Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
File:                     ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json)
Hash identifier:          /Muns8RCOOnhIuomuqKhM6pXFL2ZoNqG8BNU8aityUM=
Subject key identifier:   93:10:A4:1D:4E:1D:6D:41:76:E6:0D:40:5C:75:E9:8A:D7:27:70:E9
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Certificate issuer:       /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial:       01962E61C2D0A81172B81A84DEE27DB413AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
Manifest number:          0DAF
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: oc9p1kLHtYVEMTqFqs9LQnzspyCRk1bxSD1pykW+Zd0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c2:d0:a8:11:72:b8:1a:84:de:e2:7d:b4:13:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=9310a41d4e1d6d4176e60d405c75e98ad72770e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:68:bf:98:c4:ef:ab:33:9a:aa:31:36:0c:
                    1e:7b:e5:1c:d4:54:33:fc:50:2f:17:d3:1a:44:f7:
                    9f:43:f1:73:81:14:0e:77:bc:01:65:65:21:d1:f9:
                    b8:ab:94:6c:11:74:be:61:fb:37:ae:f4:f8:ff:b5:
                    b9:b1:94:c6:4a:10:f3:62:b4:13:bf:7e:40:2f:44:
                    5d:a1:3d:49:d5:d6:ce:d1:6f:a1:e7:41:05:54:d6:
                    56:ae:d5:9b:b1:af:00:24:49:78:40:48:60:74:53:
                    fb:85:25:f6:36:7c:bb:5d:86:ad:bc:51:12:6e:b1:
                    67:1a:94:fe:22:3b:33:42:a7:97:4f:47:68:92:59:
                    d6:84:9e:62:58:14:c0:17:f7:ce:d7:9d:2f:35:d3:
                    31:ef:9c:16:25:a4:eb:3a:30:1d:a6:e5:2f:6b:f9:
                    dc:91:57:a9:14:88:7d:7c:43:77:36:f9:ba:5e:43:
                    a6:b3:96:cb:c5:b4:b0:49:b0:74:85:11:54:fc:56:
                    de:fe:8d:af:c4:e2:56:23:92:60:b7:29:15:54:b4:
                    50:2f:3c:98:5f:e3:d8:18:32:64:bc:6f:1d:65:38:
                    d6:c0:ec:f9:0e:34:59:ec:71:9a:82:37:2c:cb:6e:
                    ca:f4:50:5d:5d:9f:52:56:f2:a2:d1:19:f3:43:95:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:A4:1D:4E:1D:6D:41:76:E6:0D:40:5C:75:E9:8A:D7:27:70:E9
            X509v3 Authority Key Identifier:
                keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:e3:53:95:7f:83:4f:90:6e:8e:1a:ce:76:b0:68:7c:93:
         ef:db:79:b4:fc:b6:7d:7e:d6:c3:23:a6:28:5a:4b:7a:80:e1:
         68:a1:65:b7:a3:65:00:2a:94:cb:ea:cf:42:84:5f:77:15:27:
         78:52:ff:eb:8b:f7:3d:e9:a0:a5:66:5a:aa:30:25:bd:c0:74:
         5b:b3:86:f6:ca:53:79:ba:b7:36:f7:b2:b7:45:bd:f5:16:61:
         7a:91:be:6c:7a:cb:11:55:dc:f0:eb:f3:e1:0a:0f:9d:3e:94:
         77:f9:8e:36:4d:a3:f8:aa:c3:9d:68:1d:48:6a:96:bc:85:9c:
         41:fc:73:9c:59:4e:e6:4a:7f:3d:22:1e:ea:36:94:5c:2f:16:
         27:e3:d4:3d:e3:b1:dd:95:8f:7d:3b:0e:76:4d:40:66:29:9f:
         62:3c:e1:d3:1a:b2:25:65:57:19:e7:fc:f6:4e:26:fd:6e:5e:
         f5:8d:06:eb:cf:84:86:a3:1d:64:cf:df:b4:57:4e:20:39:55:
         50:2b:92:15:0d:c8:b1:75:e6:d0:3a:2f:c8:05:40:2b:43:22:
         f2:e1:87:84:48:14:13:f2:9f:55:34:55:9c:7b:db:1e:a2:75:
         f2:13:e6:58:c2:ec:ee:65:24:e7:c8:b5:ef:9a:54:d2:d7:c5:
         ab:cd:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----