Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          coPgRp1ZU1nK0DBqDWHFSQlVjMZ04k9KiquNO0IF9Jo=
Subject key identifier:   2E:8C:79:71:75:36:7A:98:4D:B4:85:91:70:D0:45:70:6D:58:B1:95
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       01962F74598D1311CAD94067741FE7B0C106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          0DC4
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=)
                          2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=)
                          3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: oYQdSf2Av3GUNV7FLa+7vA0qcCezhzRjtPrThvPgvbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:59:8d:13:11:ca:d9:40:67:74:1f:e7:b0:c1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=2e8c797175367a984db4859170d045706d58b195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:81:f0:02:da:ca:72:66:8b:7c:3f:ef:c2:
                    f9:d0:55:e5:63:43:0f:4e:29:75:66:b6:5d:77:dd:
                    a0:23:64:37:d6:ee:36:ee:1e:3b:51:bc:76:a1:6d:
                    4a:be:59:d8:e5:10:cb:3d:8f:16:38:03:c8:99:aa:
                    e6:72:8a:7e:a0:bd:5f:e9:f0:d6:43:67:ee:bc:b5:
                    99:ba:46:1c:b4:90:2d:a5:62:20:d7:c5:d9:e2:e4:
                    a3:ee:af:b4:71:27:be:ae:a2:71:a8:5c:d9:03:b6:
                    c2:24:ec:71:4a:12:28:ef:4f:c5:23:70:55:82:d2:
                    6b:45:34:29:30:02:22:ef:dd:f3:ce:2a:11:93:42:
                    09:7a:70:93:b6:19:fc:98:0f:76:0e:93:de:a5:83:
                    9d:40:3c:a1:cd:5f:f5:40:69:a3:29:e6:f8:a4:97:
                    6c:13:d1:81:a5:93:05:c2:60:6d:b2:ae:54:88:9c:
                    39:f7:2c:40:95:57:47:c2:6a:32:6b:9b:63:1f:97:
                    79:e6:0c:2e:f1:d6:4d:e0:07:27:bf:14:93:46:a3:
                    c2:b7:2d:a1:43:ed:a7:3a:80:da:d8:4e:9a:ef:57:
                    f9:20:e0:20:2c:17:3f:88:e9:82:68:86:20:fb:3f:
                    30:fa:71:4e:be:1d:7a:98:5a:95:f7:1d:10:0e:e1:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8C:79:71:75:36:7A:98:4D:B4:85:91:70:D0:45:70:6D:58:B1:95
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:d0:7d:93:86:bf:5f:7c:0d:16:9b:0a:71:fd:98:5b:27:
         24:de:32:7c:ac:a2:1d:a1:6f:2c:05:bb:5b:1b:42:f2:1d:68:
         7a:f9:17:8f:25:72:27:14:a0:e0:27:a4:22:b6:3b:d1:e8:c2:
         b6:f5:86:52:ea:22:7f:d2:02:a6:19:53:76:ad:6a:c8:9c:75:
         b9:16:c5:0b:31:e4:d9:28:cb:68:66:27:d8:a5:72:0c:54:7d:
         dd:68:13:1b:04:38:b1:ce:b6:b4:83:15:aa:58:00:52:c2:ae:
         d4:a5:0c:aa:b0:0a:b3:81:7d:6a:9b:a8:63:e0:6f:db:af:aa:
         13:77:df:dd:cb:1a:0d:b5:99:77:02:81:03:4d:8f:e4:05:7b:
         07:4d:ac:9a:a7:6a:29:61:4d:3b:2f:0a:91:fe:91:b9:d5:52:
         9a:4a:91:59:15:e6:c0:d5:23:d2:4f:e4:0d:25:15:9a:8a:fa:
         ef:4b:31:cd:45:3f:c7:30:2d:f0:b0:7a:30:ce:cc:b2:b1:3d:
         c4:bd:17:1f:8c:f2:93:61:58:c3:7a:7d:9e:c8:39:d4:4e:0f:
         fc:cb:9b:08:d3:98:cf:0e:09:f0:10:7e:15:2a:39:be:03:d1:
         fa:8c:90:b2:2c:01:5c:64:49:d9:d2:01:42:f5:c9:16:eb:ba:
         b3:55:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----