Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File:                     zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier:          BMI8QFDwFhcPYlppLdH4TlNweLNX3GCWAQQRfikU4ys=
Subject key identifier:   46:6A:F0:71:30:E1:9F:50:92:D3:19:18:63:07:0F:16:D6:92:0B:E5
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer:       /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial:       0194BBCE7B7882767D204C2F755CE402AA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number:          0D2E
Signing time:             Fri 31 Jan 2025 10:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:58 +0000
Files and hashes:         1: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (hash: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=)
                          2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: NOrkzQXXKr5AIcQk/O705D+VMzhciRHr4x7S4K8jcPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:7b:78:82:76:7d:20:4c:2f:75:5c:e4:02:aa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
        Validity
            Not Before: Jan 31 10:00:58 2025 GMT
            Not After : Feb  1 10:00:58 2025 GMT
        Subject: CN=466af07130e19f5092d3191863070f16d6920be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:5b:93:63:06:c5:13:60:2a:b6:ee:07:c8:
                    7b:ea:9d:ab:92:ab:fa:8d:18:86:89:fd:24:32:5a:
                    43:94:d0:a9:66:0e:46:cf:01:c9:4c:78:cf:34:3e:
                    f2:56:53:ca:f2:54:42:3f:1f:35:ea:5e:8c:f0:db:
                    01:b0:08:e6:94:3e:e4:2a:f2:79:11:91:9b:93:3f:
                    4b:9d:c7:73:96:98:a4:a5:fa:f8:33:d7:c8:67:79:
                    97:f3:f0:92:8a:fb:d8:9d:a2:46:8f:9b:29:e7:ba:
                    3b:2a:87:19:d8:89:5e:fc:61:04:53:c6:2a:c2:19:
                    ae:a6:d8:71:21:b2:d3:12:81:ad:65:fc:a9:f4:39:
                    11:98:22:2b:4c:3a:9a:1b:6d:39:77:7b:83:47:48:
                    bf:a4:ed:1a:a3:60:01:1c:15:d0:24:98:15:07:7e:
                    08:bb:e7:78:cf:d5:bd:6e:9e:fb:8b:1b:38:52:f7:
                    e9:81:91:c9:45:c9:54:21:b5:ed:84:48:6f:6a:37:
                    cb:89:f5:80:32:14:0a:ee:6c:9f:2d:eb:4b:f2:06:
                    04:2a:50:c1:37:9a:74:36:1d:8e:e3:b7:e0:11:8e:
                    9b:de:8c:7c:03:75:a7:a5:f2:28:eb:1d:21:75:02:
                    ef:99:32:bc:12:97:15:8d:a6:38:36:d9:27:91:2d:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:F0:71:30:E1:9F:50:92:D3:19:18:63:07:0F:16:D6:92:0B:E5
            X509v3 Authority Key Identifier:
                keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:57:59:73:4d:06:8f:c2:f6:06:cc:5e:0f:b8:78:b8:ab:c3:
         4d:04:26:c1:9c:03:9a:ca:7c:13:e2:28:8d:82:51:e2:56:c4:
         c0:81:5c:50:57:69:3e:74:2e:6e:89:c2:73:e2:b5:d0:f7:9c:
         27:6a:6a:ce:99:6f:dc:4b:cc:04:0e:1a:6a:53:f6:25:db:63:
         95:53:d1:ee:5e:ad:9b:5a:b3:c0:a8:a0:79:7b:8f:76:27:e1:
         b4:3c:7c:ae:a4:31:e2:b4:fa:a0:ce:1f:2c:b2:a6:7d:69:19:
         e5:03:b8:7d:fa:bf:72:9d:b8:14:ce:f2:12:57:18:13:66:6b:
         66:a8:71:17:1a:6a:b0:23:b1:eb:5b:c9:0d:bb:eb:29:d6:4d:
         7c:0d:86:7e:86:0f:dc:fa:e1:91:eb:93:0f:37:65:91:e7:30:
         04:fa:2f:11:e3:90:74:2f:07:aa:86:fe:4a:8c:fc:d7:a6:6b:
         84:96:8d:67:c4:ec:d9:d2:f0:6b:81:dc:fe:37:49:7b:4d:ee:
         e8:32:66:c9:d1:60:77:fa:a1:30:32:6f:ef:0c:ee:01:2a:86:
         ba:e5:36:73:d8:38:f6:79:b1:6f:66:91:a0:4e:00:3f:39:ea:
         4a:2a:41:1b:27:1e:72:31:0c:59:b3:bd:d2:d4:ec:ce:43:ee:
         81:7d:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:01 2025 by rpki-client