Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft
File:                     Zn55k2TUFPZt82MTfHmr9hI5600.mft (raw, json)
Hash identifier:          FRiXi6Don///u7HOk+0PGmUlYef4ubM0b0QUzS4mxnw=
Subject key identifier:   5C:EB:AF:F4:ED:FF:A3:8A:1F:48:F1:08:F3:E3:E1:41:FB:D5:E4:AA
Authority key identifier: 66:7E:79:93:64:D4:14:F6:6D:F3:63:13:7C:79:AB:F6:12:39:EB:4D
Certificate issuer:       /CN=667e799364d414f66df363137c79abf61239eb4d
Certificate serial:       0192305A82F0330FEA3F831D020EC40AD576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zn55k2TUFPZt82MTfHmr9hI5600.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft
Manifest number:          12D7
Signing time:             Thu 26 Sep 2024 22:01:30 +0000
Manifest this update:     Thu 26 Sep 2024 22:01:30 +0000
Manifest next update:     Fri 27 Sep 2024 22:01:30 +0000
Files and hashes:         1: 1T3yVq56VqUsCRNgAc26gHjStFE.roa (hash: PVzW9sgsFXJJvdI8hRhBdC+MSpLl+w3WD1Q650hjph8=)
                          2: Zn55k2TUFPZt82MTfHmr9hI5600.crl (hash: UggbozxO3Al9ACZYZUN5/8KBNBSxQAmyqi0qQdyEDlU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:5a:82:f0:33:0f:ea:3f:83:1d:02:0e:c4:0a:d5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667e799364d414f66df363137c79abf61239eb4d
        Validity
            Not Before: Sep 26 22:01:30 2024 GMT
            Not After : Sep 27 22:01:30 2024 GMT
        Subject: CN=5cebaff4edffa38a1f48f108f3e3e141fbd5e4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:47:54:73:67:cd:60:65:d9:bb:18:0d:5b:
                    d3:b4:e9:bc:75:9f:db:46:c6:80:ca:ed:ca:33:be:
                    02:ec:af:72:94:48:dd:3b:c9:23:14:81:2f:af:56:
                    11:f9:e7:76:69:a7:44:e7:3d:67:8c:7b:b8:10:90:
                    60:6e:75:08:c8:fc:b9:b8:fb:06:07:3a:0a:24:76:
                    5c:ed:80:97:5b:a7:d2:80:d6:b4:a5:af:f8:5d:f2:
                    b2:19:2a:fd:3a:15:43:d9:18:52:38:ae:5d:dc:48:
                    c1:d4:61:bb:7a:4b:5a:71:cd:2d:af:f2:6c:d8:c1:
                    e5:e2:aa:c0:81:17:19:e9:71:7d:d1:88:dc:cd:32:
                    fe:3d:29:c8:68:80:63:ab:0a:3e:6e:6a:6d:9f:fc:
                    b2:2a:39:6e:2a:84:66:90:33:3b:b7:32:0b:af:22:
                    60:72:22:ff:23:bc:58:09:0a:05:78:8d:b7:92:03:
                    7b:c6:f5:23:83:28:ad:45:b7:70:e8:36:81:b7:a7:
                    2b:fb:64:39:3a:2c:e5:3c:72:ee:02:6c:5b:d8:c1:
                    a6:58:62:80:d9:26:f0:3f:b2:7c:6d:80:a8:a0:42:
                    b8:86:5e:5b:04:e1:05:e9:bb:bb:21:4b:02:74:4d:
                    b7:07:2a:36:df:68:55:b6:3a:9b:1a:f4:1c:5c:e3:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EB:AF:F4:ED:FF:A3:8A:1F:48:F1:08:F3:E3:E1:41:FB:D5:E4:AA
            X509v3 Authority Key Identifier:
                keyid:66:7E:79:93:64:D4:14:F6:6D:F3:63:13:7C:79:AB:F6:12:39:EB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn55k2TUFPZt82MTfHmr9hI5600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a763fd-0b05-428b-b723-20c23868b91f/1/Zn55k2TUFPZt82MTfHmr9hI5600.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:38:22:b9:6c:c2:5d:70:96:ef:74:c5:f2:8c:14:84:4f:
         10:71:6c:c0:ad:3a:b1:0c:10:35:c3:41:7b:c0:f6:c1:a5:23:
         9a:c3:9f:23:50:bb:cc:c6:d6:d7:4f:04:67:2c:bf:46:0d:7c:
         af:a3:74:92:a8:2c:2b:19:e1:e8:40:ca:66:40:fd:be:b9:05:
         ae:b0:66:8c:eb:20:53:a8:7a:8a:a4:57:56:1a:86:53:27:b8:
         26:00:db:f6:8e:bd:a5:ea:9d:20:78:47:45:f1:24:d0:a0:e7:
         09:4b:8e:d7:89:51:19:bb:2f:d4:dd:05:10:b9:d7:06:ad:b4:
         9e:58:30:48:f2:52:bd:22:9d:03:09:fd:6f:39:6d:5a:10:7d:
         e5:00:cf:7f:2b:80:55:e4:8c:92:2f:95:6c:d9:b6:35:4c:59:
         d4:64:91:08:3a:fa:f5:a7:cd:6c:e8:e2:90:65:af:3c:eb:6d:
         15:e8:92:3c:5a:66:92:22:f5:be:52:46:99:95:dd:26:11:a2:
         1f:3d:54:62:e4:1a:fc:48:9c:3d:45:4a:d9:6f:96:cf:c7:2c:
         1c:81:ab:2b:55:80:26:b2:f0:1f:f9:b4:02:b9:0d:53:e8:68:
         91:ce:a4:12:dc:9b:0a:d2:ff:bd:df:d5:6c:ca:3f:0b:04:07:
         35:1a:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----