Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File:                     Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier:          vKJuB/+MUP+q5vca4Cymr89i2Cpg3tVmSfK+gqjttu4=
Subject key identifier:   2C:EF:7F:F3:7A:D9:2F:27:BD:B8:C5:19:CC:BE:A8:D3:2F:61:B9:99
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer:       /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial:       01962F069CD384D29092AA4F5287ADC79253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number:          3E
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: JVzSY0ZQllOWtPOMTMVdOLG6YQspfQyDjsRO/nU6rjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9c:d3:84:d2:90:92:aa:4f:52:87:ad:c7:92:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=2cef7ff37ad92f27bdb8c519ccbea8d32f61b999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:65:7a:65:9e:ad:29:e6:f1:0a:c1:31:45:
                    07:1b:0e:73:c7:2f:a2:57:b8:6c:7c:f0:21:58:ed:
                    bb:43:5e:f1:22:66:f5:d3:65:d4:d1:49:4b:7f:c9:
                    e2:b1:78:da:41:ce:8a:46:30:db:b7:35:39:58:6b:
                    84:ea:a8:3c:41:03:8f:b9:41:70:dd:01:af:ff:4b:
                    ca:8b:a1:76:d8:df:9e:f1:63:ca:dc:e1:00:16:6b:
                    fa:eb:da:99:4b:ea:5b:91:1d:e7:a8:05:c7:ff:1a:
                    99:6b:d6:c2:f3:17:c7:0e:5d:85:54:c2:f4:d7:7c:
                    40:4d:13:c5:a6:d8:60:c6:83:3b:a3:8d:28:69:8d:
                    d4:dc:7f:db:78:38:0a:54:8a:78:4c:63:d3:16:33:
                    56:4a:0c:18:0b:a3:46:f8:45:46:89:90:e6:36:54:
                    11:b6:53:97:67:3e:41:3b:5e:b7:19:87:a4:40:64:
                    b3:79:94:95:d2:62:90:8a:b5:50:4b:f5:04:ff:07:
                    f8:be:81:bf:3d:be:b9:6c:6f:93:c3:f2:12:9e:57:
                    1a:ad:0b:56:87:54:23:c1:dd:26:1f:91:54:40:b7:
                    d4:6a:09:9c:d1:bf:4e:5d:b0:fb:6a:f2:e6:84:c3:
                    33:6a:44:97:3c:10:7c:7a:c5:92:7d:7d:b8:cd:8b:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:7F:F3:7A:D9:2F:27:BD:B8:C5:19:CC:BE:A8:D3:2F:61:B9:99
            X509v3 Authority Key Identifier:
                keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:1f:ac:d9:2d:69:76:b3:b2:5f:60:2c:2e:e1:5c:ec:33:
         47:e7:20:f8:b4:37:79:f3:3d:49:53:91:77:1d:2c:92:63:54:
         d6:35:2c:88:b6:1c:4a:4c:2e:09:8f:04:f9:6e:c1:01:9e:c7:
         10:28:57:aa:ff:62:4a:f2:28:6e:46:8f:5d:93:40:40:20:dd:
         23:5f:e0:0b:d0:cd:01:bb:27:27:78:e0:10:02:b6:ee:87:8c:
         5b:fe:b1:d6:96:74:a0:0e:80:09:ae:ae:68:b0:70:18:2d:05:
         58:22:94:b8:6f:05:33:cb:48:c8:b0:de:89:11:5a:a5:61:20:
         4f:1c:0e:e3:54:1c:df:6b:83:1b:95:61:5c:05:e8:fa:88:a9:
         df:b2:d2:27:ec:97:d6:b8:6a:5c:8f:03:33:94:d3:7d:53:31:
         29:53:5d:4d:db:f6:06:2d:38:87:09:60:3e:38:8c:00:22:71:
         9c:7e:08:97:40:ab:79:0a:76:10:77:37:a3:d8:4a:23:33:2a:
         d6:ce:72:44:ac:aa:87:20:f3:8d:ee:f6:a6:f7:75:34:8f:11:
         d3:40:b9:1b:af:de:d5:91:63:c8:b2:99:e7:42:0e:21:d5:d6:
         f8:ae:82:dd:ae:75:53:8a:93:0a:71:91:17:ee:0d:dc:2c:c7:
         90:13:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----