Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
File:                     zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft (raw, json)
Hash identifier:          15Vh7/6EYh8+fHalsn9PsCal3+gSRmlmArI40bYieig=
Subject key identifier:   88:A0:15:D4:11:40:6C:CA:A9:75:83:6C:14:54:E6:11:F1:74:A0:26
Authority key identifier: CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A
Certificate issuer:       /CN=ce42b4385e5772f51d588e2bb7219a122399587a
Certificate serial:       01962F0680289204B6170B35CDDFB26D3733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
Manifest number:          090E
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: zkK0OF5XcvUdWI4rtyGaEiOZWHo.crl (hash: 8Klc9Ky+fmemG5w3qqNCL6damWwVFGOdJohvdv22l5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:80:28:92:04:b6:17:0b:35:cd:df:b2:6d:37:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce42b4385e5772f51d588e2bb7219a122399587a
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=88a015d411406ccaa975836c1454e611f174a026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:e0:98:ec:51:13:2e:67:bd:90:d6:91:9b:
                    ef:fa:15:af:c4:bc:8f:87:e8:98:af:c6:77:34:7b:
                    6b:f5:eb:b5:ad:00:52:71:df:fe:0f:ca:a8:6a:78:
                    d5:76:a5:29:86:bf:f1:f9:d4:9d:4b:ac:5f:9b:fa:
                    7a:42:23:30:63:8f:50:f1:d2:d9:ea:67:8f:2b:ce:
                    16:f7:d1:08:3b:62:29:04:87:6e:d3:7c:fc:20:02:
                    ff:19:2e:73:18:30:48:59:75:0e:5e:f5:ec:3b:85:
                    c7:ae:5a:97:09:73:af:ad:46:02:64:2e:91:87:e7:
                    d6:3f:38:f4:6d:9a:87:ef:30:84:d7:1a:d8:de:aa:
                    69:32:39:58:bb:12:b9:44:5c:b4:de:94:ea:48:d9:
                    4c:50:be:08:ae:f7:f3:0d:57:ec:4c:d8:14:01:c5:
                    d8:e0:15:32:79:f4:7e:a0:b8:1a:33:f3:31:68:f3:
                    d3:8b:49:e3:e8:6c:67:57:d8:ef:6e:10:41:60:f5:
                    b8:d9:ae:ee:bc:48:77:9d:95:1c:b1:26:44:de:9b:
                    90:53:0a:80:9e:3c:99:de:3a:9e:6b:21:50:7c:d5:
                    59:af:27:43:fc:87:3d:82:f1:44:b2:61:3b:be:7c:
                    91:05:9d:90:1a:33:6a:90:42:d1:4f:d9:be:a5:73:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A0:15:D4:11:40:6C:CA:A9:75:83:6C:14:54:E6:11:F1:74:A0:26
            X509v3 Authority Key Identifier:
                keyid:CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:71:f1:90:35:fb:66:23:50:b6:d8:32:9c:84:55:dc:80:9a:
         64:15:d6:18:ad:0c:c6:9d:3f:47:ba:26:fe:31:31:2b:8a:ae:
         fe:2b:b3:4d:e1:c5:09:84:ce:10:84:87:09:7c:f9:6c:ef:16:
         59:9a:ce:d5:d8:12:41:ee:ec:8a:19:72:7d:e8:51:64:b7:e2:
         56:09:06:29:93:d9:51:9b:a6:03:6a:c2:3f:eb:6a:0d:59:7d:
         be:84:53:e3:37:59:fd:2f:39:49:3d:fe:a0:50:45:c6:d1:21:
         42:a2:6e:b4:0f:1f:36:92:08:e7:01:53:83:eb:5d:39:f5:5e:
         9f:92:5e:58:41:1b:76:f0:80:19:02:57:9f:a4:6b:6f:08:89:
         09:6f:f3:4f:22:e5:cd:84:ca:d3:d5:b9:45:8b:e2:a9:73:cb:
         7b:64:65:c5:80:ae:cb:6d:fa:34:06:88:16:72:47:54:66:59:
         29:62:f2:8b:c4:8c:e1:61:16:73:74:36:01:31:14:71:c5:98:
         73:21:1a:ce:18:37:c7:4f:cf:65:86:8e:f2:14:c8:db:60:90:
         17:44:5f:ec:20:a4:b8:64:89:c7:21:7c:4a:c9:03:5c:a2:23:
         53:e7:04:b1:26:4a:7c:a6:a1:44:0d:8e:e9:d9:9a:e2:1c:7b:
         ca:52:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----