Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File:                     zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier:          LuXH0yphkK6Ygkibf9P2zq2Ym7dbGBdgjy4Yd6Q6iO0=
Subject key identifier:   33:A6:BE:49:CE:FE:C8:A3:CE:27:38:37:34:E1:AD:09:DA:C2:6D:AE
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer:       /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial:       01962DF3FA09F240AED59563EEC6AB2FA4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number:          0BC9
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: OruFyKylVtTwTHWwdw63wZWMl0VzEc/7LNFmFFBsci4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fa:09:f2:40:ae:d5:95:63:ee:c6:ab:2f:a4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=33a6be49cefec8a3ce27383734e1ad09dac26dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:05:ab:93:43:77:cc:1b:87:57:82:90:e8:
                    26:e2:18:27:f4:79:f6:35:be:a6:3f:a1:3c:79:d7:
                    4b:df:ba:a0:fe:1d:0b:57:ea:5c:a1:6b:47:a6:5a:
                    15:f9:89:c9:0d:d6:ae:a6:65:ef:c9:fe:7a:b6:70:
                    1d:0d:8a:54:37:56:62:e7:c2:2f:08:73:4b:fe:d5:
                    ed:7e:bb:35:89:fc:f3:93:92:12:48:b8:5a:02:e9:
                    a4:ae:4d:32:7b:7f:4b:cc:ac:e6:34:89:7a:fc:eb:
                    f2:58:3e:42:62:b3:ab:9a:a3:68:76:5b:2a:da:1d:
                    ad:fe:05:42:ee:58:83:31:51:0c:e0:b4:85:08:fa:
                    0b:de:13:ff:6a:e1:ee:39:5d:35:59:7c:c8:c6:23:
                    8c:5c:2a:0b:4f:cd:c7:b7:5d:f3:ff:0f:73:94:ac:
                    b6:b1:7a:4a:4d:fb:f8:98:e7:02:ce:e3:1c:df:29:
                    f5:8f:52:98:3d:cf:fb:d7:8d:79:7e:ff:5c:51:f4:
                    fd:af:07:42:19:e9:ad:90:b3:43:2f:e6:0e:86:8b:
                    d3:f0:dc:37:67:85:61:65:c3:5d:21:eb:9a:66:93:
                    12:97:41:7d:1e:4a:3d:e8:9e:5f:d6:a1:a5:f1:e4:
                    0d:c0:35:e6:3c:07:04:94:25:6e:4a:77:86:f7:37:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A6:BE:49:CE:FE:C8:A3:CE:27:38:37:34:E1:AD:09:DA:C2:6D:AE
            X509v3 Authority Key Identifier:
                keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:85:11:9d:bc:81:46:0c:82:3b:bc:ab:e8:d2:f7:35:53:d6:
         5c:cb:49:8e:3e:c0:03:58:ab:7e:7f:37:36:70:4f:49:7e:bf:
         47:5f:fa:4b:7a:1d:65:61:4f:34:93:1a:9b:d2:81:7c:25:50:
         d6:15:90:dc:44:50:c6:08:0f:a7:d7:37:5b:07:e3:69:19:7b:
         30:ee:f3:bf:f4:99:d3:ef:21:ef:13:02:b8:00:94:e3:51:6e:
         9f:41:60:85:80:fc:41:64:5b:f6:b8:f1:1b:a4:1e:70:32:ae:
         b9:21:28:0e:63:52:3e:c6:f7:8a:39:7f:95:3b:84:d0:9c:28:
         a0:e6:ed:ac:53:7d:46:99:e8:f4:ff:31:af:51:a0:f2:3c:3f:
         0a:e3:8b:87:54:8a:5d:e7:22:a4:e4:5d:07:72:87:ee:fb:56:
         d5:a2:70:7e:78:5c:8d:42:f6:1a:fc:0a:ef:42:42:b4:97:ed:
         a5:61:a8:5b:00:1c:3e:60:d0:09:9b:4f:b4:2d:1c:dd:e0:aa:
         ec:a9:73:fa:ff:35:3e:5b:0c:0f:79:4b:2d:f6:18:78:fb:65:
         f8:a4:aa:e2:c6:a8:1a:fe:b4:9d:d8:0d:35:53:06:8f:fa:93:
         37:4a:f0:1a:4a:fa:4b:91:f0:c9:0b:d9:d4:c8:cd:4d:78:96:
         e3:8a:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----