Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File:                     ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier:          g0Tfh0kkbhFRVmOCkr62MelVSA4/RtDyXEG4i9pwQMQ=
Subject key identifier:   31:45:C3:16:BD:5E:B6:30:B5:97:46:10:E0:A0:D3:61:B5:64:F7:C9
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer:       /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial:       01962F746619BEFC77273063807AFCC245E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
                          2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
                          3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
                          4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
                          5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: u/fxg1lFLM2cNj5lTaPgQ0ly3CntF/IXobvzJqX3T68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:66:19:be:fc:77:27:30:63:80:7a:fc:c2:45:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=3145c316bd5eb630b5974610e0a0d361b564f7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:ab:f5:eb:2f:6a:89:74:d0:4f:0a:05:06:
                    fe:6e:ed:7f:53:f9:53:fd:28:5b:46:46:ab:09:6f:
                    da:e2:39:03:4b:72:bb:08:21:49:de:d4:70:c7:9a:
                    bc:ca:6e:fd:ae:19:2f:68:cb:d3:4a:12:58:00:63:
                    df:41:ce:47:72:17:1b:4c:cd:b1:ba:54:3b:b7:92:
                    0a:03:15:7a:e1:04:a3:36:59:15:c2:18:0d:bc:32:
                    50:d6:87:ea:a0:6f:37:30:2c:02:94:cb:a8:2a:99:
                    01:81:54:45:4c:6e:3b:03:4f:43:47:b0:1d:b3:3e:
                    a7:88:eb:50:24:13:2b:44:98:a5:59:14:ff:c7:c1:
                    86:e8:8a:af:dc:d1:e2:31:a8:8c:ae:d2:f1:e4:de:
                    eb:c9:bf:2b:ff:d2:bb:87:3f:83:67:44:ec:de:89:
                    c6:21:75:90:b9:c8:84:be:2d:07:8e:52:cc:d8:c8:
                    0e:15:eb:0d:fd:0d:0c:8a:d0:75:f7:3b:40:ed:72:
                    17:f2:73:b0:0a:91:ca:2a:e3:c7:6d:c8:c1:05:ea:
                    96:86:79:80:fa:b0:ad:60:38:06:c6:23:6b:c8:fd:
                    c8:cd:c1:bb:10:9a:77:5f:68:28:69:f9:60:cd:25:
                    37:b1:6c:fa:ef:5a:6e:a0:37:46:ed:f3:c2:fa:ee:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:C3:16:BD:5E:B6:30:B5:97:46:10:E0:A0:D3:61:B5:64:F7:C9
            X509v3 Authority Key Identifier:
                keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:b5:27:64:93:6e:16:50:17:2b:c2:cb:c4:63:d0:6f:7f:
         dc:21:51:9c:62:05:84:14:25:53:2a:bc:e9:8f:20:2e:f1:6c:
         d3:1d:23:39:73:d9:de:da:eb:4d:9d:95:c6:2d:ae:2a:2e:19:
         01:fb:5d:b9:5f:96:ed:af:6a:02:e5:cf:b1:3d:78:f5:32:55:
         2c:d9:44:6b:bb:cd:09:b4:28:48:43:85:34:ac:f4:ea:d2:c3:
         e5:86:31:f9:bc:51:ed:24:b6:8c:59:30:24:51:71:d8:fa:d4:
         7b:0b:52:37:54:79:db:a1:a0:38:d9:b3:5d:16:be:6f:9d:8a:
         07:cf:a6:0f:ad:c1:42:b4:b4:f6:2e:27:82:6a:c4:44:af:74:
         eb:cf:e1:1e:a1:8d:14:e5:cb:18:69:82:15:86:0b:15:41:6b:
         85:99:78:7d:cb:f1:fc:25:c2:69:3f:98:1c:27:74:be:9b:fd:
         99:67:d4:b0:d2:0a:2e:f4:f5:a2:58:c5:bb:47:e8:2e:67:65:
         7c:16:1a:69:85:67:04:7b:0b:2f:04:8c:5a:53:2c:44:38:79:
         76:76:1e:54:eb:0e:a7:4b:6b:1a:c7:09:2f:46:35:82:00:d8:
         4d:37:e6:b7:6f:74:4b:39:5a:01:d1:e0:c9:5f:5a:2b:81:56:
         59:52:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----