Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File:                     Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier:          iic1C1Jp+80cK9xxH+bXqyMOgGYEF4HpVdO+SP6E+zw=
Subject key identifier:   92:91:ED:13:86:EA:04:1C:41:B4:0E:59:7A:10:32:A3:87:6F:3D:C3
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer:       /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial:       0194BD175E6502FCD00D84F5304BEC149A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 16:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:12 +0000
Files and hashes:         1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: jfkL0daG+37oCYbdY4YZ2P9Z36NqTbsEo5Ue9mR5NJk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5e:65:02:fc:d0:0d:84:f5:30:4b:ec:14:9a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
        Validity
            Not Before: Jan 31 16:00:12 2025 GMT
            Not After : Feb  1 16:00:12 2025 GMT
        Subject: CN=9291ed1386ea041c41b40e597a1032a3876f3dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:d1:d2:2d:9f:06:60:a7:4d:4e:bc:0a:67:
                    e4:a6:90:36:92:39:98:f5:6c:d8:b6:d0:aa:39:13:
                    6f:46:95:95:12:a6:f3:cd:eb:1f:9f:c2:7a:5e:d5:
                    03:9a:4b:21:c6:0b:e9:7b:29:ba:c2:81:b3:81:a7:
                    dc:aa:bf:9f:42:2d:9a:d8:8d:32:6b:d8:51:20:9b:
                    08:5c:70:42:a9:74:7a:8a:ea:17:1d:cc:0a:3b:fb:
                    db:ba:b8:85:89:2c:bc:96:24:56:ad:28:4c:c5:50:
                    5c:d7:10:a7:c6:37:a9:7b:ec:a8:90:7a:76:6e:32:
                    5d:61:dc:68:0a:8c:ea:63:e6:02:08:b2:81:73:16:
                    97:e8:d4:53:1d:bf:de:12:08:3a:1e:36:a4:ef:4f:
                    7d:39:13:29:9c:96:09:ce:5d:85:60:e1:6c:30:8a:
                    fc:d2:62:34:b6:de:fd:bc:e9:bd:f6:15:5b:a9:0a:
                    e1:cd:90:6e:b7:82:92:99:8e:c0:01:5a:43:72:99:
                    7f:74:e1:2a:ae:b1:e1:cb:21:c0:93:ab:06:a0:e7:
                    f1:4b:09:21:7d:da:08:93:6d:7b:ef:d6:eb:37:e7:
                    7a:5f:85:df:58:16:04:a8:75:aa:6a:50:15:1d:ae:
                    ad:31:4d:91:3b:f3:16:e7:ad:b3:25:fa:09:8a:b5:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:ED:13:86:EA:04:1C:41:B4:0E:59:7A:10:32:A3:87:6F:3D:C3
            X509v3 Authority Key Identifier:
                keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5e:59:2b:41:d3:b3:71:d1:52:00:56:3c:4f:49:6e:70:3f:
         0b:07:04:4d:92:f2:8a:63:e2:46:a7:8d:dc:d5:51:8c:7b:59:
         14:20:f1:7c:7e:9b:c0:16:ec:ad:60:e2:45:76:38:37:02:85:
         0d:f9:6d:1c:39:5f:7a:7d:f5:24:e3:72:af:2d:82:1b:c3:7a:
         94:bd:48:96:9d:ae:ef:4e:66:f4:6d:2e:7c:68:25:b4:13:1f:
         69:40:11:e6:a2:f5:0e:02:e8:bd:8f:fe:fb:6e:ee:8b:6f:90:
         4f:10:93:72:34:a8:3d:a0:84:e2:3d:e5:8e:1e:03:b7:e6:f2:
         da:f1:32:3d:0c:d3:4c:82:17:b0:46:42:37:14:ae:45:5b:7e:
         a6:5d:7d:03:9d:f3:cd:c4:57:35:4d:17:a8:3d:7a:15:19:91:
         ec:a3:d7:a8:6e:93:5d:27:d0:9f:13:eb:4b:fd:99:07:2a:4a:
         aa:3d:f3:95:83:a4:69:3d:c5:4b:a2:71:4b:00:08:3a:ca:37:
         00:4c:d1:6f:71:8d:80:8a:02:9e:4c:20:03:25:f1:c3:23:f0:
         99:6c:76:2c:2b:6d:8f:30:82:31:f8:50:cd:ce:fa:3a:e4:2f:
         f3:c7:05:4f:02:03:e9:ef:5c:0b:d8:50:3a:65:c8:a7:43:9f:
         85:ed:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:10 2025 by rpki-client