Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File:                     _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier:          O0AhpKI8/7UbRxwatdmlUb3x3l2DwnjClK5wMDJOB9o=
Subject key identifier:   9C:66:1F:05:AA:34:B4:38:D1:BA:AB:D5:EF:1F:3F:D1:AD:0E:16:CA
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer:       /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial:       01962ECFB320CD286ED5C2D02F2185AC25A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: W3jKuxB_RcgliKc6SOrb-E9lQW4.roa (hash: flRFJj0cuA1GRJx+AJmEhdqQRbsG/XKga+ETKIMZCEI=)
                          2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: whX1shggNLjCnE6xdr3fwqscVUVNJu6Udol1rNBeZV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b3:20:cd:28:6e:d5:c2:d0:2f:21:85:ac:25:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=9c661f05aa34b438d1baabd5ef1f3fd1ad0e16ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:86:46:7f:e9:7a:d2:47:b5:ee:f2:a1:6a:
                    24:60:9f:9d:2e:99:25:14:57:59:c1:89:d3:f2:9c:
                    d7:3c:45:69:3c:5c:80:24:a6:03:69:3e:e0:0b:79:
                    7d:1f:af:0d:a1:02:05:0d:70:48:d3:f1:65:bb:37:
                    70:0f:3c:7d:6c:4e:f9:a7:62:22:77:ef:fe:14:d1:
                    15:25:17:34:2c:54:c6:88:68:83:ff:3b:ea:f5:b3:
                    e5:66:e4:61:e3:0b:7b:14:8b:79:37:4a:4f:0d:b1:
                    c5:df:2e:b9:94:03:dc:6c:0f:fa:03:ec:3e:20:81:
                    97:00:f2:4b:2a:0b:4a:4f:dd:4a:75:46:1f:a8:d6:
                    96:41:ce:0d:ac:e1:e3:c2:4f:85:9a:9b:8c:50:6c:
                    2e:c6:f0:f6:52:5b:88:ad:bb:bd:e0:8b:e6:58:cb:
                    53:c5:f9:06:72:63:7c:a1:88:00:a8:a6:57:f5:26:
                    6b:cc:c6:55:f0:0f:9a:38:a8:e9:2a:a1:b5:a9:cd:
                    5a:b6:93:32:38:43:8d:3b:b1:2b:e8:74:ba:3e:56:
                    a8:a5:eb:83:72:34:be:39:7a:65:f3:9c:d8:64:08:
                    a1:22:d8:f6:3c:a7:c7:ad:9d:d5:cf:1a:33:9d:9d:
                    8e:3c:02:2b:b6:96:89:77:5c:1a:ae:f2:ee:68:98:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:66:1F:05:AA:34:B4:38:D1:BA:AB:D5:EF:1F:3F:D1:AD:0E:16:CA
            X509v3 Authority Key Identifier:
                keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:6c:55:fb:51:3c:93:89:52:44:d3:63:c9:bd:5a:c4:28:fa:
         e0:4d:c2:d5:80:60:75:ce:13:2d:4f:18:84:2d:ac:1c:97:be:
         a0:20:57:2e:f0:ee:d8:3a:cf:50:ef:c0:f9:78:1c:dc:9f:4c:
         64:ce:08:0b:df:e6:5d:f6:a1:3f:48:83:0b:aa:ab:88:ac:3f:
         89:25:f9:d3:41:46:a0:e0:56:d4:3f:d8:ce:ec:cb:02:88:16:
         41:14:ec:46:b0:ea:5b:43:10:41:d5:75:b4:38:1f:26:9f:58:
         c3:7c:d8:26:28:01:f2:b7:d5:f8:11:a1:4c:84:9c:a3:c5:c0:
         59:ed:54:77:aa:eb:2e:01:98:eb:a3:f5:2c:39:b2:27:a3:7a:
         91:ce:59:c4:97:d3:41:36:e5:00:61:cb:50:a7:15:db:d3:aa:
         3a:80:f1:fa:c9:bb:4d:c8:24:01:e1:0f:a7:5e:6c:06:33:7e:
         6e:88:4b:eb:a5:9b:4f:25:21:68:6b:ac:4f:f2:6e:a6:35:2c:
         21:26:c0:d3:9b:1b:b2:4e:20:7e:33:a3:0f:a3:24:40:99:15:
         28:54:0c:25:1e:2f:8a:fa:f0:ac:41:07:47:7e:0b:76:ec:69:
         78:49:0a:f1:a6:2f:80:90:44:a8:22:c1:2f:3d:eb:3f:f5:3f:
         68:2b:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----