Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File:                     ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier:          9oawBAsI9Rcr0cj6ee22S5iA0TOI3HMigIn+jwPFstU=
Subject key identifier:   CD:90:74:A3:C8:BE:29:1C:8F:77:4E:31:AE:83:70:97:4A:02:6A:6E
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer:       /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial:       01962E988B07BC3F80B6537CD07438DF45EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
                          2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: v02TRla5rO13wXXfrpjXCW+6ptM3RSNDWjtskcMVmJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8b:07:bc:3f:80:b6:53:7c:d0:74:38:df:45:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=cd9074a3c8be291c8f774e31ae8370974a026a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:df:77:ec:be:4a:33:e3:db:07:3c:50:bc:d8:
                    3e:07:51:76:e8:86:f4:a0:ce:4f:fd:53:8d:fa:04:
                    99:45:5c:58:75:d3:b9:e2:b8:96:aa:83:e3:2c:56:
                    e7:1b:d1:12:91:91:22:26:12:d0:eb:a1:6c:c8:aa:
                    2e:c9:35:43:0a:23:72:10:89:f2:4e:8b:6b:74:df:
                    fd:a7:98:e9:d1:72:42:21:58:b1:77:14:f9:91:af:
                    4b:e6:36:81:48:4b:d2:a2:16:af:ef:37:e2:7f:3e:
                    42:8c:3d:2f:f1:c7:75:26:95:fa:8c:cf:10:bc:38:
                    c0:e1:04:d6:16:ce:63:37:0f:0a:4f:6f:28:42:54:
                    fa:f8:e1:95:3a:d2:ed:75:f1:3d:21:17:e9:c2:e0:
                    5f:ce:ee:6e:38:44:88:b4:8c:93:4d:c5:8f:ad:99:
                    fd:25:82:23:29:06:80:3a:32:df:fc:0c:21:df:94:
                    b7:64:e3:55:9d:4b:02:b4:5b:e0:c6:f9:b3:14:cd:
                    ed:89:69:5f:b6:06:78:5a:28:2d:31:4d:17:30:3f:
                    f5:77:bb:d9:b8:47:a8:29:0b:a3:69:a1:02:f8:b4:
                    25:28:52:66:2f:00:5b:09:8a:26:b3:b1:eb:4f:f6:
                    22:2b:f5:fa:76:dd:c5:ef:6c:80:6c:0e:95:7e:7b:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:74:A3:C8:BE:29:1C:8F:77:4E:31:AE:83:70:97:4A:02:6A:6E
            X509v3 Authority Key Identifier:
                keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:6d:bb:23:fd:e6:94:f8:fa:62:24:e5:23:5e:ac:d9:88:b0:
         6e:72:eb:ce:82:78:45:51:e1:84:5f:af:cf:38:1e:2c:49:66:
         82:ac:f5:43:30:60:0c:19:1c:3c:b2:cb:a1:6a:31:58:21:7f:
         12:82:bb:9b:1b:47:d7:b5:e4:b2:5c:2d:68:2e:1e:ca:86:37:
         a7:c7:ab:62:8d:02:4e:17:35:29:f1:df:1c:4e:83:c9:78:0d:
         69:83:05:ff:e1:5c:af:89:3f:e3:66:c6:98:13:0e:7b:8b:68:
         a5:fc:82:0e:29:6f:30:bb:b6:11:06:eb:7c:5a:ca:d3:a7:26:
         bc:62:4b:5b:10:2e:4f:df:73:18:ba:82:8f:ef:c6:a6:9a:26:
         5f:b0:7c:8b:0d:b2:58:e2:24:11:18:fc:2c:bf:29:31:8f:f9:
         7d:2a:cd:14:de:c7:26:54:61:e2:18:10:34:c8:4d:17:96:eb:
         b0:c4:fa:52:fb:34:09:8f:d9:fd:d9:db:7b:74:9e:2d:b0:00:
         97:f9:14:ff:ae:91:2e:dc:c5:37:1a:9f:df:13:74:b3:e9:9f:
         23:42:09:98:98:aa:3c:6a:3c:18:43:1b:7b:28:de:eb:a8:93:
         19:12:f7:c7:73:44:1c:36:6c:06:e7:25:b8:d7:e0:a4:c5:de:
         c8:6d:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----