Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
File:                     ZTwsX-3AjoxdH2VGksPkVkDIou0.mft (raw, json)
Hash identifier:          VlLo13qkhlNZASPVMsgxK6E6n0se0cAbGp1HYrnDA8c=
Subject key identifier:   E8:79:E4:5D:7E:4B:B8:CF:A1:9E:08:65:A7:16:87:49:D5:12:39:3D
Authority key identifier: 65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED
Certificate issuer:       /CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
Certificate serial:       01962E988C1062DC1E255D483116A4733236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
Manifest number:          09ED
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: ZTwsX-3AjoxdH2VGksPkVkDIou0.crl (hash: zycRbK1efX+9vyvjLrXF242DhEcFztA6WwE6P+0YP1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8c:10:62:dc:1e:25:5d:48:31:16:a4:73:32:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=e879e45d7e4bb8cfa19e0865a7168749d512393d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:82:b1:77:82:4a:83:1c:c6:80:4d:d2:d8:
                    93:77:0a:8a:46:02:fb:4a:07:12:eb:59:cd:6d:2d:
                    85:57:2e:d2:8b:da:20:e6:ec:05:30:c7:03:33:17:
                    86:74:4e:0e:44:a0:99:5c:1d:dc:68:c9:1f:61:19:
                    2a:84:61:48:97:0b:82:85:f4:84:95:16:48:42:2a:
                    e4:c0:de:83:b8:63:85:33:47:93:35:69:cf:73:45:
                    ba:5b:d0:af:05:b9:1f:ed:06:3d:be:94:ab:f0:40:
                    e7:02:ec:37:d4:99:94:76:a5:9b:17:28:09:4f:b8:
                    40:a1:4c:32:97:25:8a:5f:ec:60:8a:fa:9f:f7:6e:
                    5b:65:ba:04:18:95:e2:d4:f2:fc:8a:c6:10:b8:6f:
                    d6:a7:6a:1c:b2:a1:92:d4:98:35:57:ee:40:81:81:
                    11:b1:21:a7:9e:29:97:45:3b:46:70:69:0d:ab:c9:
                    eb:2b:7f:a5:20:4f:f1:ad:38:e7:43:d1:81:eb:54:
                    f5:87:56:27:55:31:cb:14:68:94:c0:fa:7a:81:2d:
                    6d:67:78:ba:9e:9f:b7:dc:17:f1:59:80:38:17:d4:
                    b2:40:1e:d7:72:fe:bf:a0:9d:2c:98:7d:3c:0d:80:
                    5b:16:b9:d1:d3:7b:3c:d0:04:89:89:33:43:42:75:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:E4:5D:7E:4B:B8:CF:A1:9E:08:65:A7:16:87:49:D5:12:39:3D
            X509v3 Authority Key Identifier:
                keyid:65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:06:98:1e:04:3a:fb:a2:4d:8d:47:51:fc:01:b1:9e:8a:66:
         f0:99:b4:16:c8:1b:0e:b4:5b:29:11:20:68:9e:a8:92:d5:ff:
         6a:94:8e:cf:89:35:67:44:99:69:18:83:1f:b5:b1:ae:46:53:
         1e:67:9a:97:20:c6:6a:f0:2f:4f:35:0c:39:cb:5a:68:5f:c1:
         cb:3c:5f:da:de:b4:67:cd:a8:b3:e4:b6:b6:d5:52:8a:1a:ea:
         bf:16:8b:6f:b0:b6:d9:c1:df:4d:44:88:f7:65:e8:e7:86:b1:
         66:be:e9:93:4f:3b:e8:f0:1a:1e:e6:37:32:65:58:4f:bf:f6:
         65:cc:62:64:62:ca:7b:b0:4f:48:41:4c:10:98:13:c4:1e:e2:
         4f:39:5f:97:c5:d8:2e:dd:2b:51:0c:14:87:ff:d3:df:c1:6f:
         99:f2:9c:a7:53:ce:0e:85:de:57:e4:e6:c0:9a:bd:be:f8:05:
         94:04:dd:ef:4b:a8:f0:77:64:b8:41:c1:b3:6e:47:4a:31:1f:
         9f:cb:72:74:3e:40:0b:bc:9f:51:7a:3d:2e:15:03:c4:b3:20:
         09:6c:5a:f1:05:ec:52:cc:17:fd:41:ac:45:5d:da:b2:91:52:
         bb:d2:ab:45:aa:6f:09:34:32:25:80:c5:29:70:19:17:3f:2d:
         e8:9d:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----