20:57:d7:a7:08:5d:b7:
                    a9:73:11:c7:3a:43:59:0e:db:95:43:50:f1:34:81:
                    e9:0a:02:ef:b1:1e:05:66:4e:83:25:85:25:45:a5:
                    09:19:ad:93:80:d7:ab:5b:b8:c0:e5:c9:81:23:58:
                    45:5d:b6:8c:64:a6:de:92:d5:86:a9:72:26:cc:53:
                    9d:83:6d:59:e5:af:00:96:79:d7:b4:a7:13:f0:c1:
                    0d:96:d0:a4:54:bd:ef:f3:d0:0a:2b:cb:2d:fc:37:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:38:88:61:47:8F:4B:0C:A4:BE:4B:B3:F7:AB:06:11:35:62:60:24
            X509v3 Authority Key Identifier:
                keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:37:e4:31:88:09:a3:e0:65:ee:9d:54:64:10:98:37:ae:e9:
         46:65:c7:ad:66:ce:d2:f2:7a:d1:80:e7:ad:ae:64:9a:d1:03:
         63:01:de:3c:d4:77:25:66:23:e9:cc:67:d4:51:c6:7a:47:25:
         ff:84:be:66:7a:3e:a0:e1:35:dd:ff:6b:21:f8:d5:b2:0e:47:
         1f:33:e8:e9:b6:84:d7:54:2a:64:29:b3:43:76:c2:ae:d5:c7:
         2f:9a:01:68:35:0f:4a:68:fd:ae:f9:9c:98:2d:91:48:1d:00:
         99:21:13:0a:0d:14:dc:2c:7a:21:bf:ab:1d:40:0c:6d:70:ef:
         31:3b:b6:1e:cf:f7:6a:5b:3e:9b:94:90:10:5a:3d:d2:8c:d5:
         ca:c0:ca:c1:b4:46:30:d6:17:bd:8f:b9:7c:83:00:ac:c2:5a:
         42:81:b1:f8:3b:5e:11:15:dd:56:a1:47:b5:64:42:4d:ff:4d:
         9c:6f:09:01:d7:4c:8a:8f:c6:b7:b7:65:d6:b0:e9:3f:0f:c3:
         b4:2a:1d:f4:ce:05:c0:54:1e:18:a6:18:4e:dd:9b:8f:65:5e:
         39:8b:c1:f6:11:eb:10:cb:a5:ef:7f:b7:40:2a:73:05:bd:b1:
         18:35:b5:00:c2:fc:ac:f2:a3:6e:be:98:d6:dd:23:c2:07:5a:
         08:d7:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----