Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          ZkHKfSoqxni8lDyM6HzHeRIJip48wYRScyX5vsxoj70=
Subject key identifier:   C5:0F:77:80:41:E1:72:6A:A0:FA:D6:46:99:97:47:DD:5E:EF:4F:F2
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       01962E2B50D87C202B52ED5AE03867B63BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          0425
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: 3XgK7BDC0mxi3woGhYBlD0dle4FmyQLYCn6qf+3Z1qs=)
                          2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:50:d8:7c:20:2b:52:ed:5a:e0:38:67:b6:3b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=c50f778041e1726aa0fad646999747dd5eef4ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:b3:9f:e4:ab:0f:72:f7:03:59:52:a2:ee:
                    75:54:22:6b:4e:dc:e7:d5:69:c7:3e:4b:48:92:cf:
                    67:9e:e4:67:6f:48:c9:fb:62:a2:9a:2c:db:34:b5:
                    0d:0a:5c:86:bf:8b:3d:09:2e:ad:19:52:ee:0a:bf:
                    e0:cb:e9:93:bc:33:cd:f7:e5:eb:f3:eb:80:84:5a:
                    cd:ca:48:9c:f8:ce:49:83:d5:3c:07:2c:7c:fa:62:
                    10:49:18:e4:9f:7a:e8:79:c9:25:de:6d:b4:c1:5b:
                    02:3c:f0:fd:fb:92:b3:e2:89:95:df:f9:d3:dd:e2:
                    35:74:67:2a:6b:77:d9:e7:2d:fd:03:38:42:64:9d:
                    83:56:18:5b:5f:bd:a1:ba:c2:59:40:19:6a:e5:c9:
                    d1:39:e3:02:64:d6:a7:77:58:1d:97:c7:99:d6:33:
                    a1:be:ed:a3:f1:cb:86:3d:89:db:31:a6:1b:e3:ae:
                    a5:25:e4:fd:b0:84:cc:5f:ba:31:2e:38:06:21:4a:
                    22:19:b9:fe:51:52:35:be:f2:78:7a:5d:6e:62:60:
                    3e:32:62:ab:c6:f1:34:6d:b9:5b:b0:04:f0:4e:45:
                    9f:61:9c:77:97:82:88:36:85:58:25:6b:50:d4:57:
                    fa:ed:5d:9a:bd:ba:d5:d2:f8:f7:4c:80:b6:93:51:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0F:77:80:41:E1:72:6A:A0:FA:D6:46:99:97:47:DD:5E:EF:4F:F2
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f6:34:80:ee:37:09:56:ca:27:cc:02:5a:28:70:d6:34:62:
         cc:e5:27:fa:7a:26:45:01:4a:3f:9c:1a:83:9e:f3:66:59:8c:
         eb:73:10:28:0e:15:c3:74:3b:68:de:e2:df:e0:06:d6:f8:4f:
         ba:cd:ed:75:41:48:07:8b:ed:10:ef:51:87:ad:b4:f8:50:47:
         90:20:b9:a3:30:6a:bb:8a:fe:38:2f:e3:f4:f7:47:e7:22:d4:
         7a:c0:23:4d:56:bd:37:3f:d8:93:91:f9:7a:1b:80:ba:db:9d:
         09:23:55:46:e1:6e:ac:2c:f6:13:ae:51:68:49:a1:aa:e1:b8:
         5f:45:70:56:c8:94:ea:27:1a:69:be:83:0f:30:47:a4:9f:93:
         93:9f:1f:c3:bb:f2:a0:17:5b:cf:1b:b8:35:9b:c7:e2:33:ca:
         2c:8c:dd:57:a3:0a:90:80:66:fe:bc:43:73:db:31:c6:86:f9:
         18:96:92:04:6c:74:f6:59:1e:c8:19:59:75:c5:13:f6:03:fc:
         3d:db:95:72:ce:08:55:f9:d4:5e:38:f0:26:c5:d6:7e:e7:38:
         fd:6c:ee:ee:76:38:60:ab:c3:dd:19:d7:61:e9:cb:ce:bd:c0:
         7e:98:46:8c:51:0f:37:4c:ee:9b:c7:4b:88:9e:95:96:6d:8e:
         af:14:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----