Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File:                     mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier:          OrgcGZLJKaaa2jlpA8IUjzFY9Se8tL1xRAnv1uPgJ74=
Subject key identifier:   8C:45:2A:E2:03:A1:F2:C0:A3:58:7B:45:D6:29:21:B3:3F:DA:8D:66
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer:       /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial:       01962F064011EF66CC70CBC99286D2F75CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
                          2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
                          3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: rBknnAN4O3TgyFIN8LhrCoG0qOmTe5KJYnJEwSLzazs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:11:ef:66:cc:70:cb:c9:92:86:d2:f7:5c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=8c452ae203a1f2c0a3587b45d62921b33fda8d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:e2:1e:4e:47:2f:81:80:8b:a8:55:a3:34:
                    ed:05:bb:bf:c1:6d:90:d1:3b:b2:de:d0:16:e2:63:
                    93:be:a2:b7:04:94:a7:1b:bf:62:38:2c:a5:30:ca:
                    41:62:f7:52:ec:aa:ce:90:5c:2d:e2:c0:f8:cb:90:
                    30:29:3a:5c:bd:ca:43:84:8b:23:91:57:4f:96:d3:
                    42:50:1a:fb:57:fb:d0:ec:46:b1:71:47:dd:12:77:
                    59:84:44:14:a5:99:8d:10:35:b2:65:c9:58:15:f3:
                    0b:3e:d3:58:85:85:8d:ba:a8:86:29:96:9a:1a:f4:
                    da:59:2c:39:fa:98:3a:b1:f5:9c:ae:41:c4:c7:5f:
                    2c:c6:3f:bd:a9:2c:3c:55:3d:9a:9a:ff:48:82:5d:
                    6e:d3:00:23:23:5a:3e:71:a7:c1:83:64:23:ff:66:
                    00:14:cf:d3:57:07:f8:a3:89:1d:1a:06:c9:29:93:
                    7e:9b:2f:d2:6c:dd:fb:52:76:04:1f:16:1c:e1:37:
                    77:1f:2a:2b:aa:af:2b:d6:27:f7:ce:1d:ad:a7:f7:
                    8e:c3:68:74:df:bc:80:cb:59:5c:07:13:bd:09:88:
                    c2:3d:f6:39:c5:ac:3b:96:c0:fd:99:e1:50:db:d5:
                    83:5d:6d:ee:00:df:60:9b:7d:0b:d6:8f:b3:30:a1:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:45:2A:E2:03:A1:F2:C0:A3:58:7B:45:D6:29:21:B3:3F:DA:8D:66
            X509v3 Authority Key Identifier:
                keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ee:0b:3d:5f:65:95:95:b3:84:b3:a8:76:44:6c:2c:2a:89:
         30:26:8a:f0:f1:5b:21:a8:07:8c:74:08:a3:26:ce:68:39:5b:
         ff:1e:c2:c4:1a:17:ec:0b:3d:5b:b7:59:1b:fb:57:67:0e:b4:
         3f:6d:75:90:cb:16:56:20:9f:07:9f:94:48:e7:48:48:bc:ff:
         05:9b:5f:19:1f:c4:95:c9:7d:c1:c4:d0:a3:b5:c1:23:d9:c1:
         d8:95:17:b0:c5:ff:50:31:7b:cf:a4:34:51:e5:85:55:8c:67:
         95:ee:ed:b8:fc:2b:88:3d:6c:49:07:f5:77:09:97:b1:b2:d9:
         77:63:4a:34:bd:d2:ca:2f:f4:fa:c3:4b:6f:02:4b:48:ec:ae:
         13:f5:64:bd:7f:96:73:2a:dc:1d:c6:cc:04:65:41:40:ca:78:
         8d:a4:08:47:be:1c:e1:3c:8a:fb:96:10:7b:b3:a1:5f:d8:0f:
         3e:82:35:18:f9:27:ac:27:88:b4:c4:44:9b:6b:b3:f9:1e:2b:
         3e:70:dc:dc:e3:e2:d4:c7:d5:36:9a:9f:33:21:8e:9a:d9:f3:
         57:ec:4e:80:11:a0:3c:44:71:e9:1e:89:33:ee:3b:05:77:42:
         bb:10:c9:28:7d:24:61:eb:48:36:6b:83:94:39:90:98:ff:71:
         58:08:e6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----