Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          cySRWwG+Aaxu8ojvDylI64Ca6t9VVkuXzv/D9euZPGY=
Subject key identifier:   00:85:8E:C0:77:8E:29:05:51:92:82:DD:71:D1:1D:A4:34:93:36:E4
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       01962E61A9EEE635B5208DE6AC5294CB3C63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: CKD_EzJsFpUNnoX4pjrt6UNhRQI.roa (hash: Er1sMrbr93QbR3Zv9Y+teqxvcF75+o/fSwKjskRLW5Q=)
                          2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
                          3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: fOc3nhpz4Aot1HAsUU39PJQ7fX1TiR/Lqwrk0K/IpwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:ee:e6:35:b5:20:8d:e6:ac:52:94:cb:3c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=00858ec0778e2905519282dd71d11da4349336e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:9c:bf:ed:20:c8:16:83:39:6f:9a:6d:02:
                    1b:f4:09:0c:fe:12:28:61:43:9a:f0:9f:b9:23:67:
                    51:5d:59:85:5e:e2:e5:a2:09:6c:10:38:b8:1f:5b:
                    cc:d4:d0:b8:ba:d1:f3:0b:f6:16:c6:e5:68:10:2d:
                    b8:ff:8c:66:87:e0:96:84:5f:ba:69:98:1f:a6:b2:
                    8e:ad:ad:41:4f:7a:11:af:f2:60:78:d0:26:88:6a:
                    41:f7:2b:26:a7:61:a2:47:b9:a2:b8:1e:86:d1:13:
                    ae:73:7e:be:03:d2:58:44:fa:24:57:db:f6:c2:6b:
                    0d:76:d6:fa:0a:6c:c8:94:1a:f8:e5:3d:e1:ee:4c:
                    ee:e4:f4:ec:db:d3:aa:d1:b6:04:15:57:35:0f:87:
                    f4:a4:d0:a1:49:92:44:77:c4:b6:60:9d:4c:8b:e1:
                    ad:dd:27:f8:5c:c9:5a:4c:58:0d:64:66:44:0d:ad:
                    3a:66:b6:b9:53:61:c1:86:29:bd:a1:04:80:9b:a1:
                    00:64:29:68:35:09:f0:29:f0:4d:4f:d3:7f:29:61:
                    8f:77:b9:b9:9d:d8:6a:ac:d5:c7:7e:11:bc:4c:6b:
                    23:da:90:e7:9c:12:0c:99:58:f5:7e:24:31:0e:5a:
                    51:68:af:df:bb:4b:35:e1:fb:09:4f:5f:1a:8d:cd:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:85:8E:C0:77:8E:29:05:51:92:82:DD:71:D1:1D:A4:34:93:36:E4
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:40:80:86:63:8d:8e:07:b6:2d:1d:29:e2:6f:1b:1a:e7:fb:
         7a:39:7e:2a:6e:84:09:b8:0f:ea:b4:b0:5c:71:ca:71:0a:8f:
         a7:ec:bd:a3:af:dc:c2:d8:55:11:2e:ee:23:7b:fb:e3:e2:2a:
         ba:85:e1:b7:e0:e6:2d:aa:c8:f1:7f:b9:11:67:9e:c4:f1:5d:
         4e:b2:bf:c9:c5:d7:c8:a2:91:e9:c7:c0:be:34:98:01:95:b7:
         bf:63:0d:b7:de:da:09:60:28:6e:32:80:47:1b:34:10:a8:1a:
         40:ba:42:be:94:37:82:d5:3b:a4:62:3d:a5:68:4d:84:b0:06:
         74:c6:d2:8c:7f:a1:b0:58:4c:ae:36:27:a9:57:4e:dd:79:79:
         d5:41:45:7f:c4:75:8b:ce:11:e1:9c:a8:96:8d:94:b0:db:8b:
         5e:09:e1:30:03:ad:4a:f0:2d:43:84:ee:8a:08:c0:87:b1:09:
         12:6e:b8:34:3b:16:b8:3a:53:81:08:bc:9a:a5:ef:73:e5:a4:
         06:8b:9c:19:40:9b:aa:32:c7:71:06:43:84:21:86:72:c3:2b:
         d1:89:71:2c:de:27:4b:82:23:ed:a8:af:48:70:48:49:cf:d4:
         65:75:da:5a:a5:75:d0:d9:7f:1a:ef:b7:e3:3f:38:41:5b:33:
         e8:ad:25:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----