Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File:                     Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier:          dlu1NhdWz4jhDwRsJbZ6fawX9eeyU4pCKgIF1cEFpao=
Subject key identifier:   66:6E:4A:FC:4D:D8:81:B5:C7:58:EE:00:58:8E:7B:67:13:79:EE:B2
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer:       /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial:       01962E61BF468B20AC9FFAABEA8813133AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number:          0137
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: ZS+FdVgy9uOF1rybYCmLhy15KmE91z+TpL8VcoTNf2c=)
                          2: gH87DnFCIVeDMCdzZgdgeo0PCRQ.roa (hash: pS4ieprkTVj7xtpm2D2Dk/zZSNZ4iIRcoOU3KEt530k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bf:46:8b:20:ac:9f:fa:ab:ea:88:13:13:3a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=666e4afc4dd881b5c758ee00588e7b671379eeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:6d:10:f6:1d:be:f1:78:d1:03:ef:13:16:
                    ff:89:24:40:43:fd:f5:b0:ff:55:f8:57:a0:b1:fb:
                    53:bb:7c:f4:3c:e8:3f:45:e1:39:c9:ab:2b:2b:90:
                    80:b2:f6:c2:fe:a6:35:db:54:b7:07:ac:9c:c1:c5:
                    46:a6:69:eb:d6:89:12:1e:e7:7e:3d:9b:41:2f:fc:
                    7e:79:f4:7b:8b:f0:e5:d4:51:a9:75:5e:58:34:16:
                    19:80:14:63:fc:95:17:83:6f:ac:a2:46:b9:38:22:
                    92:99:cf:48:dc:ef:3e:57:9b:5c:f7:4e:1c:bd:2b:
                    2b:b4:80:de:f2:af:fe:3f:4b:5d:83:07:a9:0a:a5:
                    78:bf:b8:ae:51:59:f5:42:64:ae:7f:de:c8:19:9b:
                    d7:a2:b0:b2:01:e5:f0:74:6f:35:68:82:34:83:ab:
                    12:f4:f2:1c:bb:d8:cf:2a:46:a6:c7:53:61:46:3b:
                    8e:f0:c7:23:ea:78:3f:42:65:03:4b:cc:7f:12:08:
                    7f:95:11:62:7c:2b:77:41:c1:27:5d:ed:79:6e:b0:
                    c0:a0:60:84:fe:5a:4f:1c:12:59:b5:1a:c6:21:cd:
                    34:c0:fe:99:69:cd:d0:3f:d9:d4:9d:c4:88:6e:dc:
                    2d:5e:c3:49:bf:2c:f6:30:aa:35:22:4b:97:5e:97:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6E:4A:FC:4D:D8:81:B5:C7:58:EE:00:58:8E:7B:67:13:79:EE:B2
            X509v3 Authority Key Identifier:
                keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:5f:32:5e:cd:6d:73:fe:41:99:54:fc:c5:40:07:2f:59:
         e2:90:a2:c1:41:0e:9b:4e:d3:80:5c:ea:43:a4:4a:99:bf:5c:
         2f:2d:7f:df:40:ee:ff:fa:a3:df:d2:c4:54:8f:05:60:4a:5a:
         a8:60:37:04:ff:8f:b6:e5:68:9b:da:2c:53:5d:36:d2:e8:f8:
         2a:26:8d:5f:15:32:79:e1:15:e0:c8:11:44:06:4a:31:68:e9:
         4e:65:d4:90:e9:9c:39:29:08:11:24:91:aa:3d:61:cc:43:50:
         dc:fd:cd:f0:f1:b1:ea:96:97:fe:91:1c:d2:7a:97:6e:df:95:
         bf:cf:23:74:84:89:b5:60:34:db:92:9b:f8:41:58:73:6c:77:
         d6:20:2c:06:ff:f9:67:d0:d8:fa:43:15:da:02:bd:1a:43:9f:
         8f:ca:9a:e5:22:f6:79:cd:41:2e:19:3f:ca:f6:54:0c:a4:25:
         a4:db:50:ca:32:1b:a9:98:ad:45:59:53:db:26:7b:30:c0:3d:
         91:03:38:d1:6f:42:67:4c:6a:80:f4:c8:f3:28:48:3b:3a:bb:
         65:ca:7d:44:4e:a1:d1:38:af:6d:e3:9b:3f:bd:3a:60:d6:76:
         26:72:84:19:f2:e1:18:22:6f:71:e2:13:6b:42:cc:b1:f2:3c:
         fc:89:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----