Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File:                     zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier:          NbfEoM6hcYa5I/KzD+nfTRYm3O2u4cvjpOdCuaK2bCg=
Subject key identifier:   4F:00:A5:A7:A7:1F:33:79:80:E6:90:33:9A:8E:E1:BF:80:B7:E2:3C
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer:       /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial:       01962DF401FA5E7E8A7D7F4EDDE39F42CEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number:          09F2
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
                          2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: oYMao3bI2kPxzedVZzxm+4cyWJx8fK7t9eviqLOs29U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:01:fa:5e:7e:8a:7d:7f:4e:dd:e3:9f:42:ce:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=4f00a5a7a71f337980e690339a8ee1bf80b7e23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:04:34:d7:d9:b6:bc:55:15:0c:bb:a7:10:
                    7c:9f:9d:83:4f:0b:58:fb:b3:2e:35:a3:da:84:50:
                    35:b3:09:0d:a8:e1:84:1c:de:ba:aa:7a:ea:5a:f4:
                    ed:f0:f2:70:0a:11:49:cf:41:f1:b5:9d:03:dd:f4:
                    9f:df:7f:a0:0c:f9:23:6a:bd:5a:ab:5b:e9:93:c0:
                    c3:67:fc:3b:55:cb:72:86:35:55:92:d1:5c:cf:2f:
                    b1:04:76:2c:c9:0c:7e:77:ff:55:03:64:53:eb:9a:
                    a5:f0:a1:7c:ae:5a:93:54:34:20:1a:1a:8c:9a:68:
                    61:19:ac:f2:84:ab:86:5b:44:05:4c:ff:45:db:8c:
                    71:09:79:de:1f:9f:5c:eb:ba:8f:2c:3c:d3:0f:42:
                    b6:05:6b:e0:73:14:41:89:41:47:1d:ff:62:a0:fa:
                    ee:d0:d0:7e:83:1c:88:be:3b:88:f8:70:71:06:e9:
                    4c:95:d5:c0:cd:a6:7c:ef:bb:92:e8:65:6c:70:85:
                    f1:17:b0:57:3e:dd:a7:80:95:d8:b1:12:e6:05:76:
                    52:75:c3:f4:7b:12:c4:67:6e:c3:bb:b6:83:19:65:
                    a2:8f:56:23:cb:3f:a9:8f:65:17:4b:ff:4b:5b:cd:
                    d0:6f:8f:54:87:b0:69:b7:e0:30:1e:9b:aa:8b:29:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:00:A5:A7:A7:1F:33:79:80:E6:90:33:9A:8E:E1:BF:80:B7:E2:3C
            X509v3 Authority Key Identifier:
                keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2f:bb:f6:de:f2:9f:09:d0:aa:3b:7f:ce:fd:c5:1e:55:37:
         ce:97:63:65:74:b7:3a:04:c2:28:24:27:17:aa:00:77:af:94:
         e7:58:4b:4f:8b:c6:a2:5c:05:c2:e4:90:41:83:65:b3:1d:de:
         7b:45:54:8d:6a:dd:11:7a:30:af:92:fe:ef:61:b7:af:52:8c:
         1a:43:5f:a9:7c:03:4c:cb:49:02:78:82:ee:cc:9b:b3:42:23:
         f5:88:cc:33:83:ac:be:47:b7:84:36:53:7c:ca:ff:d8:84:2d:
         38:6e:a4:0b:99:e7:85:57:cd:dc:99:33:1f:dc:ce:6b:cb:07:
         48:b7:31:cd:95:30:3e:3c:eb:58:19:e7:31:2f:22:8a:41:39:
         20:93:fe:7d:8c:79:63:b4:85:e0:5a:c1:f2:77:55:4d:56:5b:
         15:0a:a1:ed:bf:ad:76:81:84:e2:69:ab:e1:12:c3:56:9f:09:
         ab:b4:0c:fb:10:43:d8:b5:5d:cb:b8:7a:5b:fc:1d:bd:6f:3b:
         1b:18:14:7f:6a:61:9b:75:7c:23:d4:75:0b:70:1d:80:3d:36:
         c6:a9:0e:23:13:47:ca:7c:ca:25:81:98:c4:f2:fc:9d:7f:61:
         27:d6:f4:a0:c0:4d:51:8a:38:13:87:52:55:d4:88:fc:0c:2d:
         62:a1:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----