Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
File:                     z4duDnrrYE0WMdSaAl4XitJ0qBI.mft (raw, json)
Hash identifier:          qmiRtr2YrPeax8L3No1LxI6Xd/BQHcnzenci0cxXJr8=
Subject key identifier:   3D:13:37:25:FE:FA:F6:C7:EF:E5:91:71:2E:89:D9:AD:1E:07:5E:6C
Authority key identifier: CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12
Certificate issuer:       /CN=cf876e0e7aeb604d1631d49a025e178ad274a812
Certificate serial:       01962F74DD870EC1D7594C2B527998DB1AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: z4duDnrrYE0WMdSaAl4XitJ0qBI.crl (hash: 4fic2uXHjbQ5vqyQoirloSVttXYclELUTE6Adte7Tdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:87:0e:c1:d7:59:4c:2b:52:79:98:db:1a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf876e0e7aeb604d1631d49a025e178ad274a812
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=3d133725fefaf6c7efe591712e89d9ad1e075e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:ea:80:c6:28:91:62:9f:54:3d:07:e1:56:
                    5e:df:6b:80:d2:ec:32:d1:0c:99:64:59:b4:0e:34:
                    9e:b0:96:26:37:62:ef:a9:8d:f6:44:fc:bc:c1:a5:
                    d7:30:fe:c6:64:db:a1:2a:aa:33:63:ab:c2:a7:f9:
                    49:cd:dd:42:c0:73:05:30:9d:a4:8d:38:87:64:c1:
                    3c:69:95:77:f8:66:44:db:f2:5e:07:c4:91:70:14:
                    bd:2c:47:37:db:22:cb:9a:6f:de:1e:92:2c:90:5a:
                    73:05:9b:81:82:09:5e:d6:3d:18:c7:0f:61:b9:d1:
                    95:16:a3:02:22:ef:c5:73:de:49:43:2b:23:e7:2e:
                    c6:1f:5d:9c:4e:ce:43:35:fa:c4:ef:28:97:19:20:
                    22:1a:a9:76:33:a5:e4:0b:f0:b8:ee:01:46:06:68:
                    6b:06:4f:4f:4d:b3:cb:e0:c6:e6:b5:56:7b:85:c8:
                    1e:59:74:48:fc:43:b1:86:c9:b1:73:ce:40:71:17:
                    25:24:76:30:58:2c:2c:c5:ee:c7:47:dc:a0:2b:30:
                    c1:1f:6b:56:26:ac:e8:ac:a0:ca:84:a3:d0:19:a1:
                    3a:0b:5c:ea:47:15:cc:13:f3:19:af:f3:26:69:46:
                    9f:dc:eb:f8:10:2e:03:1b:d8:c6:45:6d:e3:b5:37:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:13:37:25:FE:FA:F6:C7:EF:E5:91:71:2E:89:D9:AD:1E:07:5E:6C
            X509v3 Authority Key Identifier:
                keyid:CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:bd:25:ec:1d:67:ed:8d:8c:d4:a2:18:37:9b:2b:dd:cc:
         0e:3c:0d:40:cd:83:fb:37:c1:21:aa:df:6e:72:aa:e3:7d:d6:
         1f:77:10:ae:ec:e1:1e:ca:73:f8:c3:7f:8a:ce:d0:e3:d9:a4:
         2b:00:cc:79:a0:c5:23:eb:ce:aa:70:db:d4:ef:61:25:e6:f6:
         bc:53:9e:d1:42:15:e0:34:8f:1f:a8:9f:c0:b4:16:36:b0:61:
         f2:f6:0e:ef:f6:00:28:04:1f:0c:83:e7:0c:85:a1:dc:44:eb:
         42:82:f4:d8:6e:dc:19:fb:e6:5c:4d:68:7f:6b:94:0c:c0:4d:
         2b:5d:dc:1e:8d:6c:47:8c:2a:28:a7:0f:ee:a7:8a:0c:39:2d:
         49:c0:fb:2c:0c:05:2e:e7:9c:75:d1:ce:ca:99:db:8a:54:a7:
         89:19:4a:49:dc:48:01:52:6f:3e:d8:6f:4c:fd:dc:5c:f9:bb:
         b3:b0:ec:df:1d:6f:61:71:18:b8:c2:84:00:39:16:0d:bf:7b:
         36:1b:80:06:95:53:ab:62:e2:59:41:4b:d8:d5:b5:b0:18:4b:
         a0:51:9f:1d:e3:6e:0b:de:02:b7:e8:83:e7:a4:a4:3b:24:2e:
         7e:3e:06:c1:0a:31:9e:16:38:a7:fe:c1:9f:75:1e:43:ed:75:
         39:e1:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----