Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File:                     ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier:          UgxvyQVcE7w6F6oGWkQXkROGh1tXWGhLfoGl3k5v1+M=
Subject key identifier:   4C:F9:31:3F:B6:8C:BB:9A:6D:ED:D1:D5:B6:BE:26:C3:6A:DE:68:F8
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer:       /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial:       01962F069EBC1C37797A1F66A0AE16BA7A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number:          0E5F
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: 1SB3NmeCqS+iH+eZDeTnyyHNnDj9cZq1HYER/tm0bto=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:bc:1c:37:79:7a:1f:66:a0:ae:16:ba:7a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=4cf9313fb68cbb9a6dedd1d5b6be26c36ade68f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:8b:3b:11:97:60:63:1b:1e:25:92:7f:0e:
                    bd:cd:ea:cb:5d:27:57:37:a6:1a:64:d2:99:99:d6:
                    7f:c3:c7:6d:2b:3c:6f:81:56:b0:13:eb:4a:83:b1:
                    27:3e:e6:a1:3a:f4:d1:c3:e6:3f:d4:fe:79:af:d4:
                    41:2d:18:6c:04:81:50:bf:74:e2:8b:62:fa:48:a1:
                    2a:1b:ca:61:16:0f:f0:8c:38:a0:6c:76:e6:d4:b7:
                    a6:0b:56:3b:63:a2:8c:5c:74:4c:d8:31:cb:cb:27:
                    2d:3e:60:19:6a:39:a2:f0:74:3e:83:90:4c:2b:38:
                    be:2b:92:63:d3:fb:b2:ce:c2:6a:42:07:c1:b1:82:
                    3b:c1:c8:4a:13:76:fc:b8:48:4a:34:9e:bb:67:f7:
                    c4:a3:9c:a1:ec:8c:b4:38:08:3f:a4:56:b4:c6:b0:
                    f3:7d:b9:07:25:6a:17:87:a4:15:d7:1c:4c:ee:71:
                    9b:a5:1b:27:93:05:48:74:e7:30:ac:0e:b3:bb:8a:
                    e6:bd:b9:36:4e:23:8c:f2:8c:1d:f4:ef:be:18:a4:
                    ea:d6:0d:56:cb:bf:fb:31:44:9d:97:8a:2c:bf:f7:
                    74:f7:79:e0:58:24:a2:00:a9:31:b9:8c:66:d7:53:
                    8f:01:fd:15:2f:f1:d2:87:7a:af:cd:72:03:ce:82:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F9:31:3F:B6:8C:BB:9A:6D:ED:D1:D5:B6:BE:26:C3:6A:DE:68:F8
            X509v3 Authority Key Identifier:
                keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:74:e9:11:6e:dd:0c:a3:b3:53:08:05:29:ec:4c:91:80:
         da:93:7b:bd:c1:54:a9:d0:fa:7f:d8:49:4f:c2:1f:40:d7:ff:
         d5:b4:df:7b:f9:98:05:93:06:32:af:02:01:14:5f:25:ab:28:
         be:20:86:c6:d8:53:27:a8:95:14:a9:52:06:2c:9a:3f:4f:cf:
         8f:02:f4:73:7d:f9:af:0e:49:0c:83:10:22:8a:c5:c0:7a:bd:
         29:b4:3e:49:53:ab:07:ab:9d:72:d5:73:2f:82:e7:86:6b:05:
         f7:f1:8f:7c:c2:2d:ab:66:4b:c6:d2:40:11:83:7c:d0:c1:5c:
         88:3a:6c:23:98:fe:a3:32:f9:95:7e:65:0e:d0:5e:cb:7d:cd:
         3e:1a:a8:7a:ae:70:1b:51:fa:b6:2a:e1:2f:e6:23:39:d9:a5:
         67:19:5e:19:d3:71:af:12:0d:11:c8:94:dc:c8:75:91:e3:63:
         06:aa:1e:2f:f4:3a:0a:c3:e5:57:4a:76:a2:4e:5e:b3:81:d8:
         41:e1:13:d1:4f:a9:4c:2e:58:14:0a:ec:e0:96:a5:cf:43:61:
         b3:da:91:5f:76:fe:f4:97:a1:09:2e:37:6d:79:4f:67:e8:30:
         eb:4e:88:5d:4f:3a:7a:f2:f8:86:c4:b5:74:5f:a4:82:30:b4:
         b4:74:ed:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBp68HDd5eh9moK4WunqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTg2ZTRlZjhjYWVkZjY2ZWQzNGQ5M2FiYTgwYjJjZmMw
Njg2NzMwHhcNMjUwNDEzMTIwMTI1WhcNMjUwNDE0MTIwMTI1WjAzMTEwLwYDVQQD
Eyg0Y2Y5MzEzZmI2OGNiYjlhNmRlZGQxZDViNmJlMjZjMzZhZGU2OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HuLOxGXYGMbHiWSfw69zerLXSdX
N6YaZNKZmdZ/w8dtKzxvgVawE+tKg7EnPuahOvTRw+Y/1P55r9RBLRhsBIFQv3Ti
i2L6SKEqG8phFg/wjDigbHbm1LemC1Y7Y6KMXHRM2DHLyyctPmAZajmi8HQ+g5BM
Kzi+K5Jj0/uyzsJqQgfBsYI7wchKE3b8uEhKNJ67Z/fEo5yh7Iy0OAg/pFa0xrDz
fbkHJWoXh6QV1xxM7nGbpRsnkwVIdOcwrA6zu4rmvbk2TiOM8owd9O++GKTq1g1W
y7/7MUSdl4osv/d093ngWCSiAKkxuYxm11OPAf0VL/HSh3qvzXIDzoIxAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz5MT+2jLuabe3R1ba+JsNq3mj4MB8GA1UdIwQY
MBaAFGUYbk74yu32btNNk6uoCyz8BoZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MjRjZjEtZmZkYy00NWU2LWE2ZjMt
ZWNkYzM2ZDdhZDFlLzEvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85MjRjZjEtZmZkYy00NWU2LWE2ZjMtZWNkYzM2ZDdhZDFl
LzEvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1506RFu
3Qyjs1MIBSnsTJGA2pN7vcFUqdD6f9hJT8IfQNf/1bTfe/mYBZMGMq8CARRfJaso
viCGxthTJ6iVFKlSBiyaP0/PjwL0c335rw5JDIMQIorFwHq9KbQ+SVOrB6udctVz
L4LnhmsF9/GPfMItq2ZLxtJAEYN80MFciDpsI5j+ozL5lX5lDtBey33NPhqoeq5w
G1H6tirhL+YjOdmlZxleGdNxrxINEciU3Mh1keNjBqoeL/Q6CsPlV0p2ok5es4HY
QeET0U+pTC5YFArs4Jalz0Nhs9qRX3b+9JehCS43bXlPZ+gw606IXU86evL4hsS1
dF+kgjC0tHTtVQ==
-----END CERTIFICATE-----