Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File:                     zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier:          VpgA8l4iUdeIQLCDmTCdHVD07mh2JR2FEbQeL2p1zWc=
Subject key identifier:   6D:AC:CF:F5:DA:1E:19:55:9C:EC:63:F4:A2:E4:4F:44:8B:C9:F8:10
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer:       /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial:       01962DF3D7C1698804AAC8F7B1AF737DCE4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number:          081F
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=)
                          2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: JGJUpbvxlcj2eQHX1XJzF4FHEnsGZZH0K8DWgK0rsCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:c1:69:88:04:aa:c8:f7:b1:af:73:7d:ce:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=6daccff5da1e19559cec63f4a2e44f448bc9f810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:d8:62:ca:db:9d:94:db:a1:bb:c7:34:9b:
                    c7:17:04:4b:78:4f:10:3b:c7:61:e4:9e:67:62:32:
                    46:60:6d:95:bd:90:01:d6:10:a6:bf:14:63:0f:eb:
                    36:23:aa:1b:bb:73:5e:fc:a8:1b:d6:dc:a1:0d:7c:
                    c4:e1:d5:d6:d4:c5:f6:51:bc:07:62:3f:64:d2:a4:
                    96:f4:e1:fb:d1:9e:ed:f2:e9:44:b0:01:04:55:3c:
                    d6:8d:7c:a6:3d:0e:e0:e0:b1:07:05:6e:cb:fe:ed:
                    c0:1f:36:92:b6:70:09:dc:ac:0b:86:96:ce:82:ca:
                    4b:8e:a2:e9:d5:a9:22:59:5a:8d:5b:21:b6:38:a3:
                    19:45:75:a2:42:a7:8f:70:50:b9:a2:a8:bb:a8:9e:
                    15:a4:d1:54:12:29:6f:9e:d5:5c:a3:44:7b:42:2d:
                    df:16:a1:d5:b1:ab:53:38:30:0e:23:58:4a:ad:51:
                    d1:1d:76:d5:29:76:2b:75:34:57:8c:ea:af:4b:b5:
                    8c:30:c2:78:4f:69:dc:6c:14:71:1b:ba:73:52:5d:
                    8b:71:9b:4f:11:ac:f1:76:82:87:0d:f9:5a:3e:da:
                    3a:96:69:21:f3:09:80:65:2e:56:3f:bf:0a:05:5a:
                    0a:22:b9:9a:8b:8c:2a:80:ab:e6:e4:7f:56:b8:b3:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AC:CF:F5:DA:1E:19:55:9C:EC:63:F4:A2:E4:4F:44:8B:C9:F8:10
            X509v3 Authority Key Identifier:
                keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b0:b2:53:04:e3:d4:e7:e4:0c:7d:b8:d9:d9:f5:06:5d:b4:
         70:64:f1:95:ee:27:45:7e:5e:4c:46:57:05:9d:35:88:75:dc:
         50:bf:b5:59:08:ac:31:56:9a:b7:3b:04:13:3b:f6:9e:cd:02:
         3a:74:c0:9b:48:83:b6:11:37:52:bd:06:95:65:1f:23:66:08:
         74:82:60:31:7d:13:fd:9e:66:af:23:27:f9:41:6b:15:96:fc:
         e3:3e:ab:f9:98:cc:3e:96:c9:6c:15:a4:f5:d1:e3:72:71:1f:
         05:3e:cc:9b:48:77:5f:3f:3a:ad:fe:ef:20:6a:03:55:5e:c6:
         f2:1f:35:a0:15:bd:c5:f9:45:f7:89:54:33:c8:4b:02:15:9b:
         12:e4:fa:7d:dd:56:dd:77:d8:93:7b:67:dc:2d:17:17:db:bc:
         a7:c0:4d:76:06:8b:7d:41:28:6c:45:1b:2b:be:67:51:5c:c8:
         be:de:52:82:56:6c:ad:d6:1b:9d:45:b1:56:5c:f9:d2:3f:cd:
         f8:5c:8d:4a:7f:0c:ae:4e:29:de:c5:dc:e6:c9:dc:92:a7:d0:
         dd:06:5e:79:67:cd:93:e4:23:b7:21:fd:2c:e0:5a:eb:98:90:
         16:3a:52:7b:fc:f9:62:84:62:a7:7f:10:f3:73:4b:38:94:4e:
         5c:de:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----