Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          WmxkOGgxJddAIModZm74ZSk/w5b5Cya9mP3rgEdm3dA=
Subject key identifier:   72:6C:E3:3D:16:B0:97:D8:2A:EC:70:E7:C4:DC:10:63:C9:19:32:18
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       01962F3DB3AC25A302D54FF6665B58DA196B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: kSdWZ52UG0EvcnvgL0ql72sDSYgZ/vyRMt2m3m3MRNs=)
                          2: o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa (hash: A2h09hDnc623pPAi/KarvXmKS91Xx49mtAM/lILxzFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:ac:25:a3:02:d5:4f:f6:66:5b:58:da:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=726ce33d16b097d82aec70e7c4dc1063c9193218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:3f:9c:30:67:44:37:7f:05:c8:cb:69:88:
                    17:4b:11:b4:e7:f2:af:5a:6e:45:92:ae:dc:75:08:
                    37:a7:41:e2:2a:f7:38:3c:25:23:8a:03:f7:3f:13:
                    64:84:28:17:60:83:8b:09:03:c1:bb:84:ee:36:31:
                    2e:1e:7d:1a:78:a8:a2:95:6b:55:d9:c1:9d:0e:b3:
                    73:46:f9:4a:5c:62:a6:13:9c:fb:64:d4:da:b6:db:
                    9e:d0:8f:6a:8d:21:2e:b3:86:fb:22:b0:43:4b:18:
                    55:ff:1f:9f:3d:2a:a5:74:b5:3a:83:cc:ee:58:b2:
                    65:c3:0a:c5:d0:8b:8a:43:fe:d7:18:93:2b:2e:3a:
                    3c:22:b4:83:5d:dd:45:7f:14:1e:de:59:82:fb:57:
                    9e:9d:d0:47:8d:e7:e9:68:0c:30:80:f6:0f:d8:e3:
                    86:86:2d:7e:34:ac:eb:4c:ac:7f:9c:ed:b1:cf:1f:
                    bc:14:69:37:27:04:a5:8e:9e:58:64:b9:a7:33:1e:
                    83:35:04:74:fb:08:8c:d1:74:13:1d:4d:ba:86:84:
                    0c:54:8d:30:df:a8:4c:23:e1:ce:88:e7:c9:e6:e5:
                    53:92:85:d6:00:36:b2:03:be:1f:c1:53:1f:00:59:
                    22:d7:96:8a:c2:4f:43:19:93:3b:5f:05:77:55:44:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:E3:3D:16:B0:97:D8:2A:EC:70:E7:C4:DC:10:63:C9:19:32:18
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:46:42:fb:a9:f1:b8:46:e4:10:09:26:b9:c4:c4:f9:e9:31:
         3a:c0:df:27:67:29:c2:24:d3:c0:27:59:58:57:47:ef:38:09:
         34:3d:7f:01:38:3e:03:e2:0f:e3:4e:75:72:14:48:2b:34:a2:
         bb:54:e8:81:a7:8b:b6:5c:a8:c1:79:04:c8:2e:d9:06:34:cb:
         54:93:e8:72:e9:71:df:06:f8:41:e5:de:70:5a:3b:a5:d7:5a:
         a1:9f:2a:b8:5d:d1:55:94:67:1f:9b:db:39:b6:20:57:50:58:
         23:f5:3f:07:7f:60:0f:5d:4f:e1:78:64:89:96:dc:a5:45:31:
         78:f4:fb:a5:ba:9d:ed:9c:e1:93:b6:f5:26:e5:ef:af:eb:cc:
         9a:d0:1f:5c:eb:a5:2f:bf:fe:d9:89:74:44:c5:3e:52:3a:16:
         44:e9:ac:e9:b1:bd:77:99:9d:92:db:4c:56:8b:12:e4:a8:2b:
         af:89:07:68:21:7b:a6:e3:6d:0b:0b:6d:59:a9:2b:e7:f6:06:
         83:d6:ae:2f:e2:04:6d:2c:91:75:66:fa:3a:58:19:9a:b3:62:
         6d:92:84:d9:84:2b:5c:a6:38:d6:21:d8:84:e9:cb:55:37:c4:
         54:d7:df:17:84:d3:64:2e:10:87:93:d1:3a:ac:47:33:b4:81:
         e3:10:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----