Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File:                     0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier:          IZ993rLL2gJR61gdBCRud+3Nv1aVOyH+YZPDjGK0Nl4=
Subject key identifier:   FC:E3:D8:D4:09:25:66:90:14:3B:A6:A2:B3:8C:78:FA:3A:79:24:EC
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer:       /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial:       01962E2B47D1D4DB2BB96A1FA99CE13FA7B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number:          0AE5
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: rA9L72dgkvSpvfG3W7DlgJdQpuOkSXZnlhfzflLJ5Kc=)
                          2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:47:d1:d4:db:2b:b9:6a:1f:a9:9c:e1:3f:a7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=fce3d8d409256690143ba6a2b38c78fa3a7924ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:d9:98:fb:d9:9d:a8:54:a6:31:74:12:71:
                    0c:8d:9c:6e:6f:38:c3:b7:43:2e:ac:ba:a9:07:e6:
                    61:24:5f:05:11:64:e2:e5:6e:24:2b:38:7e:05:93:
                    6b:0d:2e:56:c5:e7:fe:a3:4c:7b:04:a9:dd:31:5f:
                    f7:e8:36:ec:eb:b2:7b:37:9e:db:39:18:3b:0c:f5:
                    ce:f7:5d:5d:46:d9:6f:59:f4:d7:80:df:5c:1d:58:
                    23:54:14:6d:3d:53:d5:16:ae:b5:13:e3:5d:6a:d6:
                    cb:a5:cb:09:b6:6c:4b:58:11:63:73:bb:b6:85:9b:
                    aa:29:6c:81:74:cb:a5:1a:cc:17:e7:a0:5c:4c:96:
                    65:3b:27:a1:f4:9d:23:88:52:10:8a:af:6b:1d:7d:
                    21:b9:76:78:e9:37:d5:f1:90:5f:73:43:66:7f:3c:
                    bf:91:fd:8c:3d:35:e2:46:44:14:88:8b:e8:e1:b5:
                    f6:14:75:74:90:34:1f:de:7f:38:26:e1:4e:bf:42:
                    6e:8e:b2:98:e5:96:46:34:f2:96:46:3d:f9:a6:a3:
                    e8:d8:a2:6a:4f:27:3f:5b:2f:33:bb:a2:42:78:95:
                    1e:4e:08:10:39:d0:41:3a:d5:b6:26:78:fc:b6:09:
                    b0:c8:a9:bc:7f:5f:f9:48:a6:00:fb:16:72:e8:23:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E3:D8:D4:09:25:66:90:14:3B:A6:A2:B3:8C:78:FA:3A:79:24:EC
            X509v3 Authority Key Identifier:
                keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:7a:a9:aa:d2:19:13:7a:80:6d:2c:c8:71:68:e9:f5:9a:
         f0:bb:fc:29:fb:b4:4d:90:bb:1a:ae:fd:06:4b:c3:16:49:61:
         ca:ff:39:4b:03:55:77:d0:35:49:1e:24:d9:8c:25:ae:ae:cc:
         7e:43:cb:24:2c:a9:f7:ed:eb:a2:e0:72:8a:27:6e:bb:b5:e1:
         b6:98:91:d9:26:9a:91:e9:d0:ad:6c:c3:1d:85:f9:5c:41:eb:
         42:bd:dd:05:9a:b7:7c:58:ef:ef:ef:f7:c4:06:38:6c:97:16:
         3c:ec:26:63:1d:62:1f:5f:52:4c:7f:cf:bc:9f:c1:01:6f:44:
         1a:e4:df:f5:b8:fe:71:ac:81:58:38:b6:c8:2c:75:6b:4c:b0:
         28:49:1f:ab:e7:f9:69:ec:b0:a3:33:a2:a6:98:95:41:08:67:
         a1:79:45:4a:6f:75:61:f7:f1:f8:9c:74:3f:7c:2d:a0:02:2f:
         d3:d8:25:f3:a9:d3:4e:38:1e:1f:e5:05:c0:61:8a:5f:9a:4b:
         8f:04:c1:cb:cb:5e:34:83:2b:fb:50:79:0e:4b:9e:93:ec:c8:
         fa:d6:7b:7e:a1:33:43:29:2a:91:c8:c1:82:94:87:b7:f6:66:
         b4:a8:f7:c2:f7:11:32:02:7b:1b:99:ac:9d:eb:1e:14:83:9d:
         9d:51:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----