Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File:                     ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier:          6rcBsDwRBoeXL0GIhvcxq77l75jSI0evMD16Z997gpg=
Subject key identifier:   78:06:E2:20:00:91:0F:4A:1E:97:5C:6B:4F:A2:D6:22:9D:87:9E:DA
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer:       /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial:       01962DF4083D900F38F6B36DF5BBCEAA5BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number:          0F97
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: Fiy0dKAoC6eTNwsLJ4ZbbfMmOMu8V6l8sNkpHweSTkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:3d:90:0f:38:f6:b3:6d:f5:bb:ce:aa:5b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=7806e22000910f4a1e975c6b4fa2d6229d879eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:03:b5:af:a5:aa:3f:56:9f:24:3f:96:b4:
                    5f:ff:d8:54:41:b6:c3:b6:fb:07:dc:be:78:cc:8b:
                    af:d6:c4:36:bb:dd:17:a5:3a:df:32:67:1c:8c:bf:
                    5d:dc:3e:76:d8:c5:21:c4:ce:11:60:0b:c1:84:fa:
                    6d:8c:61:1d:37:11:2b:2a:91:06:48:8c:74:4b:d7:
                    7e:52:f2:04:7b:4f:85:05:3d:de:e9:c6:80:27:f5:
                    ce:d1:d3:0b:6b:e3:12:71:6d:3e:b7:2f:83:1b:d8:
                    dc:bc:ea:40:12:98:6f:2b:8f:02:33:35:d4:fc:e7:
                    f4:76:ef:f3:e2:9d:1c:16:72:8e:74:5b:82:35:68:
                    db:7c:22:a7:26:fc:ff:d4:a8:53:f5:52:dd:0a:8a:
                    22:30:19:cc:5a:e0:a9:a9:ea:f6:68:e3:db:df:34:
                    77:5a:d4:b5:e3:4e:f5:38:4d:67:56:d7:6b:03:7f:
                    ce:ca:eb:9f:d8:e6:f1:9a:57:28:39:00:f0:95:74:
                    9b:5f:ce:31:b0:28:64:c5:86:62:c4:1e:c9:8c:15:
                    86:75:b2:45:8f:69:b0:4d:be:59:03:b4:cc:b9:b9:
                    af:02:0d:3c:7c:51:a9:00:85:e4:66:97:35:11:61:
                    6e:35:b7:11:9c:ba:ca:8d:84:d7:a3:7c:ef:7f:3a:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:06:E2:20:00:91:0F:4A:1E:97:5C:6B:4F:A2:D6:22:9D:87:9E:DA
            X509v3 Authority Key Identifier:
                keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:1f:ab:02:eb:21:49:1b:89:ba:0b:c7:0b:64:43:69:8b:
         62:11:36:38:5f:0c:fa:bd:61:28:75:03:c4:a9:df:d2:ef:6c:
         cb:1a:31:2d:77:70:06:6e:e1:44:4b:c4:f8:c0:94:86:f0:b7:
         12:d6:82:88:ff:1d:d2:1c:6d:73:cc:e0:b4:a5:d2:b9:d8:36:
         50:c0:55:0e:90:77:2b:42:66:ef:a6:cb:e4:a0:7f:0a:9c:d3:
         4d:09:85:dc:4a:a2:d9:7f:4e:a8:86:0c:25:da:6c:f6:56:68:
         54:82:1b:bb:52:4d:25:a3:b0:38:2e:d4:20:cd:f7:f1:83:33:
         54:c2:82:14:59:d8:eb:90:ec:60:ed:f7:92:c8:8f:87:cd:44:
         3c:be:34:53:0b:96:83:99:47:83:90:14:fa:9b:32:67:c0:47:
         1d:fe:5e:79:98:f0:c7:14:9c:d3:dc:d8:92:85:a2:81:2c:60:
         ab:12:a5:a4:c8:bb:81:f6:bb:09:cd:bf:63:31:ac:6c:53:9e:
         ee:54:7f:bb:b2:59:f3:95:35:a5:5a:ea:7a:58:da:b4:51:cc:
         11:d8:4c:85:90:7a:1a:db:93:cc:65:2e:91:cd:2f:39:90:52:
         10:e6:39:c5:e3:be:86:1a:6e:fa:87:bf:8f:21:d6:14:52:fc:
         c9:96:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----