Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File:                     Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier:          B2S3wOYx9EFM1XPG3HP2eyR3YLGCMLct92Zi/r5TxOs=
Subject key identifier:   A3:AE:75:5B:89:71:43:6C:2F:3E:FE:95:E1:6B:1A:CF:EA:CB:A2:3C
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer:       /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial:       01962E6197B53260C20B8FA948BA6B391B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number:          01E0
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: CbXxGQRKRbb38CxoJ+4guRpQyfVAFpNHkrmE0YZwqhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:97:b5:32:60:c2:0b:8f:a9:48:ba:6b:39:1b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=a3ae755b8971436c2f3efe95e16b1acfeacba23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:53:29:63:5d:34:7a:17:0b:14:01:38:29:
                    23:21:fd:eb:6c:ce:aa:d8:60:49:12:f0:4a:8a:df:
                    5f:51:99:02:89:d9:53:c2:38:87:75:d5:ab:ab:17:
                    98:52:65:65:75:ef:d6:00:2d:9c:06:1c:70:e5:8a:
                    05:76:0d:eb:d1:4a:06:f5:91:1a:c3:2a:c7:65:4f:
                    da:1c:23:6a:c9:b3:af:d1:d9:dc:f9:a4:f0:d1:d1:
                    4e:e5:a0:99:52:90:e7:7a:50:05:f8:bc:9d:d1:f8:
                    3f:b1:7e:02:0d:2d:d5:86:aa:5a:5f:9f:75:37:38:
                    d7:d8:0b:9a:b7:68:d1:89:22:61:93:53:6e:bc:65:
                    5e:15:2e:20:a9:a5:a2:f1:49:7b:80:d6:66:30:5c:
                    4f:6e:46:9c:3f:e2:39:8d:72:f5:11:e2:ed:49:66:
                    d0:90:d6:60:54:7e:81:28:d0:0c:9a:92:52:1a:19:
                    8c:be:3f:20:58:a2:75:81:28:ab:a2:60:30:1b:81:
                    c3:e7:ed:2d:21:bf:7d:db:bc:bb:a8:7e:7f:42:19:
                    98:4a:29:a3:a0:f4:b0:e7:bd:54:08:91:35:b5:1c:
                    62:50:f3:e7:c0:42:de:15:88:37:f8:64:43:f2:f6:
                    cb:32:5c:4f:93:bf:1b:e0:3f:09:10:86:0b:d7:ce:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:75:5B:89:71:43:6C:2F:3E:FE:95:E1:6B:1A:CF:EA:CB:A2:3C
            X509v3 Authority Key Identifier:
                keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:74:7a:d9:07:d0:89:b7:d2:6a:e6:f3:6b:0b:74:b2:59:
         99:15:67:69:89:64:17:c9:61:d2:15:23:42:0d:ca:dd:04:1a:
         b7:9e:6c:2e:8a:55:e9:fb:05:1f:c6:b4:94:35:65:1b:07:7a:
         01:30:0a:74:33:da:35:e9:2f:3a:db:de:3e:04:88:3a:4d:cb:
         c8:ba:81:2f:49:93:30:7a:d6:6b:d4:4e:15:22:02:0a:f4:de:
         e3:f4:d0:20:86:7b:1f:4b:f6:f6:bd:ae:ee:8e:84:ac:5a:14:
         72:35:03:e7:47:e7:b4:34:47:4d:2d:4f:1e:ca:12:40:32:fe:
         41:a5:71:27:06:06:e4:b8:c7:34:86:60:f6:7e:25:82:c1:da:
         ef:b4:f7:09:f3:99:f3:f8:a7:5a:dd:31:8f:cd:c9:dc:e5:01:
         79:6a:86:08:fc:3c:ba:31:06:a8:7a:ab:0c:59:f3:ec:2e:a0:
         f7:da:24:fb:f8:14:24:5e:84:e2:2e:ff:1d:87:12:da:ab:2f:
         c6:c9:67:b9:f4:40:c0:1f:9b:35:a1:b0:02:c5:42:70:c2:3b:
         31:03:b4:cf:59:fe:8f:83:6c:78:55:c6:4c:8f:56:60:a8:99:
         f0:ea:af:ed:8b:a7:2d:51:6c:a2:e5:e2:a6:8d:bc:25:31:36:
         d2:9a:d1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----