Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File:                     Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier:          563mek9ptIAyky0a3Aw/Lm8/wPLF0qecCTO3Gscl2lg=
Subject key identifier:   71:B1:BF:71:C2:77:69:81:58:75:EF:98:6D:25:A8:71:9B:73:25:1F
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer:       /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial:       01962F74800154BCC53B7EA52DC1E1B5FEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number:          0CB4
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: aZth3LoBrQWvWd89E4KNflBXZVPsYDT+FQrzG8juCxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:80:01:54:bc:c5:3b:7e:a5:2d:c1:e1:b5:fe:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=71b1bf71c27769815875ef986d25a8719b73251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:dd:35:45:0e:ad:cd:71:ff:7d:03:87:cc:
                    c0:a0:0a:3b:6d:20:c2:5e:2f:e4:25:be:a8:e9:e5:
                    e7:e8:42:cf:28:57:8f:f2:91:44:10:60:f9:77:fa:
                    6b:45:67:1a:87:e0:44:82:d4:e8:25:2f:3d:9b:cd:
                    b3:c3:ca:af:7a:96:f9:0e:d7:c8:2b:23:3e:fc:fd:
                    24:55:26:49:a1:0e:bf:56:3a:53:ae:65:07:35:51:
                    c9:4f:a2:a0:96:e4:96:7d:28:85:5f:bd:7a:8a:98:
                    48:6f:04:f3:2d:16:bd:a3:05:f4:e9:bc:e2:b1:32:
                    52:ed:35:1f:37:a6:7a:ee:16:8b:34:50:72:ab:5a:
                    d6:ac:9d:70:80:51:cb:b4:ab:56:5c:32:b0:0b:a1:
                    a8:b6:c0:0a:a5:9d:ed:f5:93:16:19:c3:cc:36:6c:
                    e5:23:ed:1d:86:93:0e:63:5f:ae:87:99:6b:57:d1:
                    c8:12:69:7f:8f:ce:fd:1e:59:a9:a4:d7:76:9c:fc:
                    87:bd:f5:52:97:ff:99:6a:00:8e:4a:f6:8a:32:6d:
                    bc:e2:72:5c:e9:5a:22:dc:6e:8a:53:b7:14:3d:97:
                    ed:53:30:a2:34:1d:e2:1b:96:be:01:8a:26:98:f6:
                    8f:84:f2:13:13:57:54:1b:c0:18:45:d7:d1:b7:eb:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:BF:71:C2:77:69:81:58:75:EF:98:6D:25:A8:71:9B:73:25:1F
            X509v3 Authority Key Identifier:
                keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:02:c9:89:19:94:b5:a1:42:5a:dc:2c:2f:dc:a5:e7:21:
         f7:2d:f8:2d:bd:2c:e2:11:70:af:e7:5b:76:e7:45:23:04:01:
         d6:d0:ad:5f:69:99:8e:87:fa:7d:b6:b6:b8:52:36:3a:52:2c:
         ec:e4:fd:60:7f:85:7c:bb:79:17:42:1c:d0:6f:b5:30:43:d4:
         c7:a6:33:1d:12:49:98:bc:34:3a:fe:41:00:59:b1:a2:15:04:
         6f:ff:84:5e:a2:58:b8:e4:c8:80:58:e5:45:dc:b5:ce:74:cc:
         bd:1b:ea:c2:9e:20:d0:73:40:1c:aa:59:eb:3c:1f:3e:3e:0b:
         c9:f8:5e:59:7d:cf:ce:f7:a6:67:08:cf:c3:79:1e:f1:32:00:
         a5:5c:1c:4a:7d:76:fe:71:d0:57:49:06:8f:be:03:16:7a:2a:
         72:25:a8:9a:28:cc:16:08:8d:19:72:85:28:d9:6b:d2:33:f2:
         27:57:2e:02:31:40:76:d9:fd:c2:70:e4:12:c7:63:8d:4a:cd:
         1d:a1:39:56:68:eb:bc:19:09:3d:53:ca:fd:66:4d:72:8b:9c:
         4c:c3:73:40:d2:93:40:c8:b9:04:96:c4:68:27:88:36:70:fb:
         84:48:b2:70:37:93:d4:bc:0f:7f:8e:35:d6:04:b8:82:da:91:
         0b:06:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----