Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File:                     ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier:          V/coPhowULUygRXLEKX72hXd3ickcyS78wVDg+j5NBQ=
Subject key identifier:   3D:A3:15:38:62:44:AD:60:37:B9:76:78:A4:DC:29:87:93:8D:5B:B9
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer:       /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial:       0194BCA9775A011C568D773526BA8C431F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number:          0D91
Signing time:             Fri 31 Jan 2025 14:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:09 +0000
Files and hashes:         1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
                          2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
                          3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: Z39rzKlS0GhxH5cI4jCZi/IvcEocv9WQZCqDWjXVcTU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:77:5a:01:1c:56:8d:77:35:26:ba:8c:43:1f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
        Validity
            Not Before: Jan 31 14:00:09 2025 GMT
            Not After : Feb  1 14:00:09 2025 GMT
        Subject: CN=3da315386244ad6037b97678a4dc2987938d5bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:e2:ae:cf:79:f3:f0:c9:4c:0d:7f:ff:74:
                    c6:12:cb:d7:31:cd:63:81:01:e9:e1:be:2b:fe:af:
                    9d:71:8f:cd:80:97:04:1e:91:74:06:be:73:a1:fe:
                    24:45:82:01:c6:a2:56:21:e4:32:11:92:9d:ba:ba:
                    2e:04:ea:66:37:7d:85:c4:f0:27:a8:50:b5:aa:ac:
                    a4:c5:9b:7a:e2:1a:0a:f3:8d:90:06:92:e4:24:bf:
                    34:62:a2:bc:b1:6b:7a:f4:fb:e1:40:8f:4e:ea:03:
                    82:3d:14:82:bd:e6:20:06:62:92:54:bd:04:fc:2e:
                    97:ea:e1:ef:09:9c:91:04:b8:72:0e:8b:cc:f1:4c:
                    b7:02:33:d7:2a:8c:04:c5:85:1c:32:f0:e3:fc:95:
                    ae:16:d6:65:52:90:95:89:10:de:0e:ee:20:f6:c1:
                    88:14:5e:f7:a0:07:f1:d3:9c:c6:2f:b7:72:4d:9a:
                    cf:6c:ea:f3:34:82:f3:42:c0:df:c3:cc:e0:04:87:
                    66:c9:06:81:f5:0e:70:2a:52:42:8d:23:df:a5:a0:
                    e3:9c:d5:90:9e:19:a4:09:e0:25:55:8d:f4:1f:8a:
                    87:cc:95:ff:2f:8d:4b:ae:8a:61:01:5d:d4:d3:01:
                    f5:49:90:23:b0:a4:22:b5:04:52:34:19:6a:56:e5:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:15:38:62:44:AD:60:37:B9:76:78:A4:DC:29:87:93:8D:5B:B9
            X509v3 Authority Key Identifier:
                keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:f9:b6:93:d5:cd:f9:5e:a1:78:13:60:44:85:3e:8e:0f:
         ac:00:a2:57:7e:a7:dd:f9:81:7a:b7:81:7f:44:32:fc:92:48:
         f4:09:0d:e0:a1:96:fa:6a:0e:12:9e:06:43:ac:22:dc:cb:3f:
         71:da:62:f0:a9:b7:5a:77:12:1a:ab:92:b8:40:52:97:0d:56:
         ed:47:7b:87:94:a9:d0:e7:ab:2e:b3:91:64:57:cb:51:a1:8e:
         3c:c9:d3:a3:51:00:f6:70:28:ce:c4:77:bc:5a:12:02:ef:00:
         4b:06:52:3d:d9:6b:30:3d:d2:3c:75:7b:65:cd:df:05:35:d0:
         6b:5f:f7:05:c2:9b:4a:53:46:24:09:e5:4e:34:b0:93:0d:f1:
         55:de:b7:6c:d4:cc:6d:a5:3d:7a:b0:7d:80:2c:b1:9a:66:86:
         4d:c2:35:8e:52:1e:62:19:ea:f6:1d:06:92:e6:12:01:62:5c:
         a5:21:8f:ae:b2:58:d4:21:f1:a4:6f:92:82:d7:ce:ac:b1:8a:
         21:98:e1:46:89:23:21:6d:28:e3:7d:23:2b:c6:e0:12:b8:a9:
         f4:0f:7b:1d:46:7a:6b:ab:e9:62:ce:7d:97:66:77:f1:f4:1b:
         65:06:ac:f7:34:24:4b:b1:d4:16:01:7b:9a:0e:a0:11:bc:d1:
         65:77:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:42 2025 by rpki-client