Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
File:                     I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json)
Hash identifier:          8JSZYbVydKixLDhhUjvR250mBbdYyS7saGmguxIEmOM=
Subject key identifier:   8F:DE:C0:55:75:BF:75:0F:1F:CB:34:24:FB:D7:E8:B9:D9:98:BE:87
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Certificate issuer:       /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial:       0194BC3CB6736225801789E645C980E4CE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
Manifest number:          1155
Signing time:             Fri 31 Jan 2025 12:01:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:22 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:22 +0000
Files and hashes:         1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=)
                          2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=)
                          3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=)
                          4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=)
                          5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: JvehFh1BJdQzTDUs83HkSKTHTlU28SXrzqukZKpg/tI=)
                          6: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=)
                          7: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=)
                          8: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=)
                          9: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=)
                          10: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=)
                          11: mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa (hash: WKtl9/rCVdqattn0ipGNumFRIFTCx0VUypyRv/GA3Gw=)
                          12: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=)
                          13: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:b6:73:62:25:80:17:89:e6:45:c9:80:e4:ce:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
        Validity
            Not Before: Jan 31 12:01:22 2025 GMT
            Not After : Feb  1 12:01:22 2025 GMT
        Subject: CN=8fdec05575bf750f1fcb3424fbd7e8b9d998be87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:c1:7a:1a:d9:22:7e:e5:6d:2a:07:9e:00:
                    c3:de:c1:08:9a:5f:43:f9:a7:00:49:63:44:0f:9f:
                    94:05:d8:c3:cb:09:b5:50:32:46:8d:3d:06:5f:e3:
                    1f:d9:1b:c2:63:d5:ec:b4:06:0d:20:a4:de:6b:97:
                    19:af:8a:87:17:11:89:cf:91:2e:4f:81:16:e1:ef:
                    6d:e5:14:7f:1b:34:42:a9:75:63:00:b7:ce:73:5d:
                    9b:35:e8:a9:9a:f1:21:76:f8:9f:91:47:f1:11:e1:
                    26:60:21:cd:18:f9:a7:52:d0:84:ca:a5:65:b6:34:
                    80:2a:57:26:13:d3:64:ff:78:ad:e4:28:22:9f:c2:
                    70:26:55:0e:ff:ac:2f:c4:73:11:b5:0b:f2:70:eb:
                    fe:e5:12:b2:d6:89:a5:51:5f:ee:9f:33:e1:ad:42:
                    9c:b8:4c:28:2f:77:4b:dd:39:9a:cb:d1:28:2f:75:
                    d8:5e:95:fe:c9:f5:98:72:d0:ae:0a:c1:30:de:ee:
                    7c:7c:58:be:1c:4d:f3:e3:f8:45:09:13:56:27:ec:
                    87:ce:ee:c3:35:65:20:f7:d3:2b:a3:c7:ef:b6:e6:
                    86:1d:7c:b6:71:45:a8:79:93:38:ea:4a:75:11:84:
                    ad:70:73:8d:44:99:05:4e:20:d6:f4:21:6a:6a:fa:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:C0:55:75:BF:75:0F:1F:CB:34:24:FB:D7:E8:B9:D9:98:BE:87
            X509v3 Authority Key Identifier:
                keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:8f:4b:c9:dc:6d:16:4a:e1:68:ad:bd:4b:6b:9e:5b:c0:
         4d:ce:2f:43:57:16:79:fe:bd:17:ed:ce:86:fa:c8:47:b8:50:
         20:7d:0a:5c:c8:02:34:a7:91:80:57:89:54:b2:23:6d:cf:5a:
         af:2d:9b:83:58:16:a8:ee:ba:b2:d3:be:ea:de:6f:5d:2a:e6:
         ed:f4:63:93:5d:4c:c2:3d:68:2d:4e:82:38:83:2a:bb:fa:0c:
         94:f1:bf:fe:86:ae:10:0a:92:fb:3a:4a:a2:93:c1:d0:a9:44:
         6f:03:bd:1c:20:e6:6a:70:6e:a5:c7:e2:70:13:53:95:37:13:
         be:54:d2:2a:12:73:43:d8:db:c4:88:74:dc:58:57:4f:8a:e1:
         d3:ec:e9:a3:6a:ef:e8:d4:c3:04:a1:19:76:65:8d:83:f0:34:
         84:21:e1:65:13:c7:09:8f:e6:be:5d:cc:4c:4a:00:d3:a4:c6:
         72:09:ee:f9:0c:df:45:66:1b:92:88:10:ad:17:ae:af:2a:d8:
         eb:2b:05:a1:d9:bd:b7:49:83:67:e3:3e:5d:c8:d9:fa:5e:04:
         cf:8c:7f:e6:df:b1:6f:7c:50:aa:c0:fe:74:a5:0a:50:31:22:
         da:8a:79:5e:bc:f3:29:9e:71:8c:d2:44:1f:4b:ea:94:36:f8:
         8b:27:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:12 2025 by rpki-client