Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File:                     ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier:          UIc1bxju6ZQjODxidLRGNH1AKdYLIjXuq5WFVxyzeMs=
Subject key identifier:   3C:DC:18:85:E1:37:F1:D0:F5:3E:F5:98:05:02:7B:A6:58:41:EC:73
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer:       /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial:       01962ECFD001F45B94D1AD910ACBFB062309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: wPx0bCkUxKBBfVg1SvejU0QCqrr5ycYs/qW01pHPAVs=)
                          2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d0:01:f4:5b:94:d1:ad:91:0a:cb:fb:06:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=3cdc1885e137f1d0f53ef59805027ba65841ec73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:9a:7a:1f:ac:ce:2e:12:28:82:66:c9:6b:
                    ba:39:f5:4f:c9:88:55:b0:ec:f0:81:9a:ae:18:13:
                    42:8f:56:a7:2f:41:22:c9:b8:80:b6:37:ae:07:46:
                    a7:77:80:90:67:01:62:5a:40:e3:7e:8d:ba:b6:be:
                    f3:c4:7d:65:a5:5e:30:ac:05:67:39:45:09:1a:38:
                    7e:6b:4e:7f:39:83:2d:7d:6a:5f:85:d7:58:04:75:
                    14:71:52:68:bd:e1:98:be:ad:d5:b1:f3:0a:ee:e6:
                    c3:a5:eb:0b:f7:a3:3f:58:d4:88:48:6b:d0:b3:ab:
                    b9:6e:1f:b4:f3:a4:29:02:dc:1b:f5:72:26:81:94:
                    35:e5:cb:b2:3c:67:c4:ae:7d:98:66:8b:6e:67:49:
                    fd:99:cd:b1:ef:4e:51:a3:b1:7c:ca:77:3f:83:49:
                    22:51:fe:48:d8:63:69:05:7d:24:75:95:a4:5c:9a:
                    82:1b:9d:d5:b2:86:04:6b:06:0c:af:c0:e8:31:f7:
                    ad:fc:67:8e:84:de:b0:fe:c6:f0:d7:fd:9b:e0:95:
                    4a:b2:f2:ad:bb:30:01:24:19:d7:25:9c:72:96:93:
                    c1:fe:f6:ae:1c:90:df:dd:5c:7f:50:e2:b5:14:95:
                    2d:52:0c:6a:92:ec:eb:44:c4:c8:5c:1b:87:fe:72:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DC:18:85:E1:37:F1:D0:F5:3E:F5:98:05:02:7B:A6:58:41:EC:73
            X509v3 Authority Key Identifier:
                keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4d:4e:1e:23:e4:52:b8:39:41:d6:b4:42:7b:ea:b4:bd:5b:
         82:1d:2e:c0:5f:f2:e4:4f:71:f8:bf:8c:aa:8e:c1:c8:54:1c:
         ae:86:93:5d:4c:c8:88:32:70:56:31:26:1e:48:a5:ee:10:35:
         1d:08:70:0f:96:22:28:c7:24:8a:e9:8d:d0:17:a4:52:fd:bf:
         2e:4f:1f:22:5f:66:d5:ef:16:81:fb:34:b7:b4:1b:07:9b:f4:
         0f:60:77:39:9d:cf:5a:63:a0:0d:1d:bb:20:4c:9b:c6:d8:e4:
         24:26:66:2a:ff:3b:8e:d0:4d:bd:1f:d1:8f:4a:73:9c:be:c0:
         b0:cb:81:97:31:40:1b:e9:22:23:5a:a6:70:e4:86:be:4c:d3:
         6c:44:14:a2:3e:f1:c6:8b:14:db:4b:06:6b:57:1c:22:51:d9:
         74:91:6f:4a:87:f7:c2:e4:41:75:ff:8a:35:f4:22:b9:8c:27:
         f8:6d:38:ab:03:af:04:ea:e4:6a:cf:46:8f:7e:e9:d3:7e:cd:
         26:eb:51:d8:f9:aa:40:ca:75:93:70:c4:db:e6:b5:dc:58:82:
         5e:25:1f:75:23:68:51:f7:43:de:a1:d5:21:5f:1c:be:75:7e:
         14:0e:65:a7:7c:25:13:45:5d:43:ab:4c:bc:86:f6:35:c5:ee:
         8c:64:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----