Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File:                     ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier:          xTA8lu7tlL45u5jBSjJZf4BJINWtYYTezc0X80LqlC0=
Subject key identifier:   E0:A2:2D:02:4B:7A:5E:C7:71:74:D2:2B:7D:11:B8:9D:C9:5D:12:FA
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer:       /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial:       01962E98F9756279FA1577454192B45C01AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number:          09DE
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: s6HCuLibK2zpZuZm/znhimqitFd0AlXUr6W2kB9iowI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f9:75:62:79:fa:15:77:45:41:92:b4:5c:01:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=e0a22d024b7a5ec77174d22b7d11b89dc95d12fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:69:64:9d:dc:23:09:d8:00:56:89:12:90:
                    6f:dd:5a:26:91:f8:c4:00:02:b1:3d:b9:64:ae:56:
                    c7:7e:69:52:d4:df:76:74:cf:9a:ee:2a:1c:2e:5c:
                    fa:e7:9a:35:08:4d:a0:ed:44:47:91:56:f5:1c:09:
                    5a:55:41:57:23:dc:6e:3b:e9:ed:f9:63:7b:17:c9:
                    28:60:9a:e0:8a:83:7f:0e:7e:da:90:3d:4a:f8:a3:
                    d9:c6:62:88:13:61:52:df:7b:0c:f8:da:a3:5f:16:
                    bf:26:a2:9b:ae:b0:79:4a:87:a0:95:64:3f:6c:b1:
                    fd:ab:e3:df:7d:a9:cc:22:25:d7:3f:91:6c:6d:7a:
                    5a:52:58:8e:4d:cd:3a:56:6f:c8:6d:5f:73:35:1b:
                    c9:08:29:41:58:fd:6e:2b:c7:52:b1:59:b2:c9:d0:
                    0b:a8:81:98:0e:e8:7c:cc:11:51:35:66:14:3b:89:
                    ed:4d:7f:30:e2:aa:49:8f:7b:6a:e0:9a:3e:ed:94:
                    d0:8c:e7:35:86:51:b9:2c:ab:06:5c:c5:e0:9b:6b:
                    9c:2d:ca:55:29:18:de:65:1b:e4:23:30:61:a6:cc:
                    7b:06:19:7a:26:e1:4d:fd:46:76:1c:b7:02:af:73:
                    f1:ce:06:0d:61:b1:75:d8:72:9d:e0:be:c9:7f:48:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:2D:02:4B:7A:5E:C7:71:74:D2:2B:7D:11:B8:9D:C9:5D:12:FA
            X509v3 Authority Key Identifier:
                keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:98:42:43:6b:d4:50:47:67:3a:c3:f1:c3:5c:2a:0d:e7:
         75:ea:c3:9c:68:71:a1:df:d0:63:6f:47:73:c5:55:f1:34:27:
         25:d9:74:7e:08:fb:c2:ea:d2:94:9b:d9:83:86:07:5e:2a:ce:
         c8:8b:78:1e:97:e6:2a:14:e4:5b:5b:5a:a1:ee:b2:1b:0d:c1:
         a8:dc:0f:81:89:c4:f2:86:b5:a2:1e:a6:04:e2:14:e8:de:d4:
         e4:09:5f:7b:95:3c:c6:9c:42:c0:c6:71:f7:ac:c5:04:26:f7:
         b8:35:ea:ab:00:cd:ff:b0:cb:9e:95:9a:13:be:c6:e7:e5:f4:
         b0:24:f2:e4:22:c1:34:d0:df:4b:a4:aa:96:07:29:12:49:06:
         fe:40:d3:6c:70:7e:d6:3b:a8:c3:44:07:ec:a4:c2:c9:7b:5b:
         08:a1:4e:3f:52:9e:0d:c9:d0:3e:ed:59:0f:d3:65:a6:bc:17:
         24:72:59:5d:e0:c1:b8:d3:ae:27:5b:b0:6a:bf:97:29:7b:5d:
         d8:62:20:ba:d8:78:00:aa:46:7e:ae:2e:ec:04:99:5a:4f:b7:
         73:23:72:d9:29:d9:b9:8e:82:e7:60:b4:2e:37:bc:f2:b9:90:
         ae:55:b4:d2:fd:f8:cf:25:55:15:cc:00:92:a2:c2:91:02:f5:
         72:ae:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----