Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File:                     ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier:          uzWpXcctWIS3kLN2QHaW3HVGmO9hoCrxXwLjjLp5TrY=
Subject key identifier:   AA:79:71:BD:CB:07:2D:0A:39:19:CA:02:56:AE:A2:FE:C8:8C:8C:4F
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer:       /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial:       01962DF42773BD8133118DE6089A1B9BD14D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: Dpr0D2dkVxPoV1dZjeU7TR8zKpz82waPfODmj86IsuM=)
                          2: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
                          3: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
                          4: nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa (hash: jcflcFSB0gGF5Eobckb0cDmbAhuF6soPeVbl+/qaprQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:73:bd:81:33:11:8d:e6:08:9a:1b:9b:d1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=aa7971bdcb072d0a3919ca0256aea2fec88c8c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:1c:cb:f3:bb:9b:ba:f6:cc:81:4f:67:d2:
                    95:72:c4:c0:13:e0:1b:89:ab:6e:c8:09:f6:6e:36:
                    bb:87:ce:df:81:46:24:38:c6:58:a9:a1:ae:2b:6e:
                    ac:0a:bc:83:cf:24:bd:d7:46:e9:41:c4:53:f3:ed:
                    a2:96:74:1d:b9:ae:f6:09:3a:0a:20:18:7f:73:bb:
                    bf:08:b0:29:3d:c4:9d:b5:3a:ea:de:2e:06:40:2a:
                    ae:da:b4:4d:f3:2e:29:5c:70:b3:6b:52:c9:7d:a4:
                    95:31:4f:ed:01:30:e5:f8:23:ab:fd:3a:94:c8:8c:
                    4a:8d:38:9c:16:3c:ce:21:e4:0e:77:ef:7d:bf:f7:
                    a9:13:b2:5d:b9:87:76:bd:23:4b:43:c8:9c:f2:e4:
                    2f:ee:d2:cf:09:52:44:8b:b8:a3:0e:d3:64:d5:0f:
                    c2:b4:0b:f4:a5:f9:d9:c5:6b:21:5f:61:aa:e3:bb:
                    0a:2a:bc:03:cf:68:b7:16:9d:57:5b:60:27:6d:f6:
                    77:f9:07:9c:d1:8f:c8:64:84:95:fb:12:6a:12:dd:
                    71:3c:40:58:d5:8a:8a:e1:40:a2:90:45:9f:e4:1e:
                    1d:0d:f8:96:3e:c7:37:70:aa:72:38:d5:a6:95:de:
                    0c:1b:00:b9:b4:73:99:63:5d:20:f6:b0:77:b3:0d:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:79:71:BD:CB:07:2D:0A:39:19:CA:02:56:AE:A2:FE:C8:8C:8C:4F
            X509v3 Authority Key Identifier:
                keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4f:d8:b9:91:97:bf:0e:e3:ce:97:d3:45:1e:a5:fe:9e:a8:
         4f:c9:44:a7:9e:7d:0a:65:b8:35:4e:66:9e:57:37:65:d7:50:
         e0:53:1a:b0:ab:19:0d:7e:a9:19:f6:f5:d0:17:62:af:64:32:
         75:62:71:3d:ee:98:30:6d:8d:94:e5:ed:fa:a3:2a:96:24:63:
         18:0a:45:8e:21:8c:a9:68:71:ab:ec:30:90:e3:ef:8e:ab:6e:
         dd:9a:f1:6e:7e:21:ee:c6:36:eb:14:90:b0:5d:4d:3f:fb:39:
         5e:d2:42:54:df:24:59:c6:29:98:8f:e7:f2:e6:a5:e4:79:7b:
         0a:c7:72:a9:21:45:15:0d:d1:d0:3e:a4:d0:fa:9a:e7:57:77:
         68:15:ad:f8:7c:b7:ca:17:00:e0:7a:47:7f:3b:e1:09:a7:0b:
         e0:66:ee:8e:04:64:be:48:0e:98:d6:20:d5:05:f4:37:fc:58:
         8e:36:05:91:9d:2e:bb:90:91:06:cc:9f:e3:92:8a:9d:9d:9f:
         7b:d0:5c:57:56:a4:69:aa:82:e0:3b:22:ec:a2:14:a6:93:fa:
         6b:1c:3d:09:aa:27:82:05:cd:0b:5e:4a:2f:7d:3f:be:a0:8c:
         55:60:36:1b:37:00:88:f4:f3:3c:68:e8:76:03:3a:4f:8a:a8:
         6e:ca:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----