Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File:                     RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier:          9z6zgZ8KaiVIzS/WjJzD4uoEky+92imZEWdj9KyS4v8=
Subject key identifier:   37:BF:C1:DC:46:27:CF:18:32:A1:BF:4A:69:4D:10:55:6F:2C:FE:A7
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer:       /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial:       01962F06EA0E87A94B57A0A939792D9E6987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number:          07F2
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: btwe5nEPiKfbwFt8fwzVkdpBmXZ64v6BMMmAvLESN8Y=)
                          2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ea:0e:87:a9:4b:57:a0:a9:39:79:2d:9e:69:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=37bfc1dc4627cf1832a1bf4a694d10556f2cfea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:6f:f8:4c:d9:bf:c0:0a:b9:0d:fb:84:3a:
                    0a:cb:f9:45:4b:66:e1:fd:0c:d7:ac:21:0c:a4:ba:
                    8d:e1:cc:09:2d:71:57:04:f5:45:5b:1f:36:25:66:
                    88:ca:8b:67:04:94:1c:67:d7:4b:c0:8a:da:c8:ef:
                    e9:d9:bd:81:ce:79:6e:b2:59:6b:4f:eb:b5:8c:12:
                    2b:c5:89:22:1e:5b:42:bb:a1:9f:1d:b0:ef:eb:6f:
                    d1:70:ef:c6:42:23:7b:12:23:5c:33:e8:02:44:b7:
                    4d:3e:93:cd:dd:28:b0:d6:13:9f:44:d6:d6:20:8b:
                    13:59:91:59:65:5b:14:13:c1:30:7d:03:1f:49:4b:
                    04:51:c2:c7:c6:4a:bf:e1:8d:d4:48:e5:97:a5:3c:
                    ed:3c:77:0f:d8:6d:74:80:cc:44:8a:a2:59:bc:35:
                    75:39:c3:55:ec:83:3c:48:68:ee:90:87:47:5d:f6:
                    1f:7e:08:3a:b4:86:d7:5b:f8:76:28:c4:49:52:02:
                    0a:36:54:24:b8:fb:dc:58:6d:fd:c1:82:44:d6:ef:
                    aa:fc:7f:b1:66:50:08:43:8f:11:a5:9c:6e:d5:74:
                    ed:1d:46:73:eb:34:24:ea:31:e8:b8:4f:37:f7:f4:
                    0e:36:37:46:8d:b5:8d:cb:1e:a8:b9:c9:ce:5b:4e:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BF:C1:DC:46:27:CF:18:32:A1:BF:4A:69:4D:10:55:6F:2C:FE:A7
            X509v3 Authority Key Identifier:
                keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:98:77:67:8f:2d:b5:02:5c:97:8d:f7:92:12:77:f9:88:9a:
         fa:3b:5e:a8:14:8b:97:19:8d:76:f0:14:b6:0d:8b:49:48:ae:
         04:c6:79:60:d9:71:f4:ca:d4:6d:8a:fc:66:5c:97:69:f1:af:
         b8:6e:e6:86:6b:46:12:b5:ec:4d:15:2e:04:9b:f4:83:75:1d:
         28:47:0b:22:19:b0:68:a9:19:33:17:5d:0e:25:8e:9a:e6:1f:
         dd:1c:30:2c:28:1a:a3:1f:e4:70:40:c4:f6:2e:cf:0c:ef:b7:
         bd:71:ab:b2:11:e7:bc:ea:d9:e9:d9:65:05:82:df:a3:f2:f2:
         47:7e:45:5f:c3:7b:27:11:ca:78:74:d8:c0:81:e5:b9:21:66:
         3c:9a:22:d5:64:e8:01:39:78:13:b3:ea:1d:ec:b7:87:9b:da:
         99:78:58:06:b9:97:f3:70:a7:42:23:33:ec:e1:82:3a:01:56:
         da:a5:db:cf:a7:c9:51:8a:b7:e7:04:f5:0a:c1:a8:bb:1d:2a:
         38:ee:fd:9e:4c:f8:a9:fd:dd:ce:62:cd:75:18:6b:7d:de:d9:
         fd:ca:0e:9d:8d:d5:78:df:82:00:62:a7:79:19:12:48:62:93:
         f7:04:00:09:d9:b0:97:86:c6:44:28:4d:78:b3:b8:1a:de:c5:
         14:c5:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----