Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File:                     zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier:          Ukd//DeEiBy7XIaNlNIkN4L4MF0htOzmNIO2HnDmr9M=
Subject key identifier:   4E:C8:85:E8:41:3E:78:A3:CA:F9:52:13:F6:17:20:2B:2E:3A:F3:FE
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer:       /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial:       01962E993C36BD962DEF633ED36E2A7B490E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number:          72
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=)
                          2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: ZUfMsX5HKmWEgY0oVq08C2rQDChVolfOJTgTGw47GUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:36:bd:96:2d:ef:63:3e:d3:6e:2a:7b:49:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=4ec885e8413e78a3caf95213f617202b2e3af3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:6e:1b:a1:a7:06:78:80:fb:ab:07:0c:db:
                    cf:f1:78:3b:58:29:97:27:c1:5e:02:31:21:f7:55:
                    3d:37:5c:56:8e:88:e5:7c:3e:e1:57:0d:e7:ca:16:
                    1c:ed:cd:d9:b7:07:9c:eb:9b:ec:b1:5b:28:74:e6:
                    7f:83:2d:34:4b:a1:85:74:2a:05:c3:e5:8e:e0:b9:
                    72:b9:d4:65:fe:d7:39:55:64:64:86:fb:7d:a9:ce:
                    94:39:67:42:fa:bb:82:62:09:e6:53:4c:30:87:06:
                    5b:b9:64:22:02:35:e6:99:38:77:18:f7:49:a8:59:
                    17:2c:71:25:70:d1:ce:51:ae:81:60:84:fc:42:af:
                    1f:06:ff:71:99:c6:09:4a:c9:5b:a7:27:57:28:de:
                    0a:ae:ae:7e:3f:df:6a:f8:77:57:16:2e:02:87:9d:
                    16:5e:81:f4:a0:1a:fa:94:6f:a9:d0:df:9f:b7:4a:
                    16:53:84:ac:d0:5d:93:91:18:2e:1e:0e:3a:f6:5e:
                    b4:b5:98:df:79:e1:ea:c5:77:b6:37:c2:94:a7:de:
                    e7:ea:f2:75:50:99:46:ff:b0:93:36:28:85:93:5e:
                    79:49:f6:eb:15:39:8d:12:73:f4:09:2c:5b:12:6b:
                    30:5d:31:c3:45:0e:9a:a3:14:ec:b9:73:12:7d:69:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:85:E8:41:3E:78:A3:CA:F9:52:13:F6:17:20:2B:2E:3A:F3:FE
            X509v3 Authority Key Identifier:
                keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d7:95:79:f1:0b:b9:dd:38:cd:2d:c4:cb:8e:85:b0:d2:bd:
         ac:26:6a:12:8c:16:09:c0:6a:f4:8e:20:f2:20:b7:96:7b:6e:
         5e:5b:a1:3d:f0:a3:62:2a:12:60:3d:f0:43:4d:ba:13:0b:dd:
         25:5b:d6:80:36:fa:6f:52:b0:a5:0e:9a:24:22:c2:25:91:79:
         eb:97:02:76:c4:49:67:59:9e:08:8f:18:0c:3b:71:c1:02:ba:
         d7:e3:cf:a4:b2:55:07:6b:72:0e:e7:dc:0e:47:b2:d6:ea:c0:
         37:c9:dd:65:85:2b:16:c0:eb:f2:97:42:06:06:06:e9:ff:17:
         ca:df:f3:fe:39:bd:ff:a6:68:85:47:62:a9:0d:ea:c1:35:84:
         67:0b:32:71:c9:ce:ed:24:b4:4b:4f:b8:cf:49:62:1f:63:54:
         dd:7a:26:f3:42:61:ea:a1:4d:27:52:ee:3f:05:47:92:4c:6b:
         34:07:be:a2:21:de:b8:44:90:d4:f6:ed:42:9e:84:77:1f:9b:
         24:16:f3:3d:82:47:87:20:17:aa:3c:5f:62:43:e8:aa:71:94:
         97:d0:88:a6:c0:09:1f:30:54:75:0e:37:47:28:71:36:bf:0c:
         d9:dc:14:a6:8d:8d:89:3f:b0:16:b1:0f:ae:a9:a4:01:ea:c6:
         45:03:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----