Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.mft
File:                     dzW3DconD8uOS5CStyADZBOPXfE.mft (raw, json)
Hash identifier:          EMm6icAM3TuWdRv29iqtcv1nT3Z67DFG4Pvqe3KuXIM=
Subject key identifier:   6D:C1:1E:5A:1D:2F:9B:7F:A2:49:00:AD:74:D4:D3:19:CE:AE:B9:F9
Authority key identifier: 77:35:B7:0D:CA:27:0F:CB:8E:4B:90:92:B7:20:03:64:13:8F:5D:F1
Certificate issuer:       /CN=7735b70dca270fcb8e4b9092b7200364138f5df1
Certificate serial:       01962E98B6BD5B49A893899708DA12642C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzW3DconD8uOS5CStyADZBOPXfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: dzW3DconD8uOS5CStyADZBOPXfE.crl (hash: EnrceEzzwzf6PV/aQFsvVq74MkxxwB2891CXEmZ2nSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b6:bd:5b:49:a8:93:89:97:08:da:12:64:2c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7735b70dca270fcb8e4b9092b7200364138f5df1
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=6dc11e5a1d2f9b7fa24900ad74d4d319ceaeb9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:cf:c3:9a:9d:11:b0:94:cf:d0:3c:24:16:
                    b9:29:17:18:d7:dc:2d:d3:9c:61:9f:8a:92:49:3b:
                    bc:96:27:4a:a0:e2:e7:4a:0d:ff:c5:82:3b:27:8b:
                    41:4f:1c:e1:3a:e0:66:73:8c:0c:bd:0f:a9:9e:71:
                    73:aa:28:f9:52:7c:4f:55:ff:1a:c5:19:73:d2:89:
                    d7:39:8e:cf:4e:71:f8:40:19:ab:d4:aa:4d:5f:ae:
                    c6:22:31:70:67:3d:a1:b0:8a:3c:dd:d9:bf:ed:ca:
                    23:f5:15:b5:48:0a:28:33:9a:b0:31:ed:69:a9:8b:
                    04:7a:fd:04:e5:f1:96:f0:f8:c8:c9:a5:c5:84:48:
                    34:64:16:18:39:ba:e7:24:1b:41:1e:ac:d9:b8:8b:
                    b3:b3:20:29:5d:9f:8c:6c:f0:0b:94:ec:50:1a:b5:
                    79:44:8d:71:f7:70:dd:c0:e7:62:26:22:00:b8:87:
                    52:8a:2c:7f:a3:27:cd:bd:70:03:8b:cc:9a:e0:6a:
                    70:55:6b:5b:34:04:b2:72:48:cb:c3:0c:0f:e0:fe:
                    2c:58:86:97:4e:68:85:5b:12:d8:76:36:fa:f7:3d:
                    f0:5e:fa:9e:c9:68:16:e3:9e:06:fc:0e:71:5a:a7:
                    37:48:c4:e6:df:70:bb:1c:d3:e9:e0:0f:bd:30:95:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C1:1E:5A:1D:2F:9B:7F:A2:49:00:AD:74:D4:D3:19:CE:AE:B9:F9
            X509v3 Authority Key Identifier:
                keyid:77:35:B7:0D:CA:27:0F:CB:8E:4B:90:92:B7:20:03:64:13:8F:5D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzW3DconD8uOS5CStyADZBOPXfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:14:6c:08:9e:7f:65:34:f8:aa:e9:32:57:61:33:62:dd:f8:
         ed:b1:59:38:7e:ba:b6:77:d9:78:48:06:c8:41:78:5b:3d:4d:
         b0:22:60:8e:bd:34:30:01:cf:c5:0f:ed:d4:f4:df:da:7c:fd:
         07:b4:83:28:e1:e9:fe:7d:00:1c:db:b0:d2:17:da:8a:4b:cf:
         67:4c:15:d6:82:d3:48:07:85:8a:9f:22:38:a1:69:7e:9d:27:
         a0:09:78:e1:00:94:0f:88:6f:7e:d7:dc:13:b6:b8:02:53:bb:
         1a:a3:f9:a7:56:78:07:06:84:1a:12:e2:81:24:c5:a2:b5:3f:
         f4:29:dc:fa:b8:4a:88:d9:7c:8a:34:a0:2c:09:7b:7b:34:46:
         c9:db:d0:bb:8c:52:3b:e6:29:b8:46:d2:b0:0d:f3:a5:b4:0e:
         96:ef:9f:8b:a3:91:24:aa:af:42:5c:6e:3a:15:10:8b:44:2c:
         92:b7:ed:7d:2f:53:98:27:56:0a:f7:86:c8:2f:b4:37:17:89:
         c7:84:4f:bd:cc:a1:dd:73:dd:0a:cd:52:5d:87:bc:18:1e:d7:
         97:ec:73:cb:06:f4:e9:c5:38:32:f2:11:3f:c4:bf:6b:83:37:
         16:e6:d4:57:cf:da:67:8b:82:0b:90:98:e9:c4:be:73:8c:11:
         c4:cb:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----