Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File:                     Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier:          /TI7STOrVflJCyMP9oeLn5nk6bNrV0zAncxyq9p5A+k=
Subject key identifier:   5C:78:39:C7:E3:86:38:D8:B0:C3:D9:E0:DD:46:30:12:3F:16:B3:FC
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer:       /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial:       01962E995B92CF2D4FC7D67BD4CF1138BC81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number:          0BD4
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: 11M4mW8SJeKXubEwNbyJBkEhyN/kbk3jt4H9sYZBz4M=)
                          2: g-_eT5ct7bDp65zymgf5llHzTKc.roa (hash: 6qrqxL/Wtd1D30D40m2/VyQoFXL4FQNDdMtRsZ56brc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5b:92:cf:2d:4f:c7:d6:7b:d4:cf:11:38:bc:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=5c7839c7e38638d8b0c3d9e0dd4630123f16b3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:74:7c:97:da:05:95:5b:53:6e:39:f0:c6:
                    87:c9:f0:03:db:89:36:5f:12:e5:7b:a2:92:50:18:
                    ff:00:a8:c0:17:09:07:77:44:d0:bf:c2:34:9e:f4:
                    56:2c:fc:2a:f8:35:96:5c:e1:64:f6:e9:f5:a5:6a:
                    0e:d8:be:48:aa:94:8f:76:06:a8:be:ba:d2:78:e6:
                    84:db:9c:93:5d:fc:51:5d:f6:58:6d:26:bb:5e:f0:
                    40:2b:1a:25:1e:34:e7:c6:25:13:4f:ba:28:fd:3d:
                    80:6d:e9:cc:3b:07:d0:32:fe:52:72:bb:8a:73:ff:
                    bf:35:2c:eb:96:42:49:6e:18:9f:39:8c:b1:dd:52:
                    ad:4e:c7:1f:51:55:8f:ff:67:cb:a3:e6:b8:f6:28:
                    9c:b2:e0:59:5a:38:8c:3e:c7:4c:99:62:79:c3:e0:
                    30:b1:00:f6:f1:3f:dc:f0:a0:35:2b:2e:29:39:9d:
                    b7:eb:17:37:4d:b5:7a:c3:08:26:8b:49:d1:f8:9e:
                    61:dc:f5:5c:bf:c0:8f:18:26:9f:cd:49:bb:db:38:
                    3f:e7:07:dc:90:d8:1f:78:ea:93:1e:83:66:ad:73:
                    56:ea:6f:cb:da:24:91:58:fd:a5:a0:26:c3:1a:f2:
                    c0:79:7c:60:1b:6d:9d:01:66:dd:f8:9b:98:07:ab:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:78:39:C7:E3:86:38:D8:B0:C3:D9:E0:DD:46:30:12:3F:16:B3:FC
            X509v3 Authority Key Identifier:
                keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:ed:f9:c2:11:c0:4c:9e:f8:e7:4e:7a:56:48:cf:83:63:
         3c:4b:f2:a3:af:49:a5:53:c2:c8:fc:a7:e0:9a:fc:04:66:82:
         e2:3c:c5:8b:d2:1a:78:4e:6b:be:da:11:f0:15:ca:47:f6:97:
         35:8d:9c:3f:b3:e2:90:33:18:50:39:2c:30:8f:43:f5:05:e0:
         0c:1d:ec:ab:b6:92:43:b0:d9:e8:a3:80:1a:92:9d:81:a2:39:
         db:36:1b:a6:44:fb:3c:b2:a2:97:82:cf:53:22:7b:e4:32:bd:
         ad:b2:07:e4:c1:5c:ba:ae:39:9e:53:8b:74:25:c0:1c:91:76:
         53:5f:06:4c:50:10:7c:b7:50:bf:b4:1f:c1:83:17:1a:b5:21:
         db:e0:2d:b2:c9:c2:ef:9c:c6:48:16:f0:7e:da:13:1d:31:dc:
         fa:02:50:16:20:27:43:77:50:77:58:89:b9:f1:22:b7:32:2e:
         44:47:4b:fa:1f:90:81:3c:6b:e7:89:27:30:c2:85:c6:48:13:
         4b:a7:a3:a4:c2:40:c7:c6:36:d6:16:e2:8b:d3:b2:74:b7:44:
         98:fc:4a:25:72:14:74:ee:44:04:f2:2a:66:34:ba:35:b9:4d:
         4b:bc:9d:16:0c:2d:da:e8:41:a9:c8:fc:f7:34:27:ba:ce:a9:
         43:9a:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----