Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File:                     ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier:          lmtknsLkuxeTQQPVQbGJv7mI2zKVBmLYOnYLDbZv3iM=
Subject key identifier:   11:9C:34:C1:80:BE:96:B8:C1:98:CC:D2:4C:24:04:76:EB:F2:A9:6D
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer:       /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial:       01962F06BE7A91A908CF08BE5870FA7B7ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number:          0D99
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
                          2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: Kx1w6O/sDBEBuNaJW824goXEScTdsAz8cHadl6k9plY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:be:7a:91:a9:08:cf:08:be:58:70:fa:7b:7e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=119c34c180be96b8c198ccd24c240476ebf2a96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:4e:ae:c5:52:d4:d4:fb:a7:7c:b0:70:43:
                    26:aa:e5:df:b7:eb:db:34:40:80:f8:06:d5:2d:73:
                    aa:2e:36:f1:98:b3:f2:74:91:9b:0a:38:9c:40:14:
                    e2:e5:42:04:fc:44:c2:3d:17:3f:20:ec:ba:16:bd:
                    a5:18:78:f5:69:6f:31:7f:7d:df:63:7d:38:28:94:
                    88:b8:0b:a5:db:7d:c2:51:a2:b4:50:cb:a1:2b:79:
                    f1:50:af:3c:41:90:6e:92:c0:46:a7:02:09:82:2d:
                    a8:bb:08:e1:ef:7a:f7:77:85:6f:fa:3b:2d:c5:e4:
                    94:2a:6c:01:b5:0a:da:34:ca:d0:c6:67:ce:d9:19:
                    f1:6b:8b:50:5e:be:18:0b:98:b2:8a:08:bf:ec:58:
                    e4:1b:f5:20:34:36:e3:ee:08:bc:1f:dc:3d:e9:07:
                    cc:88:18:1c:32:2f:82:37:88:f4:36:1b:d3:2f:a4:
                    4b:a1:21:cc:04:8f:c1:f0:3f:a8:60:3c:14:72:bd:
                    4c:3a:7b:fd:95:5f:c9:19:bc:d3:80:69:3f:d2:c1:
                    dc:2d:11:49:8a:4b:00:9d:f2:3d:77:57:9a:3e:be:
                    35:c1:d6:ec:7a:e6:bb:1f:63:4d:c4:b8:a5:7a:cd:
                    3f:b1:23:cb:d3:89:81:1b:bd:1f:67:53:63:57:57:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9C:34:C1:80:BE:96:B8:C1:98:CC:D2:4C:24:04:76:EB:F2:A9:6D
            X509v3 Authority Key Identifier:
                keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:e9:79:4b:05:f0:84:5b:42:3d:a3:02:1a:eb:03:47:21:
         c9:1e:cc:4f:45:31:76:30:73:f7:92:40:35:1f:ba:b2:cd:b0:
         50:18:3b:b9:ae:4e:49:8e:d9:ea:34:7b:82:be:e2:b6:77:f2:
         e3:e8:c8:5c:d3:e7:5b:69:10:6f:92:fd:68:29:99:10:54:0c:
         2a:2f:e0:d3:58:18:1d:43:44:6f:5d:64:65:4b:c3:53:25:68:
         e1:21:6b:98:4f:4b:21:0c:87:63:9e:b6:1a:9f:24:e9:69:a1:
         75:b3:64:9e:37:66:ea:62:ce:a0:c4:33:e3:c6:b7:e4:8f:ab:
         2c:a4:50:96:76:2b:32:d9:ba:05:44:38:41:04:7d:25:81:7c:
         6b:1d:6b:ca:89:ab:76:19:df:9e:55:b5:f0:0f:87:fd:58:34:
         27:51:9b:eb:81:07:f5:1e:59:80:6d:17:53:fa:1f:5d:57:5c:
         0f:b5:5b:3f:09:0f:ed:ec:1d:9b:9d:09:f5:78:26:da:65:43:
         7b:a2:eb:3e:1e:66:6a:f3:9a:74:49:f8:45:18:89:0a:5c:2f:
         77:49:d5:d0:23:2a:28:74:35:64:06:cb:db:32:18:81:de:1d:
         dd:d5:77:63:19:fd:fc:94:d2:e4:ac:65:82:f9:a3:f1:bd:0f:
         cb:4a:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----