Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File:                     ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier:          Gd0+FP2E9T3DAhguA1goSZTejCC6a2vEll4MnBl4p+s=
Subject key identifier:   06:7D:57:5E:60:C8:BF:01:E2:87:95:10:90:05:DF:F8:89:FB:B8:8B
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer:       /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial:       01962E9991DBDCEB110DA49501DDD74C40CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number:          11C7
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: u+UvOVxeDavn9pFOSXL+wZMBRjQAhiOZTNoeHppTkWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:91:db:dc:eb:11:0d:a4:95:01:dd:d7:4c:40:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=067d575e60c8bf01e28795109005dff889fbb88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:c2:aa:f2:f8:05:94:b6:f8:2e:64:86:f8:
                    e4:bb:21:de:66:85:d1:78:fe:77:4a:3e:92:6a:43:
                    75:c9:13:db:9f:ec:3e:2e:dc:40:69:fe:c8:12:c3:
                    3d:11:51:90:03:8a:b1:0f:ac:9c:53:6f:bb:8a:14:
                    9e:0c:a6:e1:f6:97:68:a6:cc:3e:72:be:f2:0b:31:
                    55:fb:63:21:f9:37:de:21:85:e5:f2:54:08:a5:f5:
                    d5:fc:3e:54:19:26:5f:27:1f:c9:89:c6:0b:54:14:
                    8c:7b:70:e9:75:f1:39:14:bf:91:de:2b:d2:5d:90:
                    60:c0:d2:94:5d:3d:52:61:19:15:61:25:ad:62:89:
                    c6:a8:e3:10:eb:72:73:56:be:fc:b0:f3:6e:87:4e:
                    ff:64:6f:b9:94:f0:9b:6f:0a:07:3f:2e:87:35:ca:
                    f6:be:74:8b:b3:05:dc:f3:2b:8b:5b:03:c4:c2:87:
                    f6:10:35:d3:e6:c0:3b:8c:78:5a:05:44:a9:94:59:
                    c2:24:79:52:9e:46:99:d8:cf:2b:fa:31:fa:a8:ce:
                    70:c8:3b:fc:4a:49:06:91:47:ed:4f:0c:86:23:c4:
                    6e:c1:c9:7d:7c:70:af:90:a6:06:48:8e:42:b1:ee:
                    bc:54:51:68:cd:52:5d:68:4e:29:89:03:03:aa:0b:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7D:57:5E:60:C8:BF:01:E2:87:95:10:90:05:DF:F8:89:FB:B8:8B
            X509v3 Authority Key Identifier:
                keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e7:5f:8e:c2:98:64:b8:57:2a:c3:4d:ed:fc:53:ef:1a:75:
         71:db:ac:10:e2:76:21:26:a5:e1:4d:df:21:21:ed:7b:1a:91:
         94:58:85:49:53:36:14:7e:33:13:76:f7:47:5c:95:cf:1c:02:
         c3:20:65:0b:4a:29:a5:34:97:fd:b9:a5:15:8b:a7:8e:31:ea:
         51:1b:3f:11:8d:7f:a6:c3:fc:44:9e:f5:7f:62:53:65:33:cf:
         23:f1:56:e0:1c:7d:ed:28:ec:b1:3c:a1:28:fd:09:77:d9:73:
         5c:18:e8:1f:a8:da:a1:d1:98:85:41:1d:2c:8c:07:e8:2f:05:
         14:b3:d4:74:6b:39:51:03:30:3c:c6:d9:b1:0d:34:dc:d7:92:
         f8:18:d2:d1:45:ea:a3:51:26:a0:9f:e4:50:2e:02:a0:31:77:
         42:c1:a6:2a:bb:2c:82:20:4f:26:e3:ab:bf:c6:71:44:73:e7:
         5b:27:e0:cb:90:2a:2a:ab:d0:03:2d:ed:c5:ec:65:95:51:4d:
         b1:56:6e:64:26:ee:62:3f:cb:a6:9a:1e:f9:7d:ac:8e:bb:bd:
         65:79:9b:2c:61:4e:27:07:fa:bc:42:96:81:e7:db:6a:ef:aa:
         44:95:6d:c2:7e:d5:cf:d1:61:d8:fd:38:51:20:26:94:b4:40:
         47:74:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----