Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File:                     zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier:          A0xiO6NXDY6XraHvJmoSSqdaoD3YFCdGgiU1gO/qKa8=
Subject key identifier:   04:26:BB:37:5B:B9:3A:11:91:E7:94:A2:BE:96:B7:C4:E9:3F:78:FE
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer:       /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial:       01962E995D3EB4F64271345E9B2B96475812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: XCch4UirE4NrL3mltmWg5OsY+rqEJBeNmZjuPVqqe6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:3e:b4:f6:42:71:34:5e:9b:2b:96:47:58:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=0426bb375bb93a1191e794a2be96b7c4e93f78fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:04:00:3a:63:9a:9b:42:7d:1c:25:3d:3f:
                    97:b9:4a:d5:42:6e:5f:f4:bd:20:41:0b:0d:8f:37:
                    7d:7d:4d:ab:2e:56:b5:8c:5c:77:d5:09:f7:aa:2c:
                    fc:56:cd:c3:91:a4:4f:95:c4:af:d2:48:3f:15:4a:
                    71:04:08:19:16:fe:5e:ef:a6:bb:14:ab:32:bf:9f:
                    29:27:21:50:d8:e4:28:04:d3:76:70:a5:f4:43:38:
                    96:0b:ea:ef:33:8b:aa:f6:96:d0:92:c4:0f:ae:0e:
                    f8:d7:f0:3d:01:5a:9b:4a:02:80:f0:b9:f1:a4:51:
                    be:62:03:9d:09:01:07:c7:52:64:5d:e4:91:7f:56:
                    a9:9b:88:aa:f4:09:eb:1a:ec:7c:63:df:22:09:75:
                    e6:a7:84:60:cb:87:ca:ba:63:b0:84:9a:a6:9f:13:
                    9e:43:9c:38:44:e5:5e:8d:54:cd:9b:c1:70:7c:e6:
                    f0:a2:b7:67:42:a9:b8:9b:00:23:4d:2b:25:aa:51:
                    be:ff:46:51:cc:9a:d8:cf:40:90:dc:a0:5f:bd:d9:
                    66:d9:07:85:ba:c5:34:ed:20:56:ee:85:f6:36:47:
                    2f:ff:13:e4:6c:80:7c:06:6f:71:aa:a9:22:61:cc:
                    c1:52:95:38:a4:03:03:ac:56:42:9d:9d:5e:95:ed:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:26:BB:37:5B:B9:3A:11:91:E7:94:A2:BE:96:B7:C4:E9:3F:78:FE
            X509v3 Authority Key Identifier:
                keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d3:44:cf:fe:ef:22:fc:4e:25:37:aa:9d:62:81:93:13:c3:
         b7:ff:e6:c4:c1:3a:9f:fb:9f:52:9b:1a:37:aa:21:fb:4a:11:
         16:79:17:af:b1:37:4d:a7:ea:41:6c:a1:f7:57:a6:73:7f:34:
         10:bc:a5:e4:c8:da:78:11:62:a2:df:6c:00:76:b7:51:4c:35:
         17:b9:c0:0e:e2:03:81:a0:c4:50:1a:c5:a0:f3:f2:07:89:a7:
         97:78:8e:4e:86:c7:18:9a:4f:0f:84:96:b6:b7:98:e7:4c:ca:
         51:9c:9e:8c:16:42:fc:62:32:72:86:53:42:25:62:a9:e3:99:
         ba:77:f9:4f:4c:af:a1:69:00:f1:88:7a:ec:41:11:de:da:af:
         aa:7d:79:a5:3a:58:97:d5:aa:83:4b:6d:7a:09:db:35:f2:cd:
         05:e0:a9:28:30:8b:55:68:53:3b:bf:41:65:af:70:e8:4a:e8:
         aa:3b:0c:43:ef:85:dd:8a:fb:71:9c:68:37:49:09:73:36:c8:
         ac:24:60:20:14:57:de:bb:5d:bd:4f:33:e9:09:c7:f8:61:62:
         b3:20:e1:b9:39:e3:f5:95:0f:a9:11:ce:04:c1:3c:11:c8:0b:
         55:7c:fc:33:61:b8:4d:65:98:a3:2e:51:70:35:5c:6a:bb:61:
         97:d2:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----