Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File:                     zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier:          N4vZPKz4kOmh4gyAMRl4vRkhWpwgYjVmEFXMWckKpD8=
Subject key identifier:   67:86:65:A6:73:E6:1D:DF:5B:84:B8:F7:20:85:EE:46:8B:1B:10:83
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer:       /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial:       01962F066298FB2656115D6DDB4C57625230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number:          14A3
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: ArJEitJmgZ3XGG2Xavk91e+lwf3a2zWK9UU3dRYU9TQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:62:98:fb:26:56:11:5d:6d:db:4c:57:62:52:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=678665a673e61ddf5b84b8f72085ee468b1b1083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:7c:bf:44:f3:9a:c7:ea:a7:16:17:90:00:
                    f1:c8:5c:34:71:5a:68:4a:1b:ae:8f:8c:20:34:18:
                    2c:98:eb:39:e9:94:09:9f:ad:c5:b5:24:b9:81:b9:
                    ce:1b:6f:90:62:ac:dc:55:a3:37:77:5c:8a:b3:c5:
                    b8:b2:26:c4:06:95:72:3e:e0:c6:8a:fb:78:f5:20:
                    78:37:94:48:b6:ac:ba:f4:b0:1e:5a:06:de:e0:bd:
                    53:b9:68:17:37:5c:a7:5d:d9:0b:46:c4:f4:6f:7c:
                    a1:49:3d:c2:87:c3:e8:a6:44:c0:05:11:a7:cd:8f:
                    be:86:d3:22:02:d3:31:4a:a6:69:a7:d8:5b:9c:83:
                    ad:31:71:86:7b:ea:7c:e1:ac:53:58:6a:ed:d3:37:
                    54:d4:9a:c1:5c:df:ba:03:11:d2:03:1c:4e:00:8f:
                    67:62:e2:0a:83:5b:7e:38:1b:41:83:2a:f0:16:fb:
                    85:54:37:79:42:7c:de:b2:db:52:8a:a1:f4:4a:04:
                    6e:32:9b:8a:62:39:a3:97:29:64:6e:96:fb:9a:77:
                    c6:f4:2f:b3:67:30:1e:f7:dc:94:c0:00:4d:da:78:
                    0a:85:aa:c6:2d:dd:c4:93:2b:2a:53:86:98:c0:02:
                    11:63:30:38:71:e6:92:d2:cc:25:af:84:08:6c:31:
                    2e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:86:65:A6:73:E6:1D:DF:5B:84:B8:F7:20:85:EE:46:8B:1B:10:83
            X509v3 Authority Key Identifier:
                keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fc:e7:a1:6b:8c:52:ed:bc:9e:f7:69:ec:e8:de:5d:12:62:
         26:97:be:e2:c6:ab:39:7a:d5:61:16:24:62:a4:6b:e8:f1:ac:
         e4:6d:c8:6d:ad:b2:8a:e4:42:18:f8:61:db:6b:b6:85:23:e6:
         9e:0b:05:df:11:a1:d1:46:88:58:b1:7c:dd:29:76:31:69:fd:
         b8:5e:ef:4b:4d:01:6a:1b:cd:13:5e:bb:d5:e4:8f:b5:38:7c:
         6e:85:32:12:c7:21:f2:d9:67:08:a9:45:35:f9:ee:c0:66:a6:
         06:08:28:ba:aa:96:16:1a:bd:fc:18:c4:42:9e:67:c6:d9:8c:
         b4:ca:c2:75:50:32:b2:df:7f:dd:c6:67:f4:02:f6:42:25:1d:
         dc:9d:cd:98:70:a7:a1:e5:7d:08:98:62:cb:74:15:3d:b7:85:
         f0:45:05:6c:7b:ac:2f:bc:81:47:6c:fc:9b:ba:e8:4d:68:7e:
         37:f4:ef:7b:2a:09:55:78:3b:44:0a:78:57:6a:9b:49:77:07:
         61:da:c8:b5:cc:7e:72:33:57:69:6c:3a:22:b8:e8:28:10:03:
         8c:5a:88:80:b8:55:e8:a0:61:52:98:40:3f:78:76:7e:e3:62:
         60:87:65:b7:fd:13:0b:5b:11:4e:b4:89:f4:40:7e:83:df:11:
         6f:80:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----