Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File:                     8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier:          Xam6ntnNyiYxP5L6/oLoYmz2MXxQqctv7xTcXfR6m/A=
Subject key identifier:   69:C1:2E:6A:E6:52:D1:95:15:48:6A:3C:04:DA:20:86:D6:F4:D5:40
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer:       /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial:       01962DF439EF928492E3D8D599F7EF39C085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: TjtIm2ke002fiScfW7Qfu+A67AtYFYcE6Um4KR/hvvY=)
                          2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
                          3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:39:ef:92:84:92:e3:d8:d5:99:f7:ef:39:c0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=69c12e6ae652d19515486a3c04da2086d6f4d540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:ff:98:9e:63:29:1e:48:ca:c1:42:bd:e6:
                    56:39:c3:f1:45:2f:f0:87:6b:18:c0:9b:f5:f6:31:
                    bc:d1:98:5c:67:8a:fa:c4:84:50:3c:b4:fd:50:ca:
                    c6:7d:65:b9:5a:ae:4c:34:33:bd:5e:58:f0:dd:84:
                    38:89:19:e4:ee:d7:a7:b6:2c:34:f8:61:f2:f9:2f:
                    b8:2b:8c:f2:40:fc:2d:6b:50:28:2b:3e:6f:53:84:
                    2d:30:ec:5c:73:d5:d7:a7:01:ed:b4:2f:0e:36:ad:
                    bd:21:dd:90:ed:03:54:7c:79:c4:a5:09:89:e3:3e:
                    29:8e:de:af:82:f1:53:9e:8c:40:75:4d:d9:e7:1b:
                    68:34:96:35:cd:bd:2d:af:7a:2f:fd:0a:92:00:4e:
                    86:55:5c:ab:b0:88:5d:47:4c:fa:da:78:16:50:cc:
                    20:25:93:1e:27:7b:ae:bf:f8:7e:e5:b5:93:64:7a:
                    53:34:dd:e3:55:91:e5:3e:b0:f6:44:c5:12:61:8a:
                    05:0e:d2:ab:9d:2c:0a:ce:a7:06:26:3b:7a:55:94:
                    b8:39:43:c2:93:aa:a0:9f:f3:c2:a3:0f:de:8b:1e:
                    71:8b:60:bf:7f:df:5d:41:53:ca:02:57:a8:3a:19:
                    86:21:63:99:d2:a1:6a:bb:db:0e:f5:94:06:2a:03:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C1:2E:6A:E6:52:D1:95:15:48:6A:3C:04:DA:20:86:D6:F4:D5:40
            X509v3 Authority Key Identifier:
                keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:be:8e:d1:b5:11:f8:00:e5:7e:a7:2a:dc:0d:1c:4f:7f:0a:
         0a:10:e5:fd:d4:aa:0f:f9:c1:09:d9:4c:3d:12:37:39:ac:9d:
         28:57:42:5e:45:b5:4f:08:8d:d6:1c:ac:c9:16:9a:5f:84:3b:
         db:aa:44:c7:bf:ca:25:ca:d3:9c:9e:79:ef:76:b3:ed:84:b5:
         a3:a9:bf:ea:59:27:67:67:4c:72:26:88:02:79:58:a1:c1:31:
         7b:96:3a:21:57:c0:d8:bb:7e:df:e4:a4:9e:e7:66:fe:83:60:
         c2:da:7f:95:d6:96:a5:82:e3:ac:1a:a5:97:0f:85:7d:03:a9:
         89:f2:61:33:3f:06:ef:c8:ee:31:a8:4f:a6:5c:13:c2:92:f4:
         90:3b:b8:b6:a0:ce:3d:b0:1e:59:6b:21:68:07:3f:c2:7d:68:
         9f:20:2e:72:68:04:f4:6f:b0:df:e5:f7:ab:0a:72:56:49:5f:
         6c:c3:c3:ad:47:3b:e6:e3:53:58:79:e5:da:15:fd:41:34:ea:
         2f:6c:6b:ed:bf:c2:a5:35:62:fc:15:51:69:ee:3f:6a:01:42:
         c1:d0:47:f6:9f:68:0f:7b:3b:a8:e6:64:25:83:fb:71:6b:6c:
         86:32:b6:3e:78:ba:a4:76:c8:e0:68:29:9a:44:dc:21:17:0a:
         47:a8:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----