Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File:                     ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier:          ok61Wig3+RXUAKT6a3J9wVBEmhQMK74iDmBXz7oJOpg=
Subject key identifier:   09:F9:9E:54:08:5F:99:FB:53:FE:9B:31:34:B3:EB:65:E0:2E:A0:E0
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer:       /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial:       01962E986368B77BF8F08B50247952E8DABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number:          0421
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: HUQfSbUXQ8o5sejAFjmqjv9tlM4.roa (hash: 0zqsTYbHTNoaCDejiRL7Xvvp739hTKFX211y1GkZqpw=)
                          2: IRgLAnTQtNSoAjzAdTJssFWXSw8.roa (hash: OLDZQBhRqUKwifuLNk5oWPjP3iOP3ZFBViXpFb8/RAs=)
                          3: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: 7v7+5wu6iGW1PaH4CMlo/tLJ+sz79QN0pFNcem8Zp4I=)
                          4: r-mMpss0ZPS6wfcro6Yc6v3bf5I.roa (hash: AfE+ZyYoM7YopSTeu6QdJkZ27/i6Ksf0AYTOdnxfZrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:63:68:b7:7b:f8:f0:8b:50:24:79:52:e8:da:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=09f99e54085f99fb53fe9b3134b3eb65e02ea0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:4f:bb:99:eb:3a:70:c7:c2:42:7c:33:70:
                    da:40:88:cf:58:9e:14:b4:09:cf:87:66:67:a1:ee:
                    7d:64:34:75:e9:7a:64:a9:91:75:58:b8:fd:19:b1:
                    c2:55:a3:db:af:df:71:c6:e6:84:b5:30:fb:60:8e:
                    48:91:f2:a4:4f:e8:9f:7e:32:97:58:d2:22:07:53:
                    6f:bc:eb:ec:bb:13:56:04:ae:54:a2:ea:a0:a9:4c:
                    06:85:59:30:f7:52:ee:c6:8a:40:89:bc:2e:fd:b0:
                    2b:8f:e2:ff:88:29:4f:27:44:5f:71:77:da:07:6c:
                    ff:f9:90:8f:ef:db:ee:f7:e8:09:c7:7c:9b:6c:16:
                    81:d7:18:85:df:d6:53:f1:ef:3d:e2:0d:d4:4c:b4:
                    84:b6:58:49:f8:61:f0:2c:0c:cd:80:21:0c:04:b2:
                    83:90:bd:70:6c:0a:e9:2f:be:06:ee:1b:ae:10:10:
                    29:94:88:c9:20:76:2a:19:ad:0c:7f:62:f6:16:3e:
                    2f:17:5f:8e:6c:3b:25:e6:c3:b3:9b:c3:d1:42:2f:
                    8d:78:3d:7e:17:ec:0b:90:e9:56:15:a9:ca:61:51:
                    00:ee:cf:a5:a0:ae:1c:f8:1f:ed:13:93:37:7b:31:
                    1d:68:b0:ff:86:de:ab:d6:aa:85:11:e4:61:ea:80:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F9:9E:54:08:5F:99:FB:53:FE:9B:31:34:B3:EB:65:E0:2E:A0:E0
            X509v3 Authority Key Identifier:
                keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:05:30:b1:a1:12:dc:5a:d5:27:98:d2:53:61:1f:24:ee:5a:
         cf:40:88:80:27:04:07:6f:3d:63:ba:a4:d7:32:2b:3c:f6:db:
         93:3c:11:23:ca:49:d2:34:13:56:c4:e4:af:00:05:62:c6:60:
         e6:a4:09:d3:22:a0:40:59:f1:ae:05:45:a7:10:29:c6:e3:36:
         09:e6:a6:2f:fb:93:ca:9b:c6:48:c8:a8:4a:72:bb:b8:f8:a5:
         14:d3:e4:f3:a6:3b:bc:c9:6b:ab:ea:c5:e1:ed:28:29:8a:b4:
         e3:66:30:d3:7c:0b:0b:d8:20:a6:4f:68:53:10:f7:ad:06:aa:
         08:d3:7d:d1:be:e1:ae:7d:eb:cb:6a:bd:59:e6:09:f7:2d:3c:
         30:a9:39:77:08:4a:cb:9f:58:16:ac:97:13:a0:cb:69:06:56:
         46:de:05:17:bd:76:06:f1:53:38:d3:37:92:26:2e:01:09:d1:
         b6:1e:ca:dd:b1:de:f7:a1:7d:c9:c2:a9:ac:f9:5d:36:8c:f2:
         61:71:f6:1c:48:eb:b7:9e:69:1a:86:39:9e:07:38:a5:de:3f:
         ea:0d:4f:d7:dc:ee:3b:98:ff:73:10:9a:bb:32:a7:f5:6b:8e:
         78:32:44:c1:ce:da:ec:3e:d5:e8:5d:84:7f:f1:75:71:f1:ee:
         2b:f3:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----