Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File:                     ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier:          T2XKTQ8+2u7g9U9U5OAY3tbB6yqJticXfRVKUZENaHw=
Subject key identifier:   F5:81:1C:E3:0B:8C:3C:38:EA:D9:BE:9C:D8:4D:0B:4D:31:96:70:0B
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer:       /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial:       01962FAB9676EE6E0357C42D51D58C26F5AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number:          01A3
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=)
                          2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: CXEuIGzYn6tAn/4fGVCczGdxrPWIt769OcTFe/MWZ9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:96:76:ee:6e:03:57:c4:2d:51:d5:8c:26:f5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=f5811ce30b8c3c38ead9be9cd84d0b4d3196700b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:7b:3b:29:5f:12:9a:bb:39:b7:eb:41:60:
                    e2:14:86:b4:b9:67:f5:b5:dc:2b:45:21:25:d7:48:
                    37:31:f8:d2:2d:7a:12:84:d1:67:6e:43:97:ac:38:
                    2d:45:b3:8f:61:e4:ca:31:05:52:65:f3:04:40:61:
                    72:bb:d7:3e:2d:05:87:48:16:41:f1:7a:55:56:db:
                    0c:c1:dd:b6:6c:34:be:71:f9:28:3c:6c:d8:74:1d:
                    b8:95:51:15:48:60:04:b4:55:01:b2:70:06:d5:97:
                    29:9e:23:24:a3:4e:8f:26:68:0c:8e:57:c2:8c:81:
                    85:54:52:a9:17:fd:98:dd:74:78:9b:5d:b1:a9:77:
                    dd:a5:43:70:7d:b5:95:72:11:a4:33:00:fc:af:dc:
                    58:83:40:c1:df:91:40:5f:b4:e0:09:b8:b1:d3:e5:
                    ba:3e:78:a8:c3:a3:8e:61:55:04:e9:1c:3c:4c:8e:
                    49:37:0c:13:2e:e4:13:24:db:f8:29:8b:b1:f2:65:
                    b3:d0:63:bd:d3:9b:c5:a3:c3:38:d6:7e:f1:91:98:
                    a9:af:ef:1b:49:07:4f:1d:66:d5:ee:a8:98:af:0f:
                    b8:a8:58:03:fb:24:a2:9c:86:55:65:d2:77:f4:1c:
                    11:83:61:de:95:a8:fa:1d:cd:6b:93:ba:48:0c:c2:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:81:1C:E3:0B:8C:3C:38:EA:D9:BE:9C:D8:4D:0B:4D:31:96:70:0B
            X509v3 Authority Key Identifier:
                keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:95:9b:3b:3a:65:77:bd:63:6a:25:49:db:66:c2:4d:ce:
         d6:06:34:9e:07:40:7c:01:05:dc:e8:c3:92:19:11:89:ff:e7:
         7e:df:59:f2:82:94:5c:ad:73:a4:6f:44:21:b2:f3:e9:0b:e7:
         64:3e:a0:db:6d:d6:d1:a2:eb:7f:05:37:f5:53:9a:08:c9:6a:
         64:35:dc:03:d3:5e:2c:a4:7e:b9:8e:7b:43:91:b4:b3:09:c1:
         99:57:ce:9c:16:8c:aa:ae:86:16:e0:50:f2:77:b1:24:98:fa:
         d1:e8:2a:4f:26:7a:5d:29:1c:6f:57:eb:a6:22:c7:2c:89:63:
         88:71:8c:5d:df:07:d3:0b:3f:9e:46:6c:84:fc:86:15:8f:a9:
         7d:1b:32:43:d4:4a:4c:84:ab:55:d8:f7:39:b4:34:d2:8f:16:
         0f:e0:78:6d:88:ca:76:36:b7:8f:23:fd:66:38:82:15:1d:c8:
         97:8e:df:16:9e:b4:29:7f:f4:40:ec:6f:bb:cb:74:de:e9:92:
         27:5d:bc:1e:a4:f0:e8:0d:ac:1c:49:0d:9b:5b:44:04:06:72:
         89:38:92:a1:a7:2c:5a:c8:df:ca:54:4f:c1:70:15:e0:35:16:
         4b:27:e5:af:f9:9f:c9:0a:3c:62:78:c6:21:2e:a0:0c:05:55:
         b2:fb:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----