Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File:                     dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier:          eViPhY2uDp2EacNqIbIxjrCWIm/eml+KmPw2KyHe2VA=
Subject key identifier:   DB:32:B7:FF:D9:B1:8E:F5:D9:28:70:36:1D:82:36:59:D6:21:E4:D7
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer:       /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial:       01962E99C44AF6F9C4671512CE168D020B0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: +ww8WpzK1psns1Fwi+Qw+rn3Po9qoj9pJoJz7KBz21E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c4:4a:f6:f9:c4:67:15:12:ce:16:8d:02:0b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=db32b7ffd9b18ef5d92870361d823659d621e4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:df:0e:48:7f:51:d0:0a:91:2a:bb:1c:06:
                    63:ac:f6:57:74:ae:e9:e9:20:c8:b1:83:64:f6:9f:
                    31:23:5f:a1:a5:20:b3:61:1c:00:e9:8b:45:be:ec:
                    ac:b2:31:6d:d5:8d:02:31:60:51:a3:e5:92:0a:a9:
                    51:78:60:18:dc:d9:3e:be:37:86:e6:06:0f:02:7c:
                    e0:9e:3e:55:75:68:bb:10:4c:d8:f0:9d:81:c3:79:
                    e5:c6:22:9c:51:37:8d:36:ac:d0:51:ff:e4:ee:49:
                    a9:41:2d:73:86:18:fd:68:f9:22:f2:77:8e:d3:9c:
                    e9:cd:fb:bb:32:cc:00:06:4e:0d:3e:f7:88:9e:86:
                    e5:3d:d4:87:5f:2c:1b:16:ff:23:99:65:9f:de:44:
                    ff:05:a9:66:d9:94:a2:62:c0:1f:bf:62:b0:b3:28:
                    bf:f8:1e:ab:ab:e7:c5:40:81:dc:da:b1:9b:77:55:
                    55:84:bf:1c:6e:28:55:b2:de:23:a0:7b:5e:11:16:
                    39:49:d9:5c:2f:0a:40:40:12:6f:78:43:1d:c9:43:
                    bc:8a:d5:7c:9b:34:17:39:af:b4:2f:0b:7a:f3:02:
                    db:25:62:01:a7:56:cd:10:fc:5c:1e:84:af:24:c2:
                    17:61:72:1e:4e:e6:74:87:c4:eb:2c:25:93:76:77:
                    0d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:32:B7:FF:D9:B1:8E:F5:D9:28:70:36:1D:82:36:59:D6:21:E4:D7
            X509v3 Authority Key Identifier:
                keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:bb:af:b5:19:0b:35:fb:19:95:67:4f:86:91:c5:be:9d:
         14:18:bc:bb:95:d4:06:3d:30:f3:29:fb:5c:6a:bf:ce:1e:8f:
         e5:a1:1b:56:ec:c7:40:f4:48:5a:25:3f:15:3b:a9:0f:b6:83:
         05:a9:4c:1f:2b:63:93:18:2a:22:71:c0:e9:48:2c:7d:18:05:
         30:f8:9b:b1:40:3f:b5:f4:52:23:ea:2d:d8:df:bd:a8:23:4d:
         4a:86:f8:c8:50:73:0e:4b:38:44:c6:3b:26:47:8b:93:53:d3:
         01:b1:51:63:a4:83:6b:14:fe:99:42:14:f1:ac:34:9d:5c:a7:
         b7:3a:e1:bf:ae:ca:4c:35:0c:c7:e5:77:9f:7f:15:2f:d5:7b:
         a4:95:e9:be:39:07:7f:d2:c7:27:4e:bb:02:7c:bf:1a:f0:42:
         57:56:b4:69:00:28:88:de:e1:73:e5:83:cc:13:e1:03:94:77:
         02:78:b0:e0:06:a7:9b:55:23:21:9f:a6:0e:1e:cb:a0:6f:17:
         1d:a7:0c:16:b4:20:d7:07:3c:c7:71:7b:b4:0c:5c:b9:e9:21:
         48:b1:07:34:5b:41:29:d9:56:db:b6:53:fd:be:77:63:36:ca:
         a3:63:4f:40:70:1d:e9:4c:fc:0d:33:98:28:0f:f7:90:8b:d7:
         38:36:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----