Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File:                     zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier:          1Ree8A5bNYoXLcyrCQWRXjYZHb/iRiaGz7Deb1jnRrg=
Subject key identifier:   3F:61:3F:2F:58:A3:FB:4C:70:77:F5:E7:A8:4A:39:12:13:34:9F:93
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer:       /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial:       01962E2ABC14EF30FD1C77869D57A5ABEE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number:          0A5E
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
                          2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: bfdS4z1ycvoLfu+d9Z4quoWYulZ6+Pa0UZd5g1ZMlvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bc:14:ef:30:fd:1c:77:86:9d:57:a5:ab:ee:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=3f613f2f58a3fb4c7077f5e7a84a391213349f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:47:d2:b4:52:fc:8c:d5:24:7f:be:6b:79:
                    66:b0:ce:94:32:6d:9b:ab:72:59:2d:2c:98:41:65:
                    6e:37:34:e1:4e:cf:f7:b2:0d:18:a4:95:8a:7f:58:
                    b9:b7:13:93:50:31:a6:c5:d0:a9:d4:76:d3:3c:87:
                    6b:94:ed:bc:5a:a2:b7:26:41:4f:39:44:83:7b:27:
                    f9:ab:3b:f7:c1:f5:1f:3c:8f:ed:65:33:b1:79:b3:
                    06:57:31:ed:b9:ed:7e:77:88:94:03:2c:c8:ce:74:
                    47:72:30:02:1b:12:32:b0:5c:a0:5a:4c:24:33:3e:
                    91:94:d6:b2:42:39:21:17:50:36:4f:ee:94:c4:ab:
                    87:19:33:46:f3:9d:12:17:f1:62:ef:3b:20:e8:b9:
                    55:e9:e3:b7:3e:6b:5b:2a:28:50:9c:60:67:8a:b9:
                    2c:6e:46:f4:f1:36:bd:6c:72:af:0d:36:36:3c:e4:
                    a9:4e:00:41:5d:73:bf:b1:b7:1e:f9:e5:81:96:6a:
                    04:90:3e:03:66:f1:7e:90:a6:73:3e:f1:30:58:7d:
                    22:8d:05:87:de:41:3c:88:b1:b4:93:ec:7f:e3:64:
                    8b:b0:85:7e:a1:6c:0c:98:19:37:42:2c:5b:c3:db:
                    9f:d1:54:28:ab:b0:14:ee:cf:7e:4c:ac:88:91:7d:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:3F:2F:58:A3:FB:4C:70:77:F5:E7:A8:4A:39:12:13:34:9F:93
            X509v3 Authority Key Identifier:
                keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cc:cc:0a:e8:f5:c4:a6:4a:b7:fd:91:74:a5:a6:bc:b9:b1:
         25:03:a0:73:f9:b2:55:1e:64:e6:46:87:3e:35:46:61:1c:da:
         5f:66:dd:02:9e:aa:d3:95:3d:50:14:43:1b:8f:d3:ae:26:5d:
         c5:ed:41:86:79:09:cd:c2:9a:47:a3:29:47:8b:08:c3:a1:2a:
         50:35:bc:fa:a4:da:bd:54:60:f6:c3:72:5f:bb:87:56:86:f0:
         fd:e3:e2:29:c9:8f:48:5e:f5:fb:02:33:6c:84:de:57:b5:5f:
         ff:36:ef:5f:cd:97:a1:1f:80:76:74:8a:ab:9f:d4:8b:b1:ad:
         90:58:14:30:71:29:75:f7:90:e3:28:e2:a8:96:cd:7d:08:d8:
         cf:2b:84:d8:37:32:62:c0:36:03:4e:ec:ba:31:bc:f9:ee:f0:
         2b:13:02:00:be:f1:7b:19:88:45:d5:be:51:86:4b:37:40:de:
         ee:9e:dd:f1:e3:2d:11:25:7b:3a:66:11:99:d2:2c:51:22:b6:
         c9:8d:a3:50:2c:2e:be:c4:34:fe:90:a1:ca:5b:9d:a9:7a:58:
         2e:02:9d:f8:a5:95:a3:12:ab:37:84:e9:44:59:d5:54:11:d9:
         21:f2:87:be:32:78:14:2b:7f:1e:5e:38:c2:70:e4:dc:2b:39:
         fa:e8:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----