Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          GRpc3psiraZuXIYb6jlHLkByhd2stmUcmyh1tLY0l5E=
Subject key identifier:   52:FB:F3:A1:B9:35:C0:BA:E8:D3:CB:AD:8E:68:3D:B6:62:8B:D7:E3
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       01962FAB4A4BABE91AE1AE3C141FCAD269B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          02B2
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: C3s5o6S6iMFqA5kUnPyNkOVDKSM.roa (hash: H3u9mvJ7SuTZccRd+wWwmhJZK9bvIglyqc2Q2wLWS1o=)
                          2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=)
                          3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=)
                          4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: C5B90k/GsVr0HlqZ7ESgMIr/SqG1JMu+eI7uGdNGgBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:4b:ab:e9:1a:e1:ae:3c:14:1f:ca:d2:69:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=52fbf3a1b935c0bae8d3cbad8e683db6628bd7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:f1:a2:8c:85:8d:12:62:07:ff:60:08:7c:
                    32:57:e0:66:3d:62:15:e0:54:8f:de:14:16:5e:14:
                    8c:8c:8f:58:30:b1:f5:c1:fb:8f:e3:52:7d:2d:f7:
                    b7:f6:25:7b:bb:00:b1:1e:78:bf:a4:41:2c:e8:4b:
                    8a:b8:c8:0b:f6:73:33:6d:28:ba:c5:64:27:df:8b:
                    06:03:29:61:34:9e:d4:7f:68:ba:b1:39:53:de:0d:
                    db:48:5f:3b:19:7c:d3:d9:97:67:2b:cb:44:6b:6e:
                    b2:51:85:4b:c6:c3:4d:cf:11:0c:34:fc:5c:60:b6:
                    0f:d2:20:fb:47:4c:98:f8:a9:f0:5f:cb:af:4a:87:
                    fb:16:21:f6:df:9c:bd:bc:43:c2:1d:82:50:4f:f4:
                    23:ce:29:65:34:80:8e:0a:b3:b5:25:04:a5:95:7b:
                    0a:8c:06:cc:5b:b1:e9:88:6e:f7:93:87:a9:06:58:
                    08:7e:2d:4f:dd:a3:6a:1c:2c:f6:69:61:b5:72:66:
                    43:ed:d4:48:bc:09:75:23:24:5b:a7:95:0e:fb:b8:
                    c9:90:57:0e:c0:20:fb:a9:fa:4e:d2:1c:05:09:e3:
                    7f:ee:e2:59:e9:70:9a:0b:f0:3c:f0:45:3e:6a:cd:
                    6a:c3:ac:a5:7e:d8:48:e2:4c:bc:4f:89:72:a1:e3:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:F3:A1:B9:35:C0:BA:E8:D3:CB:AD:8E:68:3D:B6:62:8B:D7:E3
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:26:28:cf:ad:32:00:7d:b8:b4:f0:33:b3:12:cb:cd:eb:f3:
         89:72:c4:ee:9f:61:e3:38:01:cd:3d:73:e4:df:9a:64:b1:2f:
         39:c9:6c:c1:b3:31:d4:62:1d:4a:7e:fb:0e:66:84:5d:d0:21:
         13:38:2f:d1:95:a1:f0:a7:db:88:5c:5a:42:79:5f:44:ec:32:
         ec:7a:41:6b:3d:f7:76:4a:e7:a9:33:47:55:50:98:dc:16:68:
         a1:37:ec:fe:3b:c6:85:92:32:b9:07:15:44:2a:de:77:69:0d:
         53:d6:57:0f:75:11:cb:7b:90:78:d5:d7:65:16:d5:66:59:ba:
         72:dc:f1:93:fd:0d:a9:d5:66:4d:9f:6e:01:13:e2:d9:62:88:
         6e:da:37:3d:63:26:4c:44:94:35:e2:25:aa:b2:7c:1e:82:95:
         7a:ce:b6:60:42:50:47:0c:23:f2:f2:66:2e:d8:9a:d1:b9:94:
         b2:d3:8b:e3:ca:99:28:60:e2:7c:f1:70:06:d7:b3:32:62:d2:
         f6:96:d4:1e:b2:60:93:a2:a1:72:1b:2b:44:eb:ef:4c:0c:0b:
         fd:bb:cd:ea:19:ef:26:82:f0:20:dc:4e:91:da:07:57:fb:d2:
         f4:20:68:1c:0b:2a:83:13:8e:b8:32:ce:ee:27:db:b2:be:ef:
         4c:d0:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----