Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File:                     zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier:          BZXA/MDJX38tU4D0SG7KxICHBNAdeQHKAEThL0m3Gk0=
Subject key identifier:   5D:17:C1:13:0D:2D:37:ED:FA:98:13:1B:2E:B2:D7:7A:48:F5:51:EA
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer:       /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial:       01962DF3AB3DE55952828E8E5009C01AF9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: /6dpJVMCDiN8eo1OX0PPHTzJIt1QfNwoa6S3+S1voGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ab:3d:e5:59:52:82:8e:8e:50:09:c0:1a:f9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=5d17c1130d2d37edfa98131b2eb2d77a48f551ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:db:e6:24:e7:50:61:e9:80:67:13:8a:17:66:
                    9b:a8:06:76:1e:10:e4:02:16:ea:41:08:a3:96:9f:
                    b5:72:db:aa:1a:9a:28:f9:8a:e4:cd:e9:b2:4c:fe:
                    5a:73:a5:d2:ff:ee:ae:ba:1a:c7:53:66:e6:a0:c2:
                    38:8a:86:18:50:20:e8:3c:75:92:06:62:a8:95:73:
                    78:86:0a:5d:37:b5:1a:cc:f0:bc:78:9a:09:e1:57:
                    c5:a7:56:80:f4:00:6c:42:da:55:80:19:33:5e:34:
                    21:a0:ba:ea:38:9e:fb:92:69:b9:ef:bc:6b:ef:4e:
                    14:7e:33:bb:b7:83:b6:88:ae:d7:45:11:c9:06:95:
                    a9:1b:65:82:36:07:80:2e:ad:fe:b5:75:28:c3:7b:
                    07:78:74:92:1e:dd:a5:05:c4:51:19:ec:10:c4:b0:
                    1e:20:05:86:bf:e6:8e:d8:6c:da:de:2f:53:dd:fc:
                    f2:26:6c:c7:2d:80:47:24:05:0b:17:b5:c5:78:30:
                    06:7b:e4:59:a9:6b:e3:6e:e1:d3:c7:d9:7b:0b:16:
                    85:0b:41:12:3f:3f:12:6b:a6:b1:91:af:8c:9e:3c:
                    ba:16:e5:d0:f5:d7:0b:4d:60:56:63:a7:32:58:12:
                    46:5a:37:1f:51:be:6a:4f:06:68:90:0f:17:59:e6:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:17:C1:13:0D:2D:37:ED:FA:98:13:1B:2E:B2:D7:7A:48:F5:51:EA
            X509v3 Authority Key Identifier:
                keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:92:ff:93:3b:f2:10:0c:4f:dd:7f:e1:05:32:ca:05:3f:a2:
         5b:c2:f8:d4:37:f7:f6:a9:46:6a:81:1d:48:4d:d9:e5:06:5f:
         ac:a7:70:fd:06:c8:88:3f:ad:31:19:a0:70:f3:2e:14:f3:60:
         7d:f8:76:8d:cf:90:12:a0:df:4e:ea:ba:43:a4:c9:c8:60:69:
         47:8c:d8:c0:c7:9c:0d:a0:cb:64:f4:f8:a2:59:15:60:e2:f8:
         69:d2:c5:5b:7d:16:a5:c4:52:3f:2c:0d:ac:91:25:17:df:29:
         79:d7:59:f9:48:11:38:11:5d:12:95:f8:f4:82:74:b9:98:27:
         00:55:9c:24:d2:50:22:7d:2e:ce:3c:49:62:4b:91:43:c2:6e:
         3d:66:18:8e:6e:38:81:1a:fc:9c:03:ba:fa:3b:ba:f9:72:a1:
         e5:ff:40:b7:1c:af:ca:59:1d:3d:86:4e:f9:16:6a:4c:37:63:
         3e:4a:5d:cc:7b:b1:56:22:94:32:ac:a7:6e:61:a7:22:60:f5:
         5d:e7:c0:a5:fc:1c:d7:91:f6:83:56:8a:09:3b:d7:be:a9:93:
         8c:65:63:e6:60:4d:c6:12:63:c4:2d:56:e8:4a:53:c2:20:c0:
         5c:ac:1b:81:49:95:4a:20:0b:30:d3:de:66:75:dc:79:d1:fe:
         f1:aa:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----