Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File:                     zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier:          QpSTG5PulZczafqmIC7U2W0i2n1rXrYGolNF9JWFtsI=
Subject key identifier:   FA:6B:26:D9:C3:C1:B2:05:FA:A7:BB:4A:E2:10:EC:22:22:EE:60:47
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer:       /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial:       0194BC72E830DA0E03B7B44854FA3602B205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 13:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:34 +0000
Files and hashes:         1: Ia7_fQGIqVYuYGN38gmKtoySvvs.roa (hash: ND7M9PBDfnLYdMRYmEV2myMBk36vw3h/zFiPRe14Vn8=)
                          2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: O7UmncyI3thOjNNTwmBkUMACJdOBnHg+ibjhXhekUbE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e8:30:da:0e:03:b7:b4:48:54:fa:36:02:b2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
        Validity
            Not Before: Jan 31 13:00:34 2025 GMT
            Not After : Feb  1 13:00:34 2025 GMT
        Subject: CN=fa6b26d9c3c1b205faa7bb4ae210ec2222ee6047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:15:c0:5d:9f:c2:a7:29:77:b9:db:57:b4:
                    10:e4:f5:f0:d8:3a:98:33:87:75:d9:bc:47:13:b6:
                    ad:e4:00:05:1e:c2:3e:a2:44:7c:91:bd:47:db:e5:
                    c3:6f:e9:f5:64:6f:bc:9b:01:51:af:2d:39:08:d8:
                    26:80:93:f4:5f:d6:c1:b1:a7:b4:cc:04:fe:1f:92:
                    99:83:39:10:a8:7f:62:db:ee:73:31:6f:36:02:06:
                    32:bf:12:45:c9:45:9b:6c:3d:2d:77:cd:40:a7:db:
                    54:00:a1:73:90:89:bf:d7:63:da:b7:c2:71:2a:9e:
                    c0:fc:71:b1:70:ee:19:e0:2e:0d:e6:b8:00:95:8d:
                    cd:46:29:6a:63:c2:46:0c:f3:e3:8f:bc:9b:10:80:
                    8f:c6:e5:fd:fa:3c:a1:f7:85:d5:be:b9:4c:d5:6c:
                    1d:b0:03:34:04:61:a9:47:19:8a:74:41:c7:24:e5:
                    5d:d1:ab:50:57:87:b0:cd:80:19:da:99:a2:6c:f0:
                    90:fc:f7:5e:5a:e7:ab:6c:88:d3:69:95:66:fe:8f:
                    a2:36:20:05:98:46:30:50:8f:68:2a:3e:3a:51:b5:
                    fd:51:1d:fd:65:5d:ab:c7:f7:ad:a6:d1:57:93:17:
                    31:8f:d3:2f:26:9d:88:97:f9:00:5f:d6:61:3e:e5:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:26:D9:C3:C1:B2:05:FA:A7:BB:4A:E2:10:EC:22:22:EE:60:47
            X509v3 Authority Key Identifier:
                keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ee:70:dc:aa:a9:7a:a7:19:24:de:bc:38:1a:ac:a3:7b:b1:
         c0:bf:4d:65:0a:a0:a2:97:d1:13:e7:d1:b5:14:c0:29:99:0f:
         05:a7:31:a4:11:15:85:1a:f6:16:cb:82:7d:d8:1d:7d:48:10:
         99:3a:84:9d:59:1c:a0:a7:96:f8:e3:4e:ae:8d:c8:b8:52:2b:
         2c:b9:11:20:5f:bf:20:af:4f:79:b5:92:5d:66:fc:cd:97:11:
         4d:f5:cc:a8:55:e9:1f:9a:81:c2:f8:27:79:55:ef:ee:79:4c:
         b4:65:a6:59:bd:69:60:68:e7:13:5b:bd:00:16:50:a6:67:c9:
         ad:ca:44:f8:09:9a:3f:bd:e0:14:1e:ca:5c:4f:f9:08:eb:2a:
         74:c8:0c:6f:2a:5f:cd:8e:b3:43:e9:83:95:ec:b5:49:37:e4:
         75:06:b5:06:64:cd:55:a6:ef:48:d7:01:77:fc:6c:cc:9a:2b:
         ea:81:8a:c1:8a:20:63:b8:2a:e0:74:a6:27:eb:71:c5:62:80:
         f4:5a:95:b6:54:c2:84:bb:3b:bf:5f:44:42:c6:a9:ca:7c:e6:
         f8:8f:cf:ee:8f:55:e3:f8:e3:23:6b:5b:7f:a4:a5:3e:43:a0:
         0f:39:10:00:1b:d2:96:93:0c:6e:47:c9:24:3b:b5:97:db:20:
         9c:64:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:57 2025 by rpki-client