Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File:                     ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier:          1emYWc8cnB/cLnjEBo6n1lBwgDH0poqYjnUKcjROeWw=
Subject key identifier:   6E:D6:EE:30:2B:20:DA:9E:F6:40:2A:05:BE:0C:AE:D3:88:01:EE:93
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer:       /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial:       01962E992CCF78FE41EA96FD063FA82C950C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number:          0951
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
                          2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
                          3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: ZqbTjmN7pjfcxiAS7F3HFCk8Ck3PibjJ8/qnAzD34Pc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2c:cf:78:fe:41:ea:96:fd:06:3f:a8:2c:95:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=6ed6ee302b20da9ef6402a05be0caed38801ee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:68:69:ff:1c:0f:ad:e6:78:58:22:e5:a2:
                    ea:e9:37:d6:0a:31:81:b1:71:3d:f8:81:a0:4f:7e:
                    b7:ed:47:7c:22:8a:36:a8:89:a6:b9:4c:d5:38:45:
                    90:46:9e:06:82:93:6c:e7:52:38:5a:db:9e:75:47:
                    e6:f4:28:02:b1:8e:17:ff:8b:40:5f:aa:64:17:fa:
                    5c:6c:ac:d0:e5:59:56:d5:d0:28:f1:f3:f8:ed:92:
                    09:e4:91:cb:83:ae:e7:18:02:c5:50:bb:fa:be:44:
                    1c:e9:5b:a5:d0:2d:f3:72:78:0e:d8:a9:67:f6:ce:
                    33:9a:1e:e7:3b:06:4a:5e:fb:17:97:f8:3c:5a:ac:
                    b3:0d:55:06:28:d5:1d:84:99:49:be:39:b7:f3:41:
                    6d:56:fe:08:05:4e:a2:52:f6:00:77:83:f0:95:24:
                    ee:2d:e1:c3:40:d5:e9:70:7f:c8:a2:b5:4e:fb:eb:
                    2b:b4:cd:38:31:9d:db:c7:bb:62:04:c1:2f:0e:0f:
                    d6:5e:0c:22:d0:6a:6d:8b:ee:8a:40:b4:77:70:bd:
                    32:f3:da:d8:ce:16:99:e7:a6:e2:74:a8:95:00:ad:
                    17:a1:ab:5f:86:56:b4:6e:88:8e:21:f7:a0:cc:50:
                    91:80:47:08:e2:1d:b7:a1:53:f0:1e:b1:95:17:4a:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D6:EE:30:2B:20:DA:9E:F6:40:2A:05:BE:0C:AE:D3:88:01:EE:93
            X509v3 Authority Key Identifier:
                keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:cb:fc:64:56:a2:e1:32:93:d0:da:d7:3c:47:e5:c8:92:
         c6:c8:88:c8:c0:f1:00:90:f1:4e:68:07:41:54:a5:94:94:f7:
         b0:aa:d0:54:81:e8:65:57:be:c1:02:ac:2f:90:73:b7:52:2a:
         61:43:1b:e9:ad:db:58:6e:df:fd:48:11:c9:e5:28:b0:c9:e3:
         09:64:ae:87:2b:da:df:41:eb:5e:18:f3:53:88:71:3b:73:ec:
         0c:1f:e5:a7:31:38:f1:2c:4c:fc:63:58:13:c0:ec:ea:df:f3:
         80:ee:3f:3d:9d:6a:ac:c9:05:b5:0d:54:18:13:c9:d3:1d:89:
         66:1d:19:32:36:d2:d9:9f:e3:d3:e8:70:9e:96:0a:1c:fc:f1:
         7c:d9:6c:28:3d:3a:19:c4:78:c3:7a:52:37:32:50:50:a9:1c:
         4f:ee:04:27:fa:e0:ea:c0:ed:55:d2:0a:fc:5d:14:f7:94:9e:
         10:af:57:01:c3:18:7d:ce:0e:19:29:92:28:07:fb:ee:20:37:
         64:3c:58:f7:91:ba:a1:b0:b0:d8:d2:38:19:5f:41:3a:ff:da:
         4f:de:7b:c9:72:48:ba:ef:15:15:a1:9f:05:d8:eb:f4:0f:af:
         24:23:91:93:c9:34:97:44:dc:42:18:6c:2c:6f:65:9f:0a:66:
         15:1b:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----