Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft
File:                     zo2SrOCAEcTQrsjyKGVxW9kaASI.mft (raw, json)
Hash identifier:          DmxRVb8SK5JXk4sttB9r+s8/kGkLs0V1zCqa1TR22cI=
Subject key identifier:   3A:E4:0A:F8:44:DA:B7:92:1A:A4:B4:1C:E2:DA:BA:33:77:F2:07:46
Authority key identifier: CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22
Certificate issuer:       /CN=ce8d92ace08011c4d0aec8f22865715bd91a0122
Certificate serial:       01962FAB7529FCE087FAD9A00144CBCD6B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zo2SrOCAEcTQrsjyKGVxW9kaASI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: c9T1Kx5A7nWBX74YKnmxrK2YxWk.roa (hash: z4gK4/Y9ltoru7dKh2/m8n1YWOzp0cICAUx0PffNJmo=)
                          2: zo2SrOCAEcTQrsjyKGVxW9kaASI.crl (hash: C8q5BlL878UNmqZTWMKrZfe+7HONwO4Y3IpgJw8oV2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:75:29:fc:e0:87:fa:d9:a0:01:44:cb:cd:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8d92ace08011c4d0aec8f22865715bd91a0122
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=3ae40af844dab7921aa4b41ce2daba3377f20746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:0e:29:a3:2c:f0:06:a1:4c:a7:2e:ae:c6:
                    12:b0:84:e8:c0:30:40:46:90:d1:bd:2e:02:fc:4f:
                    41:9c:a2:e8:d2:da:ea:c0:fb:f5:81:77:c8:4a:92:
                    7b:20:e6:34:8e:a4:54:18:47:bf:47:1d:8f:92:f9:
                    95:b0:fe:67:75:3d:5f:0b:64:08:c8:ad:92:fe:ac:
                    b4:cb:8a:7a:4b:d1:27:ce:07:cc:2d:b9:65:4e:78:
                    af:6e:61:6b:49:fb:b7:98:5c:de:79:5b:e9:75:3f:
                    6b:81:56:61:24:61:e4:3c:68:4e:2f:e6:28:21:35:
                    a6:a6:66:ee:9a:7e:e9:f3:23:71:35:fa:93:1d:bf:
                    02:2d:f7:22:de:5c:0b:59:48:5e:f8:51:44:0f:87:
                    b9:56:56:b1:6c:ae:02:fb:3e:3a:e2:9b:dc:0b:96:
                    20:d7:76:22:8d:1a:99:aa:f4:c0:13:e4:b6:87:70:
                    78:c3:24:9a:a4:4f:0c:3c:ca:6d:11:80:43:7f:22:
                    7f:d7:04:af:ab:16:23:aa:dc:0c:bd:e3:81:f6:01:
                    49:e2:76:b2:1c:66:c4:1f:e8:74:3a:43:ef:62:9f:
                    d3:66:52:12:09:40:cb:b7:f9:9c:95:fc:84:7e:64:
                    ec:15:9c:29:bc:f8:45:49:06:02:e2:d8:b9:11:08:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:0A:F8:44:DA:B7:92:1A:A4:B4:1C:E2:DA:BA:33:77:F2:07:46
            X509v3 Authority Key Identifier:
                keyid:CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo2SrOCAEcTQrsjyKGVxW9kaASI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:db:92:16:03:96:e9:4c:c1:c2:82:0a:0e:f5:ca:a7:4d:
         26:42:f5:5d:72:10:7e:bb:0a:80:08:9f:ed:c2:77:5d:98:c6:
         63:d7:66:df:6a:12:60:93:22:55:28:c2:2b:eb:2e:20:6e:f6:
         32:b1:f1:d6:00:1b:ab:2a:90:6a:e5:bb:fa:9a:07:96:f0:99:
         1b:f2:fe:23:1e:c8:2a:8b:f2:4b:97:ea:f7:87:7e:dd:08:1d:
         12:7a:8f:59:19:40:bc:5a:bb:d0:fc:ae:58:8b:80:70:4f:b1:
         64:1d:e8:be:76:df:c7:89:bb:88:5e:d2:41:69:ea:f7:25:51:
         85:e0:44:02:03:fe:1c:ed:63:18:02:f3:ea:39:53:04:19:7b:
         92:16:b6:15:78:1e:6f:ab:19:c1:2f:73:c2:21:f0:e2:be:c5:
         ad:55:d3:ec:5d:b5:6b:4e:b6:49:12:1d:7d:25:3e:66:4a:e4:
         a1:7c:fc:14:49:bc:0a:01:79:f4:6e:a0:8e:65:3d:62:55:52:
         1f:42:19:f6:86:80:56:69:dc:7e:57:27:34:9f:64:1e:fe:65:
         53:1e:fd:c9:ae:ce:24:4f:e7:75:a6:11:49:0d:b7:e9:85:d7:
         a5:d0:d4:8b:92:c9:73:0b:58:9c:44:84:53:2d:44:44:74:8a:
         ca:11:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----