Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File:                     zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier:          37s6pdCBG7dRiUsKcag7OS63OUAC8IprL2Rr7pYDlb4=
Subject key identifier:   C0:14:43:33:2E:D4:67:81:70:30:0A:23:69:03:88:54:AB:07:50:7E
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer:       /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial:       01962DF3D1E74952A634BF80CC48D713AE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number:          07C6
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: MedFLoUf/zAdUjqCWRSO+tTDPxsWj0xfkbRSWgpbYMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:e7:49:52:a6:34:bf:80:cc:48:d7:13:ae:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=c01443332ed4678170300a2369038854ab07507e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:e2:c2:4a:cf:10:ec:af:1b:e1:01:e0:fa:
                    07:1e:b9:ac:dc:bb:23:67:3c:37:48:b3:d9:cf:4a:
                    51:42:b5:b9:c1:5e:7e:58:df:d6:ca:87:67:86:dd:
                    56:7a:6b:04:16:74:b8:d9:e1:10:40:52:55:7d:e7:
                    73:73:56:72:f3:c3:7f:d2:cd:3d:8d:d8:05:29:e4:
                    9e:93:e4:9d:f8:fb:c5:fa:79:5a:76:97:d3:cd:38:
                    9e:8e:0c:95:fe:23:31:e9:f5:80:08:ad:94:34:06:
                    aa:5a:d8:29:98:2d:25:29:64:46:65:c8:ed:14:23:
                    c6:28:96:c2:73:0a:68:74:d9:1f:6f:f4:49:dc:76:
                    b7:7e:da:a3:8a:96:d1:ec:8e:ba:c4:56:ea:1f:a7:
                    c1:bb:0b:3d:cc:73:cc:ab:94:5d:4c:3a:cf:4a:59:
                    bb:27:40:49:2c:45:e5:d3:b7:07:e4:de:b5:d0:ee:
                    2b:67:5a:56:26:d6:39:36:b8:1d:9d:00:64:27:c2:
                    f2:d7:c6:7e:01:05:8f:79:68:9c:1b:2b:aa:c6:0b:
                    1a:22:09:21:34:01:be:84:bc:5c:af:b5:8a:b0:e2:
                    7e:e3:1b:6c:69:c4:cc:3c:40:52:c3:82:c9:2b:47:
                    dc:7f:4e:a2:2a:9a:c1:16:5f:95:b0:32:3d:c8:b4:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:43:33:2E:D4:67:81:70:30:0A:23:69:03:88:54:AB:07:50:7E
            X509v3 Authority Key Identifier:
                keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:26:42:1a:51:9b:46:3e:de:0f:75:1b:d7:78:12:53:1f:
         49:59:1f:ac:a6:0d:a3:f1:96:d8:7b:8c:70:2b:ed:cf:e3:15:
         b5:a4:4c:83:89:a5:69:7b:fa:54:d7:b2:bf:6c:c0:7a:4e:aa:
         52:0f:a2:84:e9:ed:34:c6:69:62:b1:de:64:b5:fa:6b:e3:88:
         fb:29:a1:71:98:a4:7b:a5:91:f5:e5:be:44:dc:a5:b0:29:30:
         ac:32:b2:1c:7a:10:37:a7:4e:21:9f:03:2c:0c:75:af:68:47:
         1f:17:9f:8e:e7:94:b3:e8:a2:16:17:75:4d:90:c0:ed:c3:d4:
         7e:e4:65:57:34:4b:b5:1c:f4:09:88:51:55:0f:2e:7f:86:3c:
         ca:9b:67:25:7b:7a:ca:c6:4e:f3:ef:48:af:c9:47:4d:b5:6c:
         56:f9:6e:3a:fd:0f:28:70:66:97:2e:de:61:e7:7e:5f:dd:d7:
         ae:9e:02:4b:b5:99:aa:39:d0:b8:fd:61:4d:f0:9a:e2:1e:61:
         62:b6:0a:38:33:25:19:97:51:b6:c5:54:27:c5:b7:f5:ba:8a:
         b8:47:13:e3:f1:a3:15:e4:9a:05:c5:07:8c:53:d7:19:b3:14:
         22:4a:dc:3d:2a:b8:a3:f9:2d:b2:25:51:e2:f1:68:a5:85:cd:
         12:7f:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----