Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File:                     Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier:          5zPpuO2VkqZ4cwjeDP2VzXfT2zGyLwMOMI1V8yaBDHI=
Subject key identifier:   03:A8:83:B3:2C:5A:53:3A:56:42:70:50:12:21:23:F8:71:AC:27:A7
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer:       /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial:       01962F0689B79EE84A240013E831AF086FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
                          2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: T/c05CtHWKzK3NloWGvOUZ/yWr1NL7XGhq5njvnjvi0=)
                          3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:89:b7:9e:e8:4a:24:00:13:e8:31:af:08:6f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=03a883b32c5a533a56427050122123f871ac27a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:92:60:a9:15:6a:30:95:0f:b0:f1:f9:3c:
                    52:8c:11:3b:c7:59:94:09:09:bc:a1:2a:40:12:42:
                    4b:96:7c:4a:ee:3f:d2:c4:a1:da:fd:04:ec:0f:26:
                    db:07:2c:51:fb:fc:70:9a:51:32:c9:13:b2:ee:3d:
                    9f:95:b8:28:02:14:8d:f6:42:65:17:e9:7f:49:ad:
                    a9:f9:65:a7:ed:5c:5b:03:4e:76:49:83:d5:e7:dc:
                    6c:86:69:f4:63:e5:a4:9e:2c:a1:2c:d7:a5:16:64:
                    a8:c6:de:2f:d9:97:c1:c2:4f:23:40:4e:ad:03:63:
                    ad:69:0c:5b:eb:37:29:34:28:f6:ac:40:04:1d:4e:
                    fc:42:93:29:24:29:fa:ba:28:27:27:03:45:22:6a:
                    d4:29:db:50:a5:67:8a:f8:48:9d:10:ad:90:3e:e3:
                    9c:b7:87:a2:a7:f8:29:85:64:1c:c9:90:bd:bb:90:
                    bb:bd:a8:25:61:23:5c:d6:58:cb:be:2b:12:aa:f4:
                    ae:54:6e:ac:3e:47:10:0c:6c:9a:84:86:8a:10:a3:
                    e5:64:41:0d:2d:cf:3c:36:3f:f9:b5:f0:a0:b1:8b:
                    a7:f0:dc:2a:a1:5a:84:1f:c2:25:48:e7:6b:ed:07:
                    bb:13:7d:15:81:d8:86:b9:15:35:90:58:51:56:61:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:83:B3:2C:5A:53:3A:56:42:70:50:12:21:23:F8:71:AC:27:A7
            X509v3 Authority Key Identifier:
                keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7a:f0:da:10:0f:e1:55:31:38:bb:e4:04:f8:6b:05:70:31:
         3c:bb:72:62:bc:4d:8e:c1:8e:cc:18:32:6e:8b:f3:83:e5:7c:
         bb:10:87:a0:ee:e2:8d:b2:db:d3:b8:bf:ff:6e:4d:b0:51:0b:
         66:30:7e:0d:93:8b:ce:e6:de:3f:a8:78:8f:7a:1e:b4:b5:af:
         22:fd:f7:7d:48:73:91:67:5d:a8:b3:89:d9:d4:58:05:7c:e9:
         c6:b0:12:e0:1a:9c:5e:f4:3b:b0:fb:52:9b:4c:f3:94:87:56:
         01:ba:c9:c8:59:76:5c:7d:64:8e:dc:b1:07:29:3d:7a:9a:b9:
         c0:94:2b:29:b8:3a:dd:74:f9:cc:04:b7:e9:77:47:48:0c:8b:
         f1:d9:56:80:3f:98:05:35:60:bc:d8:87:7c:fd:c6:8b:58:cc:
         95:34:df:f7:84:5f:ae:d2:7d:ff:9b:09:a2:ae:ff:91:27:60:
         59:b5:f6:ba:21:c4:15:d9:03:9f:cb:80:8f:21:ee:6a:ec:0f:
         c3:71:79:d2:c0:45:91:52:f2:da:ab:2d:fc:e7:d0:6f:73:9e:
         fa:cc:13:3c:c9:ac:bb:eb:92:cb:f9:b9:72:2f:15:b2:81:00:
         1e:e6:06:d0:82:2a:e5:75:25:6d:a7:8b:a2:90:ef:a4:2e:8b:
         f8:55:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----