Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          8KrW2yPUAmJQGFmkRfGJC8S1IfsW6yCHEDfMYVpVAzQ=
Subject key identifier:   D4:FA:44:D5:C9:4C:EB:95:73:48:4B:48:78:CE:0D:F5:A6:6E:22:9C
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       01962E9923F4278129904F947883C8312BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
                          2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
                          3: E10xkOueYhKQ1eR7LPOWSuIcvzo.roa (hash: KIbGq9l2ACs69klxSYFwy1pM7+lK9YBNLqZhV5z4mZM=)
                          4: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: 9kZOpVZfZHoJhjglksvQTFFv05R5Cz1OAOONSd6vE9A=)
                          5: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:23:f4:27:81:29:90:4f:94:78:83:c8:31:2b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=d4fa44d5c94ceb9573484b4878ce0df5a66e229c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:3c:fe:3d:fd:dc:6c:e7:78:ee:a9:db:db:
                    ec:5d:2a:a4:0c:26:8a:09:92:48:e6:b5:5c:e2:91:
                    9e:af:5e:85:ac:fe:48:0a:f6:be:f0:6b:9f:ab:bb:
                    10:21:17:bf:23:98:57:2a:02:0f:ee:e6:0d:ab:30:
                    9d:81:34:54:15:b0:90:76:a4:09:56:74:5b:6c:41:
                    f8:ee:0d:a9:67:2b:6d:4a:a6:91:3d:71:2f:0d:0d:
                    78:fd:98:84:05:fb:e1:86:c2:8f:21:a9:4c:0b:39:
                    e9:8e:ac:0b:39:75:7e:4f:5a:ec:dd:b0:83:ec:52:
                    a1:8e:55:c7:8e:78:5c:b5:b5:19:b6:44:9d:76:b1:
                    bb:37:58:48:e6:af:3f:25:fa:82:1e:e2:21:f9:b9:
                    3b:64:72:7e:dc:2c:91:9a:d6:d4:62:83:86:dd:11:
                    d2:67:3c:e9:19:7d:59:5b:09:02:1e:82:f2:41:a4:
                    d8:a5:e4:f5:b9:5b:ab:55:f1:c2:b7:48:f5:91:53:
                    ca:9b:d4:be:d0:0a:88:86:7a:50:a0:84:cc:b4:37:
                    51:98:27:b3:60:03:30:98:e6:8a:df:76:ab:2b:08:
                    92:b6:ae:11:7c:e8:08:09:f6:3b:32:90:8e:24:75:
                    5e:92:22:05:0f:23:6d:aa:61:58:9c:0d:93:ff:fc:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:44:D5:C9:4C:EB:95:73:48:4B:48:78:CE:0D:F5:A6:6E:22:9C
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:54:a6:19:46:c2:6d:b1:7c:77:3d:72:a7:6d:5b:d1:62:
         e5:1e:ec:28:3e:f7:b8:e3:50:a1:28:af:10:5f:f3:9f:21:55:
         6b:a0:05:78:29:0c:2c:0c:c9:51:30:2e:40:03:a5:04:ce:0c:
         b2:5c:b1:53:0d:56:da:ea:16:cc:d9:e2:66:4f:b4:02:0e:6a:
         0c:c7:a2:f1:27:07:77:a0:41:1f:36:96:51:bf:46:09:5f:f5:
         49:aa:30:11:76:bc:32:d3:14:06:88:80:e2:0a:4c:23:92:37:
         23:24:d8:a7:94:86:bc:bf:53:e4:2b:bd:f7:46:31:cc:9f:c7:
         e3:66:84:8d:d9:ee:c7:ab:44:f3:d0:6d:84:af:2a:1d:59:14:
         88:3b:ff:ec:da:92:07:7d:2f:d3:ef:39:99:c3:1d:9e:22:82:
         04:1a:dc:fc:27:6d:12:27:2f:78:83:e4:33:88:e3:69:8b:92:
         e7:1b:e5:45:67:0f:6a:f4:7c:9e:38:68:ca:20:d6:9f:40:e8:
         e1:cb:fd:8c:5f:bd:52:84:ae:0b:99:2b:05:08:3a:03:2c:3b:
         62:b7:fb:cd:bc:26:6d:1d:02:14:38:fe:05:b3:01:4a:c1:09:
         82:27:5c:51:35:e4:78:05:e7:45:10:42:be:37:96:03:f2:4b:
         25:e1:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----