Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File:                     zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier:          5qzbL//APMmbPrFMTFeQsxVmiQDNYLYeWI1ihYyDcUs=
Subject key identifier:   55:F2:FC:EC:F9:93:12:B0:7D:2E:B6:16:0E:BB:CB:A4:39:30:12:BE
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer:       /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial:       01962F069C3D538AEC7A858413B4FCB3EEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
                          2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: ROKM0zXC4af5ItNUWgUd3TEcFuUWviocYWjHF95pZxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9c:3d:53:8a:ec:7a:85:84:13:b4:fc:b3:ee:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=55f2fcecf99312b07d2eb6160ebbcba4393012be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:1f:56:19:fd:6f:18:bb:ae:fd:89:0d:c1:
                    41:49:f7:e0:fe:7d:e8:f2:52:6e:08:6b:39:ff:bc:
                    1f:0c:9c:1d:94:1b:2a:e8:55:6a:71:dc:c5:68:fe:
                    57:14:3a:02:c2:08:e8:7f:96:fc:ed:23:86:c7:ad:
                    ef:7c:3b:56:54:52:20:33:47:8c:d5:e1:36:22:2b:
                    c7:83:2d:9f:cd:e1:5b:9e:e3:0e:93:b8:4e:28:c3:
                    34:bd:d0:c7:05:01:de:be:1e:f5:ba:27:64:15:9c:
                    75:40:40:16:1a:c0:d8:0f:88:4a:d0:7f:4f:19:4a:
                    f8:76:49:34:35:01:b6:4f:87:e4:7c:11:da:87:d3:
                    0a:1a:ea:bb:7a:40:17:44:4e:c5:31:b3:a4:52:ab:
                    95:10:58:80:9d:55:17:ab:2b:8b:55:02:c7:63:ee:
                    7b:f1:64:7f:d5:c9:e2:56:61:25:78:56:9a:e6:98:
                    4e:33:03:43:e9:a5:7a:4e:34:c1:01:e2:83:1d:86:
                    76:8e:ee:87:03:ab:05:68:45:7b:6d:0c:95:00:84:
                    89:89:bb:65:11:ce:77:db:44:24:80:66:82:89:0f:
                    7a:40:b0:00:17:9b:72:ef:94:6d:56:96:52:24:fd:
                    e6:41:db:53:57:f9:5d:99:d4:5c:6e:a5:87:ed:bf:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F2:FC:EC:F9:93:12:B0:7D:2E:B6:16:0E:BB:CB:A4:39:30:12:BE
            X509v3 Authority Key Identifier:
                keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:88:a5:ba:d0:a1:d9:37:ec:c9:ad:a0:d7:9f:7d:3b:c3:21:
         be:6b:38:53:bb:08:3e:1e:57:99:56:6c:62:72:e9:d2:9a:5c:
         9f:ac:e8:4f:8f:38:fc:a3:af:38:61:86:43:fb:d8:88:53:4e:
         cc:c8:13:47:59:78:1f:af:41:c2:1c:f7:07:d4:4b:ab:c1:b8:
         61:c8:ad:88:4b:db:60:69:76:94:04:73:3f:61:5d:14:07:02:
         50:d7:29:2f:6c:f8:56:cf:fb:8b:d8:6f:af:61:25:d6:71:8d:
         d6:db:3b:29:87:71:bd:d0:77:43:e2:23:37:5e:2a:5d:9b:3e:
         d4:4e:af:ef:61:4d:a4:a5:c2:a1:20:9d:76:e4:e0:1d:ec:c6:
         51:a8:cd:ff:25:bf:b6:4a:63:98:21:5a:4a:20:7b:01:68:f7:
         41:15:ce:f2:9f:a6:21:e0:bf:b3:7b:03:f3:bc:11:bc:11:7d:
         59:e0:a5:78:5b:83:ce:91:ba:20:c5:fe:29:6b:0a:11:01:b4:
         8a:54:d8:57:9c:70:9a:b7:40:06:36:aa:65:84:87:d6:4e:d3:
         3f:04:50:d9:11:6e:31:19:9b:c0:a1:ed:88:4d:19:66:c3:48:
         ab:28:68:a3:01:bb:5a:76:0c:d8:1d:76:c4:dd:c8:ce:78:ba:
         be:99:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----