Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
File:                     z9rC7BEEwkXZyrqOthY46drxADk.mft (raw, json)
Hash identifier:          7dNwUQsUo4ESQc+Cy9tV/oIcD138PSz1Hh0E647CfHk=
Subject key identifier:   48:86:CF:02:E7:DE:91:0E:0D:30:0F:C5:AF:BF:6D:02:48:31:6D:BC
Authority key identifier: CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
Certificate issuer:       /CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Certificate serial:       01962E98B2F2992F100C4D683B796ED5854F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
Manifest number:          1027
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: z9rC7BEEwkXZyrqOthY46drxADk.crl (hash: MhEhKj/ZEWzwUA3yqPFFC8ihn7KmBcpl5i8TDXRB0ho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:f2:99:2f:10:0c:4d:68:3b:79:6e:d5:85:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=4886cf02e7de910e0d300fc5afbf6d0248316dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:20:8d:37:71:29:18:c5:51:23:63:7e:91:
                    42:87:0f:26:eb:81:1f:d9:94:56:a9:78:7c:9b:b4:
                    b0:36:14:a3:5d:f4:22:c4:8d:4e:fb:5e:d1:33:e4:
                    e7:bb:8b:6c:0b:d6:6a:4d:e5:55:24:3a:0d:ec:38:
                    04:89:fd:21:f5:2b:e3:39:02:55:80:30:c2:d6:f0:
                    c6:2d:96:26:e3:fb:7f:28:bc:4a:7b:98:c0:14:23:
                    02:c8:36:fe:77:12:7c:15:ff:f7:74:ee:00:51:5f:
                    7d:72:27:f8:63:6d:29:e1:4d:d4:ae:42:da:d7:0f:
                    34:00:d0:8c:d5:15:84:b3:7c:25:d3:a1:fc:5c:2b:
                    c3:2e:b8:8e:c3:00:24:27:d9:a1:45:4d:43:e9:cd:
                    31:7b:96:d4:d1:b6:5b:8e:16:4d:f6:9c:ed:ea:be:
                    00:8e:c7:10:3b:be:dc:94:35:ee:56:5c:b8:5a:c3:
                    af:9c:f3:27:82:bc:c6:72:3f:df:5e:27:35:5a:e6:
                    63:b0:07:f8:47:51:e6:c7:e4:fd:5d:ca:94:60:d2:
                    2a:4f:3b:b8:44:65:a4:f5:8b:25:8d:df:f8:62:db:
                    93:79:54:fb:c2:0d:59:66:de:c3:0c:83:dd:f0:d3:
                    97:ac:59:69:80:02:54:04:3e:21:ae:c3:f7:1f:43:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:CF:02:E7:DE:91:0E:0D:30:0F:C5:AF:BF:6D:02:48:31:6D:BC
            X509v3 Authority Key Identifier:
                keyid:CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:49:42:6e:26:97:76:d3:d5:84:20:0a:2b:c8:31:b2:b2:c9:
         14:bf:80:1d:06:d7:50:95:0b:1d:14:85:4c:9d:d3:24:9a:4d:
         55:33:fc:fc:10:4e:9d:9e:55:cb:12:3c:57:11:dd:74:49:bc:
         9b:0e:69:11:e0:d9:bd:3c:05:2a:c7:12:fa:e7:c0:3c:51:c8:
         da:2c:3d:27:a0:28:09:90:3b:e0:b0:ad:cc:e4:3e:78:20:7b:
         42:68:a4:33:23:9b:c5:54:8d:0c:ac:a9:d3:89:e3:33:42:19:
         9c:8b:07:d7:20:a6:a9:c7:00:c1:6b:be:8b:dc:dc:96:ed:48:
         6e:1b:b7:31:41:8f:1d:a9:fa:6a:e4:bc:7e:a5:b8:1d:13:61:
         c9:f5:3c:ca:74:02:4c:c0:57:1f:73:ce:1e:fa:0e:98:fc:cb:
         54:8b:4f:2d:ed:f6:58:85:96:7b:2a:0e:0e:d3:49:6a:18:e6:
         1c:f7:11:84:4c:74:6b:8d:38:85:31:77:6b:f0:37:ba:dc:47:
         83:66:d4:2b:64:ad:4a:f2:fa:7e:2f:85:15:31:e1:7b:3b:7a:
         b5:df:73:a7:44:64:46:43:2e:3e:3f:0e:19:35:7e:73:89:7f:
         e1:63:a6:11:64:ac:37:f0:2a:65:19:b4:cf:80:65:68:0d:e1:
         ab:76:6c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----