Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File:                     Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier:          qmU4qNA3OdhfOhArOMXBaq2h96g+7U/6579Cugaqzwg=
Subject key identifier:   20:77:D3:9E:BF:38:20:7A:E3:D7:C5:BD:3B:40:21:A8:52:5C:6B:61
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer:       /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial:       01962E61B1F5D3A69CF95C56DACC13ECE0D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
                          2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: USXkht2PTXtrKZRdvB/HafuJ7Z0bHYBmww603sBEBMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:f5:d3:a6:9c:f9:5c:56:da:cc:13:ec:e0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=2077d39ebf38207ae3d7c5bd3b4021a8525c6b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:f4:1e:c9:db:16:a9:42:8c:75:d8:08:58:
                    11:e3:58:3f:b2:d5:d2:ac:6d:70:4d:0e:2d:d1:b4:
                    20:df:3c:27:e6:60:cb:75:60:ad:e5:91:10:5d:93:
                    3a:d2:ab:8d:a8:51:4a:2b:e1:73:50:f4:b3:58:50:
                    8a:68:dd:5e:92:a5:39:fb:c1:a8:26:c6:8e:b8:00:
                    1f:fc:d5:e8:c6:a7:07:3e:04:98:c5:0a:50:a1:4f:
                    bb:11:ea:13:e3:55:8c:b5:9e:79:30:71:d7:5a:15:
                    6e:df:6f:e0:03:7e:87:6f:af:ee:80:d9:05:4f:0a:
                    ee:d1:ce:62:8d:84:35:3e:d7:8b:2c:59:ac:74:9c:
                    a3:c7:ab:62:30:51:d6:df:99:db:80:62:87:b0:50:
                    b0:b3:4e:7c:cd:4e:3b:d7:96:4e:bf:a0:ed:e4:ae:
                    db:18:09:f1:62:ed:ba:f0:1c:18:ba:f7:bd:47:32:
                    b7:0b:8c:a0:a3:17:81:31:0e:aa:29:db:e8:ed:ff:
                    02:7b:d9:af:39:41:56:fa:6f:90:2a:43:5a:a3:4b:
                    bb:4b:5b:3d:5e:04:3c:7f:d0:4a:59:e9:fe:35:ec:
                    27:2a:9b:93:df:79:01:75:8c:de:f7:dc:15:8d:17:
                    fd:8f:00:ee:ae:80:3b:d6:3c:ea:3c:2b:ee:e6:e1:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:77:D3:9E:BF:38:20:7A:E3:D7:C5:BD:3B:40:21:A8:52:5C:6B:61
            X509v3 Authority Key Identifier:
                keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5a:3b:99:ff:2d:f6:b8:26:b5:ca:73:1c:24:45:83:be:03:
         64:8e:22:76:cf:cf:99:31:5d:f4:02:e8:11:5f:86:a7:29:03:
         3d:d8:a7:2d:8e:af:bc:04:87:d4:e7:03:9e:ac:05:93:2b:d9:
         5e:55:c8:2e:57:87:35:27:f7:ac:ac:c5:a3:ba:64:5a:07:9b:
         d7:f0:6a:9c:63:0f:3d:d3:fd:af:cb:a7:1b:91:f6:5a:f1:ec:
         f1:b1:9b:e8:c1:e6:e3:14:6e:be:09:c7:e3:6e:ef:fb:15:3a:
         50:57:43:36:f4:54:67:0c:0a:64:c9:cd:2f:54:dd:b8:8e:6c:
         83:14:09:a2:17:8b:b2:e2:52:5b:67:da:bc:df:e6:0d:6b:fa:
         29:f3:f3:21:b5:87:d5:e0:ba:ce:51:4a:4a:3e:dc:b4:3d:03:
         2d:54:73:5e:26:8e:57:48:c3:14:ab:b9:76:a9:ee:3b:43:4d:
         f1:e6:eb:39:00:e9:1b:cd:9d:6b:79:1d:49:a0:55:2a:17:ab:
         ac:43:22:bb:4f:b2:21:ea:2d:29:ff:fc:b6:a5:70:df:7d:72:
         fc:ce:0e:bb:91:51:a5:3d:e4:30:b0:e6:dc:bd:c0:e1:7e:a1:
         3e:e1:c1:ef:5c:63:76:c3:69:6c:05:08:6c:70:0b:71:6e:58:
         c1:ce:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----