Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          mGsf1Fi6q1LNxsc8MWKIaAdqvC4lBpHloCkN511dE1g=
Subject key identifier:   91:84:8A:C2:35:6F:42:56:E0:AE:91:95:EC:97:A5:BB:51:8A:8C:DE
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       01962F3D747E8205B7810F2E1ECC725CEB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          11BA
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 35U7CZ1qXrzTx2eLLdzVzoACzzE.roa (hash: 1wtSqJU98ipRQJGWJWHj6EUGRVxO+r6yrBxneIuR7yY=)
                          2: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=)
                          3: MZzk92Wzzy1bnjvqDRwI3qhrUp4.roa (hash: oBRmks4/j2r6bUbUSgQd/079zBOdryiqEhSP6LUtHt8=)
                          4: dpEUD5Ic4PND631hV_WLYlzOm-Q.roa (hash: jkB5/8OIzhFzu0rc7J2Og2F1itTEOg0Rs+XbStzpkvQ=)
                          5: lAbsKfE3TL6BXXIug3kLMpkTpyc.roa (hash: 6GXkOjomJPTn/I17Fb1Iyy+h/EVDmDKXN84MvWK1jeA=)
                          6: mOMTOzklCOsSuB9v2boILVZdvLA.roa (hash: mXY/bu3Am1gTj9HpvpC3BeunwEWpovGrdKp10ZfyeDc=)
                          7: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: ap8I+aNY3P+0nm6WcBbLM9aHw8X0YkLxzLXCgpOFil4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:74:7e:82:05:b7:81:0f:2e:1e:cc:72:5c:eb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=91848ac2356f4256e0ae9195ec97a5bb518a8cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:d5:88:2f:e6:1b:fa:49:97:bb:62:78:53:
                    5c:8d:9a:de:27:af:da:4e:0d:a0:5a:68:d3:01:8e:
                    dd:55:b8:5e:c3:d6:b0:07:64:e1:35:e0:0c:9f:30:
                    f1:78:f8:e3:a9:1c:4b:99:40:31:0b:5d:93:f2:3a:
                    64:ce:fc:35:cb:e3:1b:b1:e3:20:83:56:d3:33:7d:
                    06:ce:99:6d:f7:1e:d7:26:84:e3:65:aa:6a:46:40:
                    4a:c6:8d:70:10:60:f7:49:37:80:bc:11:ad:5f:44:
                    77:0e:ec:12:fc:95:86:d0:c4:47:82:7e:84:25:7a:
                    f3:29:56:97:14:74:80:c2:7b:b0:13:ce:a7:dc:07:
                    1a:07:0c:58:99:d3:d0:bc:36:6f:ce:fa:b4:a7:30:
                    0a:7a:d4:f5:dc:ea:73:bc:0c:36:00:17:1b:03:fc:
                    7c:de:5f:29:b8:3a:7c:28:02:7b:62:cf:72:94:88:
                    d9:2c:fe:3f:44:be:91:2f:0d:c0:72:ea:7f:b9:24:
                    e2:37:a5:c8:f7:44:74:a6:1f:a8:c5:24:66:89:13:
                    d2:69:b8:87:0c:6c:6f:ef:8b:65:cf:81:5c:e0:a5:
                    5e:1c:b9:44:08:73:e9:9a:d4:70:3b:4a:7e:1d:fe:
                    d0:e0:fa:b2:05:d8:d1:a8:9b:ee:5a:ef:0a:95:b1:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:84:8A:C2:35:6F:42:56:E0:AE:91:95:EC:97:A5:BB:51:8A:8C:DE
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:f3:15:31:bc:de:d2:99:08:2b:1f:44:dd:72:98:a4:0f:
         d7:17:ec:7e:04:28:95:12:7d:87:1b:5d:c2:04:7d:31:d0:d5:
         62:a5:5b:e1:e2:8e:a4:fe:8e:0a:31:92:6b:04:6e:e5:65:bc:
         31:d9:70:18:4c:aa:09:0b:c4:33:01:44:e1:7d:07:db:9b:e0:
         99:0e:80:ca:dc:15:db:05:82:da:53:f9:2c:e1:d2:df:1b:0c:
         e4:e6:e3:9e:2f:7b:79:48:cf:ef:c5:e2:62:6b:f8:5b:04:49:
         4b:26:9a:7b:18:a4:8c:20:30:67:8b:9c:7b:49:b3:05:49:0a:
         3a:51:6b:64:bd:7b:6b:1c:86:b2:4b:2f:3e:a7:9d:88:b4:be:
         23:b2:26:3a:fb:3a:54:48:b6:7a:25:87:9d:e6:7f:87:0e:81:
         cf:ba:52:32:45:29:6c:7f:c8:62:4f:eb:20:2f:27:12:86:7f:
         c1:35:d9:07:77:51:fb:30:9a:02:5c:e0:24:31:af:2c:fb:f5:
         df:7a:64:34:7f:f5:61:de:9c:9e:d2:3f:e9:9d:70:b5:71:c1:
         62:af:9d:d2:78:4d:86:b7:7e:09:7d:0d:ad:d8:55:b1:79:38:
         49:a3:c2:ad:2d:ae:53:b0:da:2e:38:f3:d8:ad:b5:ed:ae:05:
         fd:4c:a9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----