Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File:                     ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier:          BEOCd2jG1Da3+pn599POWsioTtl1pn2bHI6/VPj1STk=
Subject key identifier:   45:3B:BE:12:FB:92:EB:DE:D7:AB:2C:67:BB:7A:F7:BC:53:B7:97:12
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer:       /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial:       01962F06A94619D919E334BE25E0522602B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number:          11AA
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: Wx4fuRKqlyuO+O5eVZjmfo/1oosKKKwWiEH78h+wYrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a9:46:19:d9:19:e3:34:be:25:e0:52:26:02:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=453bbe12fb92ebded7ab2c67bb7af7bc53b79712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:d9:94:2e:6f:68:bf:12:e8:e4:63:66:d8:
                    89:e5:ee:0c:84:b6:2b:6e:cb:d1:f5:92:d5:49:c3:
                    ca:eb:8d:f3:87:97:76:d0:80:67:76:6e:5c:af:02:
                    6c:05:5c:b7:0b:8e:6d:27:ac:ba:83:96:01:5b:57:
                    76:0f:63:b0:04:c5:1b:46:7f:42:d4:09:a8:c8:ba:
                    b8:2e:5f:4b:89:ae:f1:90:60:66:11:9e:a6:2e:f3:
                    29:b8:76:0f:fe:73:1d:0e:44:b6:7e:62:ce:b8:3a:
                    63:a2:e7:5f:cc:d7:2c:08:d2:f1:69:7e:32:bc:81:
                    0a:58:65:a9:b9:98:7d:44:2b:85:25:a2:da:e6:2d:
                    fd:49:37:72:43:59:1d:1e:97:e5:9b:2a:3d:21:f0:
                    0f:49:5d:1f:89:42:a6:7f:c0:98:1a:15:e7:26:b7:
                    63:45:7d:ba:97:34:65:f0:7e:51:dd:83:9f:7f:05:
                    df:b3:24:dc:16:f9:e0:e8:42:67:e6:17:2c:b1:83:
                    3b:2c:59:13:20:00:50:b3:21:2c:26:a1:f8:6d:8c:
                    37:84:d1:c9:d9:66:a7:89:31:68:58:74:57:07:15:
                    ac:73:74:d5:a0:4a:e2:a5:e7:c9:b2:9a:2d:bc:42:
                    3b:ab:6f:49:d2:d2:e0:f4:55:7c:5d:45:1f:76:7d:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:BE:12:FB:92:EB:DE:D7:AB:2C:67:BB:7A:F7:BC:53:B7:97:12
            X509v3 Authority Key Identifier:
                keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:97:c1:1f:05:43:27:0d:ee:1a:06:1a:4a:81:61:c5:17:
         7e:1c:35:b9:85:d5:c7:32:83:90:5e:44:c5:c9:b7:42:94:53:
         1f:fa:26:e1:26:a8:3d:cc:f6:0b:a2:34:92:6d:2f:16:d7:fc:
         14:28:57:fb:08:e3:6d:5e:05:c2:50:8a:d6:ee:39:75:5a:ed:
         5d:6a:cb:cf:86:d6:f2:69:39:8d:b9:1b:72:12:b4:e8:f8:64:
         4a:70:46:46:5c:cf:75:1f:ec:86:a4:69:54:ea:6f:fa:b6:6a:
         f8:b4:cf:ef:3a:ba:78:b3:0a:3d:43:b2:50:19:e1:96:3e:e0:
         23:e4:cd:2b:10:be:dd:f9:6e:1b:6c:53:ea:50:b0:6a:01:43:
         9c:5e:6d:ce:12:59:b8:1f:c5:30:85:c3:6e:fc:b7:20:e0:c8:
         60:e7:12:8d:34:c8:13:16:28:21:f0:16:8b:c9:ea:1e:79:ba:
         31:8e:f3:8d:ac:33:17:f0:43:e6:b8:96:3a:9e:93:fe:a7:32:
         1a:28:1a:71:2a:38:b0:82:a9:b5:d5:02:6e:50:9f:47:83:96:
         c8:b7:3b:73:7d:23:d2:f0:d0:0e:b8:c6:25:12:33:58:ad:26:
         4a:58:47:77:59:a2:90:4a:82:61:9b:af:63:60:d5:c4:5a:f4:
         f7:8b:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----