Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File:                     zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier:          3z1q4JlwH+b2jaqkCzas8OhsZfKd2JRNyuvVRez6Yi4=
Subject key identifier:   70:D1:C5:41:CA:4F:BA:CF:E5:DE:78:B2:6A:18:B7:57:67:3C:8F:C1
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer:       /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial:       01962E98BE3ED73A02002E63E1468384383B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number:          0E8B
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: V5/wf2rsA46nKLYnwXQlGoZfmulhXujbvIfULSRG8KU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:be:3e:d7:3a:02:00:2e:63:e1:46:83:84:38:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=70d1c541ca4fbacfe5de78b26a18b757673c8fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:94:7b:13:40:74:d3:a7:a5:e8:2c:59:97:
                    1f:a2:8e:56:2a:59:26:cb:bb:3e:75:67:48:da:c8:
                    b9:a4:fc:1d:4f:ef:65:80:99:fb:a8:4f:7b:32:55:
                    49:81:dc:0a:98:f3:6a:65:3e:7e:78:c3:7e:ec:38:
                    dd:3e:89:7a:49:92:2b:66:ac:5a:82:5b:dc:4d:57:
                    d5:03:e1:b1:90:6e:53:d8:87:55:7f:ac:2d:02:a4:
                    2b:1a:6a:bf:ea:ff:89:c2:c9:33:58:c1:2c:29:02:
                    ba:c9:f5:84:a8:f7:d6:29:ee:bd:eb:dd:0c:5c:03:
                    79:c0:a3:03:2f:f3:da:d7:da:05:cd:93:1c:d1:5f:
                    2a:62:1f:cb:65:18:55:3e:2e:aa:43:80:77:4b:b1:
                    0e:14:12:48:78:3f:71:25:2c:3f:63:f6:2c:52:c8:
                    71:3d:eb:8c:29:e3:45:36:2c:55:e0:2c:49:47:29:
                    90:f6:da:0a:cb:aa:6e:10:51:70:47:a1:28:d4:a3:
                    12:e6:5b:e0:d1:ef:39:1f:3b:e3:ea:48:09:6e:64:
                    f6:52:26:4b:28:8e:44:d1:2c:a8:2e:fb:8f:e9:79:
                    6a:9b:7e:cb:3f:bf:c1:2f:71:bf:d4:ca:37:fe:4b:
                    b1:32:49:13:ca:0c:24:21:82:78:ef:70:f7:c1:56:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D1:C5:41:CA:4F:BA:CF:E5:DE:78:B2:6A:18:B7:57:67:3C:8F:C1
            X509v3 Authority Key Identifier:
                keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:60:84:58:aa:f3:3f:6c:b7:45:57:8d:78:fb:6d:72:c2:9d:
         25:ea:80:e2:26:5b:62:7d:48:f6:e1:8d:f4:0c:f8:9e:1b:de:
         57:90:ec:64:4e:20:1b:ad:84:c0:21:cd:2e:55:70:91:27:13:
         48:6a:17:96:b8:13:40:21:69:94:95:5f:bd:db:60:da:ab:06:
         4a:88:d0:de:33:3d:ea:13:78:aa:0f:d8:35:cc:29:ea:d3:c9:
         d2:f5:6a:66:2d:cd:29:06:02:de:22:ed:4a:1f:9e:1e:3c:ad:
         ad:1a:e5:0d:b5:a5:08:35:70:76:68:66:d5:4d:43:42:af:4c:
         b6:08:7b:1a:3b:15:8c:83:6c:60:01:be:63:be:30:64:42:1f:
         1d:90:63:c8:5d:7e:ad:8b:8a:2a:40:63:87:1f:a2:0c:de:e5:
         9f:9d:9a:11:5e:b2:3e:b9:07:6c:ce:0c:3c:03:d1:d2:af:16:
         2d:eb:df:2e:93:50:c3:4b:b9:e3:49:0c:4a:8e:97:c5:24:a5:
         f0:55:e5:e0:be:41:4c:49:44:85:4d:7f:3d:f3:22:16:a3:ab:
         11:99:e1:a0:70:5f:b3:a8:14:d0:1f:6d:6f:2e:90:9f:29:af:
         58:c8:34:bc:f2:e7:98:e3:0c:3e:86:7c:7e:9d:36:f7:d2:5f:
         05:68:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----