Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
File:                     Pzb_0WIVIeks8ueBQZDTolPgBjc.mft (raw, json)
Hash identifier:          lJY+599Zt6n4vwb/Ao8aTQRLKXvco43VHXs7Gg/CNtI=
Subject key identifier:   46:92:02:48:3A:7E:62:17:67:5F:28:0D:8A:38:CF:0F:61:BF:4A:98
Authority key identifier: 3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37
Certificate issuer:       /CN=3f36ffd1621521e92cf2e7814190d3a253e00637
Certificate serial:       019482BA477B0DECD0C0C9FE5C6722994855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
Manifest number:          0333
Signing time:             Mon 20 Jan 2025 08:00:33 +0000
Manifest this update:     Mon 20 Jan 2025 08:00:33 +0000
Manifest next update:     Tue 21 Jan 2025 08:00:33 +0000
Files and hashes:         1: Pzb_0WIVIeks8ueBQZDTolPgBjc.crl (hash: gTsL6K+ieb29kq6HhSpRYiF0rXK6NX6KRxAa6aYs/Fg=)
                          2: lCCuB0jDyuvAYXLOJTOn_cNgWc8.roa (hash: HjbYsGUKFf1MWsIB+SCbfNSuwlwT3QlGjytiQ5MDhE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:82:ba:47:7b:0d:ec:d0:c0:c9:fe:5c:67:22:99:48:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f36ffd1621521e92cf2e7814190d3a253e00637
        Validity
            Not Before: Jan 20 08:00:33 2025 GMT
            Not After : Jan 21 08:00:33 2025 GMT
        Subject: CN=469202483a7e6217675f280d8a38cf0f61bf4a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:56:64:d6:df:73:07:d0:88:6e:1e:1f:c4:2c:
                    fd:bb:79:42:46:fc:17:33:56:4d:70:e9:52:2d:6d:
                    8e:eb:51:15:b9:21:45:40:1c:c0:d1:1f:89:57:74:
                    b3:8c:42:9a:af:53:74:dd:27:ca:1b:09:f3:1d:f8:
                    1b:ba:26:50:ed:de:d7:ba:a4:c8:36:23:5c:6c:6d:
                    cc:17:3a:fc:77:c8:e9:0f:0e:a9:44:a4:59:28:05:
                    f6:91:3b:c3:f4:fe:a2:81:5c:f3:75:a5:46:5c:62:
                    ba:ad:19:0b:5f:f7:95:02:4a:ce:c7:d7:ef:b4:9d:
                    e8:9e:cf:bd:75:fd:66:f4:ac:30:bb:40:de:5e:91:
                    00:30:fa:84:b4:5b:bb:76:88:42:4e:43:18:35:a9:
                    64:91:49:da:34:57:bc:46:a1:4b:52:4a:a1:6b:be:
                    b6:b9:e5:b1:78:a0:6d:b9:84:f6:c2:1d:f3:b0:56:
                    9e:09:4a:62:12:c7:81:25:65:0d:07:cf:23:20:83:
                    31:82:3e:39:52:ec:df:99:3c:68:bf:2f:37:b1:9b:
                    88:d8:aa:5d:15:c7:eb:4d:a0:95:f3:7c:bd:a0:e7:
                    8d:7a:c6:00:d3:06:70:e5:cc:ac:9b:b8:07:f0:80:
                    bf:e8:c2:78:c5:49:52:ff:9f:0c:d5:7e:b3:57:40:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:92:02:48:3A:7E:62:17:67:5F:28:0D:8A:38:CF:0F:61:BF:4A:98
            X509v3 Authority Key Identifier:
                keyid:3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:35:2a:2d:c1:50:99:5c:bb:bc:21:3b:94:ce:87:2c:9a:
         75:4c:8f:36:74:2e:90:c0:cc:70:0d:5f:db:d6:be:1c:c0:e4:
         f5:fe:bc:a9:d9:ed:6a:8e:a9:f8:81:d2:c9:4b:89:30:0b:b5:
         07:a1:6e:48:29:56:09:1a:94:57:9f:4b:c6:54:30:bf:0c:7c:
         e0:63:b2:b2:66:94:05:1d:4d:26:72:a9:44:3c:65:0c:9d:64:
         1d:ef:9f:3c:2e:68:1b:d2:d2:92:23:15:c0:b7:40:b6:83:c6:
         db:78:43:a3:55:4c:ba:c3:49:84:8e:73:dc:1d:7d:ba:8a:db:
         3b:7b:08:0b:9c:22:3a:07:cb:43:d0:ce:da:81:c1:9c:f5:f1:
         25:eb:53:77:a0:5a:54:37:85:a8:6b:83:29:6f:77:c5:78:32:
         d8:06:c8:42:b1:be:16:b6:51:db:d5:9a:42:ba:4a:72:e0:38:
         76:25:9d:6b:c9:08:52:20:a6:e6:c5:85:be:1f:15:f4:f4:23:
         21:94:eb:73:e8:83:4d:1f:de:4a:bf:f1:cf:a2:67:3c:18:a1:
         03:34:53:02:94:17:0f:e3:e8:d9:54:18:a1:55:bb:85:a1:b4:
         b3:54:02:68:6c:93:62:f9:a7:5b:e9:79:a6:30:a0:c6:8f:df:
         e7:fd:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----