Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File:                     zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier:          zjrPaC+F2ihWz3gTDRRpXE4uWt1sYaLFQsifNriVayg=
Subject key identifier:   83:BA:33:E4:BE:EF:76:47:37:3B:7D:8A:4F:AC:7F:E4:2E:C6:2D:CB
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer:       /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial:       01962F06849D59DD3812BB79131146654BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
                          2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: MsQ3A0eCi5fYIpT7FY/t0JXGDOrKrXTcmwRrb+rVG1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:84:9d:59:dd:38:12:bb:79:13:11:46:65:4b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=83ba33e4beef7647373b7d8a4fac7fe42ec62dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:60:a4:ed:ac:86:8d:48:54:45:60:22:65:
                    66:d6:4e:10:6c:61:b2:74:45:31:cf:d8:10:b9:62:
                    2c:27:d0:54:01:c2:98:93:00:88:7b:49:9d:ce:08:
                    cf:53:d7:7c:5d:14:7c:d8:a2:ca:ff:dc:8a:67:e4:
                    e8:0d:d8:1f:83:ce:7c:e2:1b:b7:dc:61:da:b9:a5:
                    b1:91:f5:c0:4f:e2:5a:d0:00:62:60:14:f7:d1:b1:
                    81:cc:fb:9f:98:53:b5:fa:2b:27:5a:bb:f6:b6:fd:
                    2a:f7:82:1f:c1:e0:55:2b:04:e0:7b:a9:56:a2:db:
                    eb:22:c0:d5:d8:e6:06:cd:84:81:93:c6:b5:52:ea:
                    97:a2:89:e0:c8:e2:34:2a:50:fd:c0:10:98:0f:93:
                    96:40:8c:97:42:62:75:fe:01:9f:07:7f:c0:9e:a6:
                    56:47:e0:fb:75:51:43:ef:d8:38:74:de:66:4e:37:
                    80:1f:24:5e:26:91:68:a9:c5:84:c6:ab:7e:9d:e6:
                    e1:14:fd:2f:1f:dc:05:c5:51:35:2e:0d:91:78:56:
                    04:0a:ff:c5:da:0e:4f:1a:b7:07:4f:93:68:9a:97:
                    fd:f5:94:dd:04:d2:1e:7b:dc:f6:ba:57:b2:1c:12:
                    1f:a5:13:e0:20:93:50:3a:63:10:d5:c8:ff:6f:0b:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:33:E4:BE:EF:76:47:37:3B:7D:8A:4F:AC:7F:E4:2E:C6:2D:CB
            X509v3 Authority Key Identifier:
                keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:29:e1:2d:95:13:b3:4b:98:a5:76:b1:e2:d1:51:ec:34:
         e3:b2:8b:fe:cd:9d:2d:d4:88:b7:f1:c9:a6:3d:92:7a:81:d5:
         76:3c:8d:2c:6c:50:93:64:a0:68:48:56:15:de:27:b2:9e:6f:
         03:9a:70:a3:9d:a6:77:cc:e4:69:1e:eb:16:e7:c7:a9:fb:6d:
         32:1f:e0:8d:f4:32:d0:d8:44:27:53:12:5c:69:22:01:3b:b6:
         c7:86:ed:4a:03:64:ad:34:4c:e1:8d:b6:85:a5:49:8f:1c:cf:
         21:d5:f7:17:b0:7a:22:ea:ea:b0:fa:ca:bf:7c:f3:77:bd:11:
         e0:5c:f8:0c:24:c9:82:ce:10:f2:a9:b7:f0:c8:d0:ba:b2:88:
         0a:42:5a:8e:2a:40:37:c3:b6:78:a8:94:2f:ea:cc:e8:72:75:
         32:6f:c6:fe:b3:1a:c9:e4:96:65:23:4d:5d:28:e3:7e:52:15:
         c5:c3:5a:31:e8:c9:a4:14:0c:0b:9b:bf:71:f6:ef:a3:84:4b:
         ad:24:74:92:ee:6b:20:cd:02:e5:3e:c0:9d:ce:dc:34:0b:01:
         05:1c:70:7b:87:21:6c:f2:44:13:bf:90:eb:c6:72:4e:14:be:
         4b:b2:80:ac:c8:6f:91:07:30:85:40:62:10:0d:b5:b3:7e:31:
         16:80:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----