Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          CPGsmRu34bqYXZBqcOZg/eqSD4mNwSD7a9mSjLiDvyE=
Subject key identifier:   53:9E:D8:F8:EE:3A:82:91:E4:7D:3A:B4:3F:83:44:53:7D:07:0E:73
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       01962E99372FDEEBCCE283F6101690ED145D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: G6NrW3y5EqOh-RgJpBb737yZLyk.roa (hash: wCHunDZi4NJcQQFd2igk175J53d+RrxOeT27vR93kLI=)
                          2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: zjv/5aAdEuyPZGd1mZdbaKljVT5S4cYveET+xtWxdY8=)
                          3: gzfX_YElaVuorbJFmzrDP83HpJs.roa (hash: /WT8uVeP+a0ogLSqro0SWXG/OOSeISwxGQticrGht7k=)
                          4: iIuGz7RbK5-6_sH4vM6hDlbmm84.roa (hash: NR09n14cZ06DE+j7XwmogKyYaQjIh4GJAdSuXipSGyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:37:2f:de:eb:cc:e2:83:f6:10:16:90:ed:14:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=539ed8f8ee3a8291e47d3ab43f8344537d070e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:e1:7a:f2:18:30:d6:d1:9c:03:ac:ad:ef:
                    84:dd:b3:37:2c:a8:b3:bb:b8:31:74:5d:89:3d:80:
                    21:85:44:ef:ce:58:4c:0e:bc:71:09:63:bb:5d:da:
                    20:d0:1f:e8:98:3d:b3:57:c3:18:60:68:56:3a:52:
                    a5:8c:21:25:93:48:f4:80:46:c2:99:44:49:eb:d8:
                    9a:70:82:a7:d2:0e:db:f2:84:9d:95:61:48:f1:c0:
                    77:7a:5d:76:d4:71:ff:f8:60:ea:91:70:90:49:8c:
                    aa:8b:8c:52:91:8f:a0:98:ec:1b:c9:7e:db:4c:52:
                    02:a7:f2:2b:ab:49:b1:e9:c1:9c:df:f9:1b:aa:b6:
                    a7:eb:6f:18:34:5e:3b:ac:fb:14:f8:11:2c:b5:5a:
                    1f:ef:dc:f1:6f:6f:2f:dd:36:c9:ee:14:d3:42:fa:
                    a7:b3:e9:99:ab:61:46:4c:fd:f2:e8:f9:94:7c:91:
                    6e:b0:34:b3:75:8e:f5:8e:d3:95:e1:51:aa:ac:a4:
                    36:90:39:cd:7b:f1:18:94:28:86:7d:21:aa:c9:a7:
                    44:a8:27:16:be:df:8f:72:40:84:1a:0a:87:d5:7e:
                    23:8b:f6:75:d4:bf:1a:0d:d4:bf:12:cd:01:a4:9b:
                    f8:e5:2b:54:fc:30:d6:be:77:68:e6:81:3c:0f:35:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9E:D8:F8:EE:3A:82:91:E4:7D:3A:B4:3F:83:44:53:7D:07:0E:73
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:82:f7:e9:d2:0a:c8:6e:51:21:54:58:92:10:e1:0f:5e:c3:
         dd:2a:63:f2:3e:bd:52:42:4d:b2:a5:df:de:2c:63:2e:58:81:
         5f:66:c9:44:dd:88:59:21:3a:58:29:15:6d:19:0e:dc:e1:6f:
         40:97:60:b7:55:cc:bb:2e:d4:f4:db:4d:a7:62:f1:96:38:45:
         e4:f6:0b:5b:db:30:65:71:56:9c:0d:98:54:48:38:af:e8:37:
         df:ae:3a:22:a8:5d:4c:a3:26:9d:fa:21:67:43:ff:77:51:d4:
         74:d6:71:c6:4a:8e:0d:41:fa:73:62:17:c8:96:f1:de:66:26:
         d0:ae:db:09:fd:8d:f8:13:97:2c:6d:85:14:35:3c:c5:4c:ee:
         08:61:31:05:63:1d:55:e8:d3:e1:7c:14:dd:2f:23:fc:b5:75:
         7b:e8:38:4d:c9:21:5a:11:48:38:29:ca:a1:1e:9f:03:6f:a0:
         8d:55:f3:fc:4d:ea:e9:cf:ba:16:03:17:04:7d:0c:df:f0:08:
         77:fa:4a:d8:71:95:86:df:3a:2d:29:d2:0f:34:ec:3c:c8:3a:
         50:ed:bb:87:64:69:53:a2:bf:50:e5:53:1f:d7:51:a2:fd:a5:
         8d:49:6d:4d:9a:c0:88:78:61:60:08:31:ac:94:29:da:5f:7f:
         5a:49:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----