Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
File:                     _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json)
Hash identifier:          n9/SlMgxuyB+GivSgrFUwbY+96hw5WHh1G/4qFU58Hk=
Subject key identifier:   E0:EE:92:F2:22:F9:16:A1:4F:4C:3C:8E:89:FB:1B:9B:61:2A:F7:CF
Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
Certificate issuer:       /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Certificate serial:       01962E999239B2FEC469BA89CA52B21EC0BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
Manifest number:          94
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: idP0U4oDzOYR7HtS6mok8WaXZO2us7fQnruq13glJK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:92:39:b2:fe:c4:69:ba:89:ca:52:b2:1e:c0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=e0ee92f222f916a14f4c3c8e89fb1b9b612af7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:ae:85:25:b8:93:0f:e1:c0:76:2e:fc:18:
                    7d:e1:04:db:32:27:70:76:b9:70:63:4b:69:a5:20:
                    05:05:d9:1b:95:0a:9d:91:cb:2a:b1:d9:8e:41:01:
                    95:74:b5:b4:fa:85:bc:3c:ff:39:26:af:04:3c:cb:
                    77:11:be:ef:78:8a:4c:ef:66:09:0f:f8:6b:8e:c9:
                    cd:d5:db:94:3a:ad:cc:0a:4b:4e:59:68:61:e8:c0:
                    b9:4e:98:c7:65:b6:ca:bd:fd:8f:4c:bd:5a:42:da:
                    3b:5e:c9:8f:84:10:a3:98:aa:9f:77:1c:c2:33:49:
                    07:33:24:c3:89:43:17:5d:f6:5c:2c:c3:cd:b9:fc:
                    57:24:64:c2:5a:04:b3:5c:a1:5f:57:c7:b2:16:e2:
                    b3:2b:5e:1b:5b:e1:ca:16:b7:2f:68:de:11:e4:5a:
                    c7:1e:e2:79:f4:8a:f4:e7:6f:0e:47:3f:05:be:cb:
                    dc:d0:30:92:69:cb:0f:2b:92:aa:26:3a:c2:9b:25:
                    3f:21:5c:7d:5b:58:45:c4:2b:a2:b0:3c:87:cc:e3:
                    ac:6a:a8:e3:07:9e:32:8d:40:05:c8:d2:8f:b1:8a:
                    d8:da:38:ac:1d:61:f2:24:c5:8e:8f:e5:5e:18:a9:
                    35:1a:4a:49:7d:89:4d:c1:06:04:4f:5d:d7:63:49:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EE:92:F2:22:F9:16:A1:4F:4C:3C:8E:89:FB:1B:9B:61:2A:F7:CF
            X509v3 Authority Key Identifier:
                keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:aa:ab:da:44:5a:39:9f:d6:fb:10:22:63:8c:17:4f:62:
         2d:84:66:82:6c:ea:a3:e8:d5:04:8c:d0:7b:12:62:d5:13:df:
         d9:36:68:38:fc:c9:40:63:e6:ce:62:dc:b0:c6:a2:09:d5:2c:
         f9:61:6e:e5:dd:03:6b:30:19:bf:74:d3:47:29:0f:a8:a0:0d:
         9f:f2:98:b5:27:4b:9c:08:c5:5a:e5:23:bd:30:4f:21:54:bf:
         56:1c:01:a5:a0:25:3f:db:44:30:a3:17:1e:68:ae:35:10:7e:
         bb:8a:22:70:9d:97:75:6b:b7:cc:82:93:ba:e8:28:3d:da:11:
         78:fe:7b:ad:82:06:65:20:cd:33:0a:0d:c4:b0:38:bd:3c:23:
         68:e7:19:d8:79:28:69:4d:d2:44:9f:9b:f8:34:89:38:39:49:
         d2:21:e8:9b:91:36:ad:eb:0d:1d:28:06:da:03:e5:50:a7:f8:
         db:41:4d:28:88:59:94:ef:0a:4b:80:44:e8:11:79:70:d5:f8:
         c2:2b:b4:77:6b:8e:02:66:59:12:44:6c:91:e7:8c:d9:9e:43:
         48:98:9f:11:9e:8d:4c:48:4c:57:48:79:3d:64:8a:5e:0f:d5:
         56:7b:39:d0:38:fd:05:78:6d:59:6c:9e:3d:79:05:ff:3d:4e:
         6f:e8:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----