Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File:                     ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier:          sBr7dw8zBywNbuhxLSJzvie9jJKtYwiSTiNK9GHlla0=
Subject key identifier:   B8:98:5D:25:2A:F4:AA:22:EC:FE:94:50:F1:AC:28:D2:C0:4C:9B:4E
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer:       /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial:       01962ECF4DFB7B4D78A5C2796E3ABBFDA475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number:          0170
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
                          2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: LlwqGrQn0BEZjmaMerZTnbZDpu3ULhQ2o15Gy/c5BBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:fb:7b:4d:78:a5:c2:79:6e:3a:bb:fd:a4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=b8985d252af4aa22ecfe9450f1ac28d2c04c9b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:f4:4b:7a:17:2e:1b:c4:2d:01:28:ea:63:
                    d4:d8:0b:b3:9e:ee:10:19:cb:cd:c5:58:ad:d6:a3:
                    fb:a7:21:7e:fd:f8:cf:31:01:27:98:4d:56:fd:92:
                    7b:19:1d:b7:38:bf:18:b4:a8:80:93:33:c5:55:79:
                    62:b8:55:a3:fd:95:06:22:ef:e5:87:4d:b0:8d:ef:
                    3e:65:c5:cf:f6:28:81:16:b3:6c:ba:d1:46:f2:ce:
                    ca:6b:8f:e2:85:1f:05:ab:2a:a4:d2:a6:e1:f6:5d:
                    02:9c:a6:14:91:39:90:21:8d:b0:b0:31:2a:88:62:
                    3c:6a:49:f9:c2:ba:76:56:37:74:cc:d5:8e:36:df:
                    b8:ca:55:a7:6d:40:82:0a:8b:ce:2f:6c:11:85:94:
                    f7:a4:83:17:03:29:53:cb:36:ee:8e:ed:65:4f:b1:
                    24:7f:36:14:8c:54:dd:04:58:7f:6e:a5:90:cf:1e:
                    e4:0a:36:fd:e5:8a:51:a4:ad:7c:b8:b6:0a:ab:66:
                    07:a5:8c:da:3c:49:ee:03:93:ee:1e:1e:a8:52:4a:
                    e0:af:19:94:62:b1:5b:da:6c:89:00:be:b8:88:f3:
                    fb:ac:d3:0b:14:8b:23:30:a8:45:f8:88:ea:37:21:
                    c0:1b:55:a4:96:09:b1:88:f0:c1:a8:85:7f:72:9c:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:98:5D:25:2A:F4:AA:22:EC:FE:94:50:F1:AC:28:D2:C0:4C:9B:4E
            X509v3 Authority Key Identifier:
                keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:bc:e3:28:20:cd:8d:c6:5e:82:68:da:6d:b9:57:44:77:
         c3:8f:e3:ab:0c:ee:a1:1c:4b:0c:a3:df:58:15:7d:e7:f5:2d:
         90:c7:d6:5e:00:d1:cc:81:fb:9f:25:3e:81:07:a0:1c:3d:17:
         11:c0:5f:b7:f1:13:dd:3c:51:c6:bb:9d:64:27:a1:4f:f4:31:
         0b:bf:ab:b6:fb:d2:8f:cc:0a:52:47:31:73:72:77:48:ae:7e:
         86:e7:4d:17:9b:9a:d9:fe:20:61:09:f5:1f:09:f0:94:f3:74:
         f9:8c:2a:a1:8c:6b:12:bf:f3:19:7e:04:b8:90:2c:20:06:ac:
         9f:03:b3:fc:4d:fd:fb:bf:e9:84:09:c6:76:55:43:67:4e:fa:
         b8:f4:7b:c4:14:5e:d1:26:9a:97:32:da:a6:0b:15:24:f1:8d:
         d2:f2:ce:38:a6:3b:78:f0:e0:12:e0:5e:91:9e:f4:8a:ef:7d:
         76:3e:e3:70:ac:8b:ed:95:cd:5c:f0:f9:83:bf:da:9f:e5:67:
         be:88:d6:59:0e:4b:23:67:b0:06:e8:0e:01:8b:83:57:ff:7d:
         41:1e:6e:1e:e9:e1:e9:f1:84:e0:9e:36:31:65:9b:bf:54:b1:
         2b:3b:d3:f9:d4:97:8d:cb:88:c9:a6:93:46:c2:89:29:cc:21:
         6c:32:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----