Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File:                     Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier:          u7Q/rtSw6b3wlu/bwEHi0Z8byZgmKf/p/tHOiFt8t5M=
Subject key identifier:   77:B4:74:A3:A4:D9:59:51:6D:7F:5A:2F:D6:BC:83:F7:8A:AF:5C:26
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer:       /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial:       01962F06D77A9B0C1186EEB127A5A050D1F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: y1P/pGEhjQ9jIHZ0uNEFy162uhCmSg8xUt4sYLI7CHQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d7:7a:9b:0c:11:86:ee:b1:27:a5:a0:50:d1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=77b474a3a4d959516d7f5a2fd6bc83f78aaf5c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:82:76:72:14:dc:6d:41:6f:f4:99:dd:3c:
                    88:6f:f6:41:54:3f:cf:bf:c6:7d:29:81:3e:5f:92:
                    95:aa:64:b9:e5:55:39:1d:26:33:c0:a0:13:e2:b4:
                    56:e3:01:e6:76:8d:5d:ac:6b:a8:6e:3e:48:92:3d:
                    0a:51:5e:2c:ea:6f:ca:a4:3b:9b:3f:4d:c5:79:85:
                    5c:fb:7c:bc:52:4c:cf:91:93:11:61:69:4b:b1:d4:
                    87:d0:89:a8:4d:2c:c6:f9:6b:1d:f3:9b:90:cb:bd:
                    a5:b1:2a:09:e8:9b:96:37:ed:41:fd:81:58:81:65:
                    89:24:04:3a:3d:d3:1a:c3:8a:92:3a:bc:fd:d8:29:
                    9b:00:10:12:e5:49:e0:ca:75:86:f5:56:49:50:59:
                    32:79:c2:74:8c:95:be:bf:89:b5:86:6a:e1:40:ac:
                    28:1a:8c:8c:97:85:25:8b:77:57:1b:cd:27:d3:7c:
                    06:8a:93:22:d8:da:0a:fc:9b:c6:60:7a:0d:88:45:
                    7e:b3:82:8d:a1:2a:c2:3a:5d:2a:01:01:fd:b7:82:
                    9a:ae:e5:f6:30:dd:e5:79:fb:41:32:57:9c:49:c6:
                    59:c0:91:b5:9f:fc:aa:b9:d9:dc:7f:c6:5e:f1:30:
                    2d:70:05:53:39:47:10:d7:61:09:1e:2d:0a:3a:16:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:74:A3:A4:D9:59:51:6D:7F:5A:2F:D6:BC:83:F7:8A:AF:5C:26
            X509v3 Authority Key Identifier:
                keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0b:9f:a0:ee:dc:b0:1e:77:70:b3:8e:d9:8a:f5:5e:14:70:
         07:23:cd:56:7b:cd:a3:a8:c6:9e:e9:20:d9:32:45:5f:91:e9:
         5a:74:57:d4:1c:15:08:63:0f:95:e0:50:23:a8:30:21:ed:5a:
         eb:95:af:3c:1e:c5:c1:be:ad:0e:2a:5b:f6:49:57:af:38:04:
         2d:ce:f8:d1:5e:f7:6f:4f:d2:30:c7:6c:79:a1:6e:c6:3b:07:
         4c:bd:f8:1f:15:89:67:c2:bb:78:e4:53:f1:1f:d7:91:6c:04:
         77:ee:c0:c8:d8:8e:6c:3b:1c:74:d9:29:75:da:a4:1f:a7:df:
         4a:bc:43:e0:04:99:6c:1b:7d:2a:b9:ce:ac:2b:3f:7e:2c:24:
         de:2a:79:00:43:89:8b:22:da:6b:14:66:c5:23:49:c8:3c:7a:
         65:a1:f9:90:d3:33:4e:cd:c2:0b:25:ab:90:8f:e9:b7:87:6d:
         a5:a0:2e:4a:a4:ba:6c:a1:96:ca:82:fa:e4:0d:b9:7a:1b:1b:
         5a:5c:b2:9f:86:a6:d4:81:8e:27:bb:d5:98:c6:d0:d4:83:55:
         92:fd:ef:8f:59:dc:72:90:36:2c:9f:7b:28:5d:48:f2:09:9b:
         66:52:c3:d4:8b:28:b9:c4:11:38:92:d4:3a:0f:4b:9d:7c:20:
         b8:75:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----