Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File:                     zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier:          l3W21NbCUGai9XCIXGeg3fvtVNyTHoEmd6dBYbnRc+I=
Subject key identifier:   82:2A:81:79:12:3D:2A:77:11:EF:9F:CE:88:2A:2E:EC:FF:43:CD:5D
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer:       /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial:       01962E2B172D2E330AA43B7FEC7B9F9E351D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number:          0D9B
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
                          2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: e3+G9EMx6FJRb8Na+EIVVpbZcCkUDOx08ggVDVoImi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:2d:2e:33:0a:a4:3b:7f:ec:7b:9f:9e:35:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=822a8179123d2a7711ef9fce882a2eecff43cd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:2c:a3:b3:7f:a8:57:c3:ad:67:ab:16:83:
                    40:4c:b6:83:4c:2b:7f:f7:cf:c7:77:fb:3d:09:a3:
                    17:c5:30:e8:db:9c:56:34:60:0f:2d:1f:45:73:a0:
                    b6:ed:f7:9a:70:7f:43:9c:8e:b5:01:b8:d1:99:78:
                    59:4b:f8:22:25:37:11:7e:7e:9f:25:7c:22:06:b9:
                    d2:43:ac:30:00:b9:c4:52:ac:0b:43:5d:63:18:56:
                    86:39:e7:d5:26:1a:a3:a3:3f:15:88:8f:1a:be:b3:
                    a4:c0:eb:2c:6d:dc:40:88:73:19:79:dc:c0:84:37:
                    f0:b2:df:ae:0a:68:f1:12:31:e9:bf:61:da:94:35:
                    69:7a:02:d7:f2:81:5a:c3:d8:54:99:2b:67:5b:11:
                    3c:da:bc:b5:0b:0e:ba:c8:8c:fa:4a:fa:8a:f0:2f:
                    47:44:d9:e6:4a:ad:12:9e:34:1c:45:88:28:f0:a0:
                    44:fa:86:89:a9:82:9f:3e:a2:87:ef:f3:28:4a:40:
                    26:32:43:ac:45:fd:1b:7c:19:c4:21:7c:4d:2a:8f:
                    8c:0e:17:29:6a:19:43:11:70:17:33:22:7a:09:9d:
                    81:77:b7:ea:fc:ca:a5:52:f3:7a:09:a7:82:96:4c:
                    8b:f6:bb:5f:23:b7:ae:fd:7b:1e:d6:99:85:b8:c3:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:81:79:12:3D:2A:77:11:EF:9F:CE:88:2A:2E:EC:FF:43:CD:5D
            X509v3 Authority Key Identifier:
                keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:de:7c:c3:d8:73:c3:0c:7a:5b:61:18:97:09:cd:17:e2:
         61:f3:c1:c7:96:64:c9:ac:d6:82:d3:58:ff:c8:c9:2e:b4:58:
         05:20:26:5c:b5:08:4b:e9:5c:8c:90:a3:2d:74:2d:80:5f:41:
         9d:1d:40:00:a3:17:d3:fd:c4:c7:e8:9b:44:c2:75:b4:0f:83:
         d6:33:bf:36:3a:ae:c8:c8:3c:eb:c7:8d:6c:7f:35:9e:71:37:
         1f:fa:6f:be:18:51:5f:37:d9:6e:83:ca:9f:30:87:b9:8b:42:
         90:e5:49:2b:ac:0a:6e:35:e9:f8:85:a8:4f:15:de:92:c8:cd:
         6c:06:30:ca:ac:0f:df:f3:8f:94:36:da:02:cd:fc:ed:6b:d3:
         d9:1d:12:ee:60:aa:7f:d7:42:81:43:8f:c6:80:bf:8d:47:56:
         6b:d3:7b:ba:9e:9e:94:af:5c:d9:e0:73:bb:54:f0:32:9e:66:
         06:e8:95:c1:08:ea:f1:ac:a4:d6:47:4f:0c:04:2f:ea:72:94:
         e3:b5:43:88:7a:59:ff:bc:13:2b:a3:6a:69:15:d0:ff:b2:64:
         c9:7e:3e:a0:e0:b4:18:e1:2c:d6:f1:e3:4e:f7:8c:78:76:39:
         aa:04:8b:4b:bc:6b:96:32:b6:63:66:78:25:2c:c7:1f:03:b3:
         b1:72:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----