Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File:                     K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier:          97krjthQ7nf7VcFoB4FpifMdgcbdk4UCZK2LRGZhrlc=
Subject key identifier:   9D:DF:CF:06:3F:CF:F3:F0:8E:C2:56:18:8A:4E:B9:DA:7F:A2:C2:AB
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer:       /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial:       01962F0687F3AEAAC4D9C50719C42310B2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number:          0DD0
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (hash: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=)
                          2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: 4OKUwPrOYtDpdevmnHlvDh4hd62zaevMSvIz2fEmKpA=)
                          3: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (hash: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=)
                          4: tV4zflXI9fSIgwxFKkPQRhAyRyk.roa (hash: Z1f74NH3kzNP7yaoZvmLnAHN/rFjIJBtqJkrZ6Pd0is=)
                          5: xsMX4xnBtAkWlhocItT5wdfVH3k.roa (hash: z7ATRuzsizy0J/zWBm/YAirUNrjy9iWYQrOG/F0bSwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:87:f3:ae:aa:c4:d9:c5:07:19:c4:23:10:b2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=9ddfcf063fcff3f08ec256188a4eb9da7fa2c2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:97:df:86:9e:50:82:7d:be:04:6c:6f:a5:
                    c2:42:20:dd:29:4b:df:b7:45:e5:4c:0b:57:8e:01:
                    98:b3:c9:88:40:e3:ee:00:70:05:ea:13:5f:eb:6e:
                    fb:62:b4:01:74:44:71:37:a9:eb:06:15:ed:e4:85:
                    aa:63:6e:6d:91:50:a3:c5:18:40:c9:53:95:30:b4:
                    c7:70:c3:b9:b4:82:e7:fe:f7:a7:3e:b9:20:2c:f1:
                    93:05:8c:73:f3:cf:87:9d:fa:68:66:0d:bb:6c:8a:
                    19:f4:ad:7b:3b:08:ea:40:9b:4e:c9:27:97:83:35:
                    9b:2c:c7:17:d1:34:8c:f8:a0:cc:b0:ce:e2:ab:7f:
                    6c:ff:2c:d1:7c:b9:1f:1d:f6:e1:44:9d:82:35:19:
                    b9:ba:0c:6d:e0:d5:85:8b:e3:e5:f2:6a:d1:12:76:
                    b1:3a:3d:5d:a1:9c:54:62:7d:11:4f:c1:22:a9:19:
                    65:5d:eb:b2:77:e1:d4:f6:cc:c7:82:7c:31:89:51:
                    30:32:b2:c4:63:ad:1e:37:9a:e2:16:03:2a:82:1d:
                    60:63:94:3d:e5:30:aa:18:a1:03:7e:7d:a6:42:c0:
                    d4:ec:64:1b:9f:d7:9a:97:b9:76:e4:f5:5f:1d:1e:
                    89:16:cd:f5:04:d4:06:62:96:7b:d7:f5:30:e9:84:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DF:CF:06:3F:CF:F3:F0:8E:C2:56:18:8A:4E:B9:DA:7F:A2:C2:AB
            X509v3 Authority Key Identifier:
                keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:36:ef:6f:11:4f:cf:23:c5:c9:cc:5b:a3:2d:9e:d1:55:b8:
         c8:29:7f:2b:40:05:a1:76:9e:c5:83:d9:0e:a3:c7:7b:8c:37:
         f2:a4:af:ff:be:e3:67:2b:c3:84:0c:73:09:55:63:b1:67:fb:
         12:81:f9:4a:6a:1c:eb:f7:c4:fa:69:81:80:fa:e6:92:65:8b:
         0f:38:ae:89:42:58:40:38:48:3d:92:27:a4:51:ea:b0:ab:65:
         97:8d:5c:8f:44:d8:d8:a4:8e:03:74:72:a5:7f:b4:1e:bc:24:
         2d:2f:fb:6c:e7:22:a3:c0:0b:c1:31:22:f5:d0:b1:98:33:9b:
         ee:98:5f:f3:91:4b:ad:bb:e1:06:04:71:f8:41:28:7f:bb:ad:
         6a:37:ad:ed:34:e1:cf:cb:cc:ee:2c:9e:99:ef:3b:bc:20:df:
         cb:30:6a:79:4d:fc:8f:49:8c:3d:01:11:3a:15:d3:3c:17:ce:
         21:4b:0f:9b:9a:bd:05:56:b8:7e:b0:2a:68:df:7c:75:28:9f:
         c0:21:e5:f2:05:00:c2:23:56:ec:8f:0b:29:b6:10:20:b9:da:
         43:f3:32:c0:66:ba:45:e7:a5:38:3f:57:2a:24:ed:06:59:d2:
         25:69:57:f7:0b:af:88:e2:89:de:9c:97:14:09:04:37:fb:3e:
         51:56:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----