Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File:                     Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier:          sD9PZI/FTw6QgrGL4Zhayb3T8Bvh4kgwzoAO/n0KzAI=
Subject key identifier:   02:D1:9E:1A:12:61:87:04:C7:FC:91:67:19:3E:79:EE:2A:C5:7B:BC
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer:       /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial:       01962F0658E5DC8141CADB244FF5EFA2267B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number:          0BDE
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
                          2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: 02ngjuYKdgUBTCGlxnypYwPxXhqoeMD2x6dTyx082eA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:e5:dc:81:41:ca:db:24:4f:f5:ef:a2:26:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=02d19e1a12618704c7fc9167193e79ee2ac57bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:9a:35:89:9b:e3:3d:b1:07:45:4b:6e:33:
                    24:82:bb:c2:b3:3f:80:94:e9:ea:02:f5:a7:e4:5d:
                    fc:a1:b5:4d:ce:d8:ab:9f:6a:44:83:e4:6f:a5:ef:
                    5d:43:89:29:77:d1:02:c1:7d:52:b9:07:08:59:40:
                    92:52:ed:12:14:97:06:ef:de:7c:4c:39:ca:c5:82:
                    d5:77:22:82:b8:2a:9a:a9:39:cf:22:25:aa:75:aa:
                    75:e8:c2:c4:d3:cc:ff:47:f5:d7:2a:29:98:60:eb:
                    76:ec:9f:41:05:a1:ce:46:84:85:44:8b:1d:1b:c4:
                    58:90:01:98:63:b3:70:f0:57:16:53:6d:e3:c0:5c:
                    7b:ce:ee:4c:3e:5f:8a:14:a5:f9:55:65:81:64:36:
                    1d:2d:89:99:27:d6:5e:2c:03:1b:b2:1a:e8:e9:99:
                    39:38:cc:c1:07:e4:fd:c9:30:37:51:a4:42:7e:35:
                    18:f0:e1:1b:46:f0:88:d5:93:c4:c1:c5:cd:2b:58:
                    d3:1a:4b:8e:85:0e:53:73:87:6f:92:c7:b3:71:92:
                    1b:48:c3:e1:55:8c:05:6c:7f:2c:b4:c7:d3:2c:60:
                    48:6b:ef:ea:8e:77:77:0f:69:1c:81:dd:82:6d:76:
                    af:d9:fa:e9:b9:96:3b:de:c1:4b:b5:48:1a:74:c5:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D1:9E:1A:12:61:87:04:C7:FC:91:67:19:3E:79:EE:2A:C5:7B:BC
            X509v3 Authority Key Identifier:
                keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:93:00:76:c1:1b:3b:2d:d6:df:a3:87:98:8f:2b:d2:d8:
         85:ad:28:88:cf:98:fe:7a:2e:6c:b7:d7:15:d5:a1:a6:f7:4c:
         ca:07:db:ec:96:6d:f2:14:e8:a5:37:54:96:c7:42:7b:1f:3f:
         a6:3a:92:1f:7d:41:a6:ca:f4:d8:65:7c:12:3a:5b:8d:a3:0b:
         37:a3:3a:29:1c:8d:f8:57:f0:89:6e:f8:f8:18:70:0b:d8:ea:
         57:77:f2:2e:66:39:0b:8d:fa:dc:27:de:37:3c:f9:9f:fd:8f:
         10:1c:1f:68:9b:02:64:98:7f:33:bf:17:c6:9d:98:ad:39:92:
         a5:2e:d6:f4:8d:03:56:45:46:44:69:47:cb:c7:c2:05:f2:fa:
         2b:e8:9b:67:b7:0f:ab:66:6d:a2:6b:c0:15:4a:54:19:27:65:
         35:68:a2:97:55:e3:3a:19:6e:c9:f1:11:8c:d2:73:9e:d1:34:
         0a:7d:23:d9:35:98:87:3d:4c:85:6c:0b:4b:3a:13:fd:da:af:
         26:98:30:7a:96:e9:e5:90:c3:17:04:13:b6:6a:39:4c:a2:65:
         98:9b:81:5e:cf:34:55:ec:29:94:fa:bd:1e:7d:12:10:d5:f7:
         98:27:a0:07:8f:57:97:39:f7:75:5d:2a:ed:9b:5f:75:ce:05:
         7f:14:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----