Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File:                     zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier:          tA4duIEkr1Yz3yf9+UVD4+AZPpWGwpNsicdBc98EiR8=
Subject key identifier:   E8:80:2E:47:7F:07:28:DA:1D:32:AD:76:6E:EB:37:62:FF:94:EB:7F
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer:       /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial:       01962DF3C3E30DB13787359267E8133C40C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number:          0F16
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: uqI7SxYpx4/4dZNvuvb61mXy0V29vCP0BHA3znF20cE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c3:e3:0d:b1:37:87:35:92:67:e8:13:3c:40:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=e8802e477f0728da1d32ad766eeb3762ff94eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:29:2a:fc:31:9e:46:94:39:fb:da:d7:3a:
                    14:df:9e:ec:7b:03:55:f3:75:a9:e2:04:04:6b:fb:
                    42:37:ce:fa:ed:cc:7b:b8:e3:5d:07:09:b3:51:ea:
                    26:9f:f9:06:c2:14:ea:47:99:d3:e9:ce:40:de:6f:
                    7b:7a:b3:fe:60:23:2f:50:fe:ae:a5:4d:8a:a6:f4:
                    6f:60:73:6f:43:f5:44:f0:8c:97:ae:c5:09:ec:98:
                    ab:8d:0a:1e:55:77:2a:ae:6a:cb:38:a3:5a:e3:6c:
                    7c:6d:02:cc:75:bd:34:ad:d2:cf:62:4a:27:0e:ec:
                    83:ab:5c:a7:47:dc:43:2a:06:f0:c9:da:c1:15:41:
                    46:93:e6:75:92:a8:bc:ea:70:c3:d1:29:2b:40:03:
                    4c:bd:a1:46:0a:83:ba:9c:b6:d3:8f:2e:6c:96:47:
                    76:c2:48:6c:a2:d5:74:e0:a2:7e:53:53:88:88:ed:
                    d8:5a:2f:ff:03:c5:7c:f1:e2:88:3b:b2:6f:ab:99:
                    c3:33:f7:9f:b1:48:b0:67:3e:a9:3b:84:17:ed:12:
                    23:de:94:45:51:f2:94:ed:47:a6:08:49:8f:5c:db:
                    9f:d7:b2:17:75:4f:35:b2:a9:cf:9e:bc:fc:7d:02:
                    96:9b:36:94:0f:14:78:1c:38:47:4c:d1:8a:53:a2:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:80:2E:47:7F:07:28:DA:1D:32:AD:76:6E:EB:37:62:FF:94:EB:7F
            X509v3 Authority Key Identifier:
                keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:dc:de:50:dc:ae:ca:8c:38:20:30:37:28:fe:cf:c3:1f:
         88:d2:73:63:07:d5:fd:7b:36:88:36:2a:b0:7a:4c:0c:2a:07:
         08:b8:21:9f:ae:fc:ca:3e:6f:49:44:be:91:dc:28:58:22:4e:
         5a:5e:cb:c1:de:c3:8e:db:8b:04:16:8b:ab:a2:40:1a:71:3e:
         12:cd:ee:21:3e:6e:19:b1:a5:45:2a:43:02:05:7b:2b:82:9e:
         80:84:11:fc:9a:26:77:ea:b4:39:98:c9:ad:ad:ad:ba:44:26:
         e9:9a:c9:50:d6:eb:69:59:8e:0e:b2:4b:f1:97:63:26:54:7d:
         bf:42:a4:87:02:77:7b:bc:ed:8a:cc:53:e7:e1:3e:4a:77:a2:
         ca:0b:e1:90:48:30:fd:c6:57:d7:9c:9a:67:f1:cc:c0:81:12:
         0c:1a:04:c6:5d:51:50:0b:21:dc:89:2a:39:35:97:1d:16:9a:
         e7:29:5d:98:0d:b0:71:bc:74:61:3f:d3:12:77:7b:57:e4:9c:
         45:e8:4c:56:23:84:37:5f:f6:04:cf:76:46:f9:9f:39:d5:53:
         a0:97:91:f2:ce:ab:ab:72:4b:83:dc:f3:1f:32:72:da:8e:ae:
         89:1b:f3:5a:53:68:cd:00:68:9e:5a:c9:6d:8a:2f:c2:36:46:
         77:a8:9f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----