Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File:                     ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier:          e5YCsAp7AAIp2CTgT37euxFrySIxAunHagsK2ReV98I=
Subject key identifier:   E3:CC:75:F0:F4:34:96:4E:C4:77:49:2F:F4:00:C9:D5:E9:ED:9A:46
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer:       /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial:       0194BCE0F16BD99EC8A3D7E630E043DAF7E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 15:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:45 +0000
Files and hashes:         1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: 74oWfuUT9Ewuss81P96bXEYhH1zivkPDlYlc1ERIkAI=)
                          2: dTuqgfHkWKRx6zDRFyr7wfbH78A.roa (hash: 2z0kuCT+rZ4YZMUscZu87PyQoyge5s4ineDLZLosNXs=)
                          3: ev4qAZxPyDVe1fzvmsra_eujOoU.roa (hash: HFLW2F6W7JxQUwoPI2JmRMt/NzyrebxUZlSAcm1ib6I=)
                          4: fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa (hash: FiX7MCMvjPDZE/cImOvH2wlf9CnqJcDrYSZ+kARwu7c=)
                          5: pERg8oiWPMLUHsmGEshAuW_aqRs.roa (hash: zmESXdehojS6eaz2GF04+HNwgLED8OdvpzfNZhfer0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:f1:6b:d9:9e:c8:a3:d7:e6:30:e0:43:da:f7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
        Validity
            Not Before: Jan 31 15:00:45 2025 GMT
            Not After : Feb  1 15:00:45 2025 GMT
        Subject: CN=e3cc75f0f434964ec477492ff400c9d5e9ed9a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:d7:3d:bb:cd:66:bd:c0:36:2f:32:7e:f9:
                    b0:de:e2:25:33:ed:86:39:7c:7b:06:b9:15:d8:fb:
                    f5:6c:6a:67:a7:e6:95:27:83:55:bc:0f:1f:cc:a0:
                    33:7e:87:ea:77:11:1a:23:77:2b:ee:2f:b9:82:f0:
                    ca:96:a1:a6:2e:7c:4e:98:9d:24:ae:f9:9b:6c:cf:
                    e1:c9:e9:e4:d8:da:0a:94:ec:89:45:6b:63:57:0f:
                    a9:c3:2a:cc:6c:24:08:96:e3:a5:e7:bb:e7:5d:d0:
                    fd:b7:8c:f2:d1:56:43:01:77:d9:7a:0a:a5:3a:88:
                    2f:fb:d0:f8:e4:58:a8:a8:64:56:1b:ab:ab:10:eb:
                    3d:47:cf:c2:24:db:fc:72:fd:c5:cd:b3:85:3a:64:
                    79:6b:3a:e2:d5:86:2d:0e:e7:27:36:7c:39:54:1c:
                    ba:b4:0f:d8:29:d3:64:c7:d1:37:a8:8a:97:5b:4f:
                    07:5e:8c:c5:bc:09:e2:3a:99:a8:3b:ba:84:fc:63:
                    f2:96:33:08:9a:79:9d:aa:4b:34:bf:0a:90:0f:4e:
                    45:95:32:57:8b:89:7f:c1:31:be:70:16:f9:f4:e0:
                    38:d3:ad:33:7e:94:09:17:be:4b:84:09:11:7f:15:
                    0f:d6:54:4b:68:59:f3:5c:cc:10:a9:7a:14:07:31:
                    a7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CC:75:F0:F4:34:96:4E:C4:77:49:2F:F4:00:C9:D5:E9:ED:9A:46
            X509v3 Authority Key Identifier:
                keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f8:e3:5c:2f:95:6e:b3:99:1a:04:d6:ff:07:21:a5:88:7f:
         dd:f6:f1:09:58:32:7d:6b:5a:ee:ca:f6:a8:a4:85:36:21:c5:
         36:9c:fe:54:cd:77:37:3f:b6:7b:bd:0e:54:bc:98:d4:61:57:
         a6:69:03:8a:da:96:d7:0b:0e:3d:0f:7b:94:81:25:eb:d8:28:
         45:7b:83:ff:5a:00:7b:3b:24:3d:f1:cb:3b:e1:8f:98:3f:e8:
         56:ee:73:46:e4:0d:ea:95:54:45:4d:65:2e:7c:af:6a:4c:69:
         e2:85:ff:4d:7d:15:d5:09:9d:5c:00:07:ac:ae:fe:9a:84:d7:
         11:03:62:6a:f4:90:66:63:52:76:85:63:d7:bf:25:fc:b5:8d:
         65:83:61:9c:6d:4d:2f:83:b3:1c:d8:80:da:e5:b6:77:91:d1:
         e3:9f:6b:18:f9:e9:5a:44:08:72:9e:b3:aa:63:68:75:92:24:
         3b:67:1b:af:11:95:33:7b:7b:21:3e:c1:b5:97:e1:89:c8:96:
         29:c7:13:d7:f1:7a:bf:6e:12:b5:39:1e:78:11:ca:95:97:e9:
         c8:b0:1a:21:de:95:d5:ca:4c:ad:7b:fc:94:ec:e8:bc:0f:59:
         30:6e:1d:96:18:d7:c0:49:89:e7:3d:2a:5e:77:bd:5e:d8:ba:
         c3:45:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----