Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File:                     5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier:          xZ9ZPjG0pq8gfVrB08ePUHvGmRsetVTr/kiNvS8RGJI=
Subject key identifier:   0B:52:35:BE:F9:7E:5D:16:63:92:44:17:58:24:E9:87:E1:A8:07:E7
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer:       /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial:       01962F7456A958D508EEFFF20CC25F0D50F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: zVTStrqyz6Xzg2GxLIkjUZzeucNS6ufXZMprSKAbV6U=)
                          2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:a9:58:d5:08:ee:ff:f2:0c:c2:5f:0d:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=0b5235bef97e5d16639244175824e987e1a807e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:0e:2b:58:8d:3b:9a:95:07:d3:60:64:ad:
                    0f:45:39:50:ec:9f:5e:5a:12:8e:7c:60:2d:fc:f2:
                    a2:53:ee:53:14:67:f9:06:99:af:8c:1f:ea:34:60:
                    f8:2d:bc:9a:21:6b:4e:53:7a:50:e4:ba:18:2d:ff:
                    14:65:29:0c:0b:76:97:6b:62:76:9f:a6:5c:4e:13:
                    78:7d:cb:d7:84:4d:2d:5c:cf:56:33:d7:c9:11:05:
                    ae:29:cd:c8:e0:d8:cd:9a:74:55:dd:d3:eb:2d:a4:
                    f2:1f:a1:1e:7a:27:c6:ce:e2:b7:fc:07:a5:c0:5f:
                    23:17:da:d9:da:c1:da:5a:66:42:e8:af:73:cd:b8:
                    01:34:44:a5:61:5b:d6:03:42:b8:86:0c:01:c9:c1:
                    e0:75:87:1d:41:f6:46:35:d9:c0:94:d2:c4:ee:d1:
                    bb:12:ca:f6:f6:52:6d:01:9b:45:c3:7c:56:9a:53:
                    49:3a:42:8c:47:fe:cf:4a:4c:b3:03:ef:2e:cf:b6:
                    99:f5:41:9a:ca:58:e2:c8:0c:1c:83:04:18:b0:86:
                    66:39:70:1f:66:a2:ec:f0:63:c7:dc:e2:fd:24:90:
                    92:a0:d6:0e:e3:63:57:ad:ad:4b:5d:4b:fe:a6:ae:
                    c6:23:21:57:ad:0b:6b:ad:23:ae:ed:6d:9c:23:52:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:52:35:BE:F9:7E:5D:16:63:92:44:17:58:24:E9:87:E1:A8:07:E7
            X509v3 Authority Key Identifier:
                keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:23:14:2a:36:01:2d:34:bc:f6:8a:ba:d7:63:81:eb:48:e2:
         6c:34:07:8b:d6:fd:9a:cb:32:39:d0:0b:db:71:14:ee:15:fe:
         7e:e7:bb:fe:15:48:5b:9a:42:69:cd:0c:44:88:ab:6e:46:5d:
         a0:8c:40:6a:0c:c0:c9:d9:c7:52:4e:7d:1f:4c:9c:90:42:31:
         5f:ac:4d:04:b9:03:45:f6:37:50:cb:52:4b:0f:c0:18:c0:43:
         05:2e:a9:d7:91:48:11:a1:62:09:fd:93:c4:35:cc:c6:cb:c7:
         2f:98:cb:32:01:07:e2:48:c0:be:6f:b2:50:65:a8:fd:00:4a:
         71:ef:ff:5d:fa:5f:c4:e7:2c:95:84:c1:22:5d:7d:43:9a:7f:
         7b:fe:d3:ae:87:59:5b:44:7e:75:8d:ce:4a:6d:0e:34:25:fb:
         6e:6a:2f:10:ae:c2:06:db:15:ab:0b:63:59:15:a7:ae:70:e1:
         af:b5:f0:66:e5:06:10:78:44:98:41:14:62:a7:49:fd:1e:b7:
         3c:aa:1c:26:00:1f:95:8b:b5:59:90:a2:02:27:1b:74:12:10:
         a3:dc:0e:7d:a5:83:67:f5:22:59:fb:67:23:a0:b1:9d:ea:1d:
         9f:4a:12:77:0e:63:95:63:3d:cf:f9:aa:02:c1:da:82:db:99:
         21:d6:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----