Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          Qjnf1+/kyAsu5I8+7S0tzgJnSapbfC1BWHJVXA52LWg=
Subject key identifier:   66:C6:F7:DB:53:E1:3F:6F:BA:34:63:CD:71:5D:7A:DF:CD:14:55:63
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       01962F7439D7E120188F1F65B838477748AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: P6Rs0qRZrmMaWyKzLrQm++CFjH0JjrtxU8/N1uiLxHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:d7:e1:20:18:8f:1f:65:b8:38:47:77:48:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=66c6f7db53e13f6fba3463cd715d7adfcd145563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:df:1c:57:10:a0:6c:a6:73:ea:8c:e4:a5:
                    1b:a9:d8:db:ce:f3:c6:85:58:f4:24:92:e5:dd:41:
                    6c:57:84:cf:02:b4:70:92:2a:11:39:0d:67:dc:04:
                    b4:42:99:28:2c:54:f0:aa:7a:28:1f:0f:c6:99:7c:
                    8e:ea:11:cb:5e:4b:ca:5b:c0:42:ae:05:b2:49:95:
                    73:2a:e4:2b:66:80:48:65:fe:c5:44:e2:a2:00:d6:
                    bc:ac:bc:95:e6:e1:ef:f7:06:0d:af:f1:2e:91:54:
                    65:0d:81:94:53:15:59:21:93:30:73:25:0e:ac:a9:
                    13:18:08:0b:8b:d2:b7:92:61:ed:13:8a:b7:cc:85:
                    05:81:8f:79:2e:dc:8b:b4:06:53:87:98:19:45:16:
                    c7:11:a6:c3:6b:76:f4:03:6a:07:e3:48:af:1b:cb:
                    a3:50:af:e9:76:ab:cb:36:76:63:a1:75:5b:96:9c:
                    0f:16:5a:56:7f:f3:1f:0d:0e:30:22:bf:78:1b:66:
                    29:1b:5f:65:4c:c9:1d:d1:ce:3d:0f:da:59:23:a0:
                    a2:e7:9c:50:3c:29:13:00:18:f5:08:24:39:cf:f8:
                    f0:f5:57:b0:e5:d1:5d:ad:aa:52:12:1a:40:04:29:
                    14:65:96:64:50:99:59:0b:ec:8c:09:c3:e6:96:4b:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C6:F7:DB:53:E1:3F:6F:BA:34:63:CD:71:5D:7A:DF:CD:14:55:63
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:91:c1:7c:1a:7c:f9:88:94:72:fa:ff:30:27:4d:f0:e5:94:
         9d:dc:73:95:f1:77:6d:36:e6:38:e4:01:ed:55:d5:7b:d7:f1:
         22:a7:d0:23:5d:0a:08:69:71:74:c7:cf:f9:68:a5:95:7c:9c:
         09:28:ec:97:fc:88:02:ad:4b:70:11:06:5b:e9:0f:6a:d0:a0:
         08:37:ec:9c:43:ae:a5:c8:3f:c2:95:dd:3a:fd:d7:11:cf:ed:
         ce:03:7e:dd:49:d0:93:6b:d5:8f:b5:e3:d2:74:2a:81:37:f3:
         9e:b6:4d:62:23:18:12:a9:66:1c:1d:14:fd:e6:2a:1f:47:b4:
         18:2e:86:4f:ac:ab:86:79:68:1b:cd:5e:10:a2:06:c4:a3:09:
         53:8b:6e:cc:d1:fb:5c:72:9e:78:3a:07:40:67:11:70:fa:72:
         eb:94:8d:bd:cc:99:b1:e2:16:ab:68:56:dc:8d:8c:68:61:f1:
         49:b4:fe:54:63:fb:37:69:ad:40:46:85:bf:11:78:42:c0:57:
         d1:4a:db:2f:89:f7:fb:49:34:3c:66:af:fb:09:e4:11:06:c8:
         52:0e:af:f8:1b:27:46:8e:fc:e5:39:11:a2:55:ea:b2:87:35:
         e8:06:2a:a0:c1:64:96:70:ec:a0:9a:4c:f2:eb:95:7d:46:ec:
         1a:28:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----