Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File:                     ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier:          MMGd9RSD791uS713qUWQmWRLF2vFUZnpqJm1iMP4SU0=
Subject key identifier:   72:C1:6E:AD:13:6D:E5:53:F2:08:2F:C6:B2:26:7A:DB:D1:30:C0:39
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer:       /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial:       01962F7450EC3C8EBA799D4CEA2D5EA4DECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: GtdIGBjDBI8OogNRVvZQjA6lO6JwQTdztTr5t29DbEc=)
                          2: ckxfsidkq0zDgn8HR-xIWsqm2AQ.roa (hash: WdjOIbcaJnLXbL/Nx00pV5xdwXgfnCo9JLmJy57TSjE=)
                          3: rS8McXzCkBbcVb5uezFTBLPdaiQ.roa (hash: KC6Lr4AJ8lP/HwGwdQX+pnrzkPDHp47sMoI3Dyq3FbM=)
                          4: uYm5oYNq-JACxgzZxNgku-KZuSg.roa (hash: mMvblRec/LXUeEQXaAaSvKQKI7NqUb/x663S4SMp3Ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:ec:3c:8e:ba:79:9d:4c:ea:2d:5e:a4:de:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=72c16ead136de553f2082fc6b2267adbd130c039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:5f:37:66:62:6c:d9:82:67:ad:b7:81:93:
                    8b:ed:36:82:d3:15:89:7d:64:91:58:9e:a9:d3:85:
                    3e:ee:ef:43:72:6d:be:8d:ab:5d:15:6a:6f:3b:af:
                    87:0d:be:6e:5d:c0:df:26:38:ba:44:21:9d:26:34:
                    81:d5:97:ed:fa:8f:bf:52:89:48:62:7d:0b:c8:b0:
                    9e:71:42:26:c0:80:17:14:3a:7a:8a:a5:23:dc:84:
                    c0:4c:72:b1:ad:cf:3a:a0:17:a1:2c:62:0d:f2:f0:
                    cc:7b:97:8a:ce:f1:40:53:ad:08:ba:59:b7:79:c3:
                    f9:ae:6f:88:98:d4:17:46:c9:6a:48:cc:29:bc:5b:
                    49:e8:12:90:9b:ff:f3:eb:de:72:2d:73:b7:29:08:
                    f8:18:c9:9c:bd:2c:65:9c:2d:f4:6e:5f:d5:ee:d6:
                    45:80:1c:47:84:9c:31:90:8a:a5:ff:c0:07:18:37:
                    39:27:54:5f:b6:40:ec:d5:5a:63:ec:56:ba:23:4b:
                    08:5a:84:ae:18:1b:b7:6d:55:40:23:7b:c4:2b:cd:
                    83:84:72:a2:5e:c3:49:bb:8f:17:a5:a5:bc:07:4b:
                    7e:74:e2:53:17:e8:f5:2d:81:4d:f9:a7:bf:51:73:
                    e5:b8:57:99:0e:49:d0:40:9c:e4:54:c2:6c:a7:93:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C1:6E:AD:13:6D:E5:53:F2:08:2F:C6:B2:26:7A:DB:D1:30:C0:39
            X509v3 Authority Key Identifier:
                keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:81:5c:2c:18:09:18:0d:ab:58:6b:3c:19:7b:ea:50:cb:
         a6:95:30:f4:9b:43:bd:57:e0:fb:aa:1d:6f:dd:ee:12:de:c4:
         65:ed:d1:d9:0f:ff:eb:2d:cd:18:fc:34:10:12:e9:ad:b3:53:
         b6:cc:3d:02:10:18:e9:a9:a7:70:4a:b1:47:7c:2f:e0:85:ae:
         20:1d:21:e8:6b:13:6c:4b:c9:86:1d:1d:5c:fb:65:45:8e:60:
         89:11:e9:31:e3:da:40:c0:37:a7:33:b9:bc:a4:95:e2:49:ef:
         dd:57:c9:86:be:99:8d:3e:e9:21:c3:a0:70:4f:62:ad:57:95:
         ec:bc:24:bd:de:97:6a:ee:a5:1d:6c:fc:76:00:29:ea:55:22:
         91:63:8e:96:09:2d:8a:79:84:9a:ba:35:10:6b:d5:25:30:60:
         3b:fd:90:43:0f:5f:2c:45:82:1d:30:3e:47:20:c5:85:40:48:
         60:0d:75:45:15:d8:da:60:1b:2d:a9:86:4e:31:f9:6f:dc:eb:
         48:92:cd:90:be:ee:43:d4:fe:8f:52:c0:1d:25:dc:ab:5a:bc:
         e9:19:b2:b5:2a:0a:eb:f9:f8:97:31:8b:06:2b:8c:4e:78:bd:
         15:cb:42:a3:c5:3a:9c:42:b1:c0:7c:59:f4:ed:e4:49:3f:e6:
         e6:25:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----