Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File:                     z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier:          kAXZMweLEjKQTm4JOcpwr60mQrFO8TIRGaI9a34ApOM=
Subject key identifier:   84:52:B1:DF:AC:5D:86:20:08:27:42:91:77:AA:FA:AF:AB:88:9D:CD
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer:       /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial:       01962E617FA6D555B5DFB60562C611F39FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number:          1531
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
                          2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
                          3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: JToPamx/f5WRzv/EINjOAPiPCYQbFKsxgiKU5pbJqdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7f:a6:d5:55:b5:df:b6:05:62:c6:11:f3:9f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=8452b1dfac5d86200827429177aafaafab889dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:cc:da:7f:06:35:55:b0:64:5c:70:e5:68:
                    64:b6:ae:f3:2d:17:52:23:f6:56:66:e2:69:c6:a1:
                    9a:45:dc:77:f6:15:ca:46:29:9d:c9:7d:db:a2:e3:
                    a2:5f:3e:ea:5f:01:01:e4:24:cd:a9:7b:45:e6:32:
                    54:81:ce:b0:b1:a6:27:9c:d1:3c:71:1d:6a:6d:92:
                    35:9a:82:59:1b:b5:1d:a6:54:c8:0f:3e:8d:ca:9a:
                    a5:8f:c1:a8:4e:6c:91:af:04:55:2b:20:79:da:fd:
                    ac:b3:27:cd:73:81:63:2d:fb:fc:ea:4a:0c:ab:50:
                    e8:ea:c6:0e:62:49:20:d0:a9:b6:9a:59:04:84:17:
                    23:5a:04:ca:33:59:8a:54:07:d5:50:b8:e5:a2:97:
                    7c:3e:22:8c:27:d1:d9:9f:e6:cd:d9:79:e6:f5:6b:
                    b7:54:28:78:b5:1e:e2:7d:ab:22:53:71:a5:88:85:
                    c3:fa:32:a3:3e:3b:dd:b4:37:a6:9e:9f:66:f7:87:
                    b2:4b:78:9f:83:75:1f:4e:e8:bd:c4:0e:4c:e6:e6:
                    19:01:fc:14:18:00:5f:4b:8d:6d:e0:8f:ba:10:5e:
                    58:ab:ac:f2:98:82:82:94:9e:de:a9:0d:70:7b:fc:
                    54:df:60:49:0c:b0:18:58:39:c1:e8:4a:31:cb:c2:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:B1:DF:AC:5D:86:20:08:27:42:91:77:AA:FA:AF:AB:88:9D:CD
            X509v3 Authority Key Identifier:
                keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:ae:0f:ab:c4:df:23:fc:61:76:78:61:66:6f:b2:08:b0:
         0b:8b:1a:80:1b:40:53:b2:4a:88:6a:83:a1:6c:78:ea:82:db:
         ae:36:72:65:fb:a9:17:d5:96:c2:b6:36:35:db:b8:ec:1d:ac:
         eb:71:cd:03:b4:39:b1:6f:5b:83:92:1c:09:b6:95:6b:d8:e3:
         56:91:94:a9:33:6f:a6:88:61:cd:c9:fb:8a:8c:3d:4f:ad:b5:
         b6:5b:f7:88:a1:90:0f:ed:3d:4e:73:0f:f4:e5:f8:e7:93:85:
         a7:18:3d:cb:69:92:be:fe:32:d5:2d:02:37:eb:ee:df:a4:ac:
         08:68:42:2e:3a:b2:18:68:73:0e:ee:42:93:20:58:f4:9c:7e:
         f6:03:fd:dc:b9:b6:a9:44:d1:4a:e7:fb:8a:54:3d:12:d6:17:
         d6:08:89:40:a0:bc:5e:a6:3b:9e:ba:e7:44:d4:ee:1e:c9:db:
         07:65:21:d5:68:fe:29:84:a4:e3:7b:ea:9b:6a:43:1e:a2:34:
         a7:6d:ed:2b:cc:0a:14:7a:ae:5b:f7:83:12:aa:74:40:ce:30:
         ae:8a:11:90:23:47:d5:c3:4c:29:d1:e2:02:64:0f:ca:7a:39:
         3f:36:f8:9d:c0:4c:c3:2c:6f:14:93:a3:c8:6f:28:a5:10:d0:
         13:83:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----