Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File:                     Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier:          3fjADGwZrqTlunq2pDo+ETZ4QE2xVLcOnCghHesMhdM=
Subject key identifier:   3E:67:0C:10:C9:90:B5:24:9E:87:42:84:2A:0D:FB:D1:DB:B3:57:4B
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       0194BC3BBF02B189CE985C48101A6AF397B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number:          08EB
Signing time:             Fri 31 Jan 2025 12:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:19 +0000
Files and hashes:         1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
                          2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
                          3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
                          4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: ruiMBfnbv0/AGmXtQs2mugC37ENdW8JHGfGiFkNfFQQ=)
                          5: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
                          6: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
                          7: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
                          8: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:bf:02:b1:89:ce:98:5c:48:10:1a:6a:f3:97:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Jan 31 12:00:19 2025 GMT
            Not After : Feb  1 12:00:19 2025 GMT
        Subject: CN=3e670c10c990b5249e8742842a0dfbd1dbb3574b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:38:65:d3:77:ba:b1:c4:f4:93:ad:1d:89:
                    41:4d:7e:17:70:87:4e:01:ed:dd:3c:b2:35:12:62:
                    61:c1:a2:b2:5f:f2:b9:ab:b2:aa:94:31:cb:25:2e:
                    fa:29:6d:30:8b:ab:85:30:31:32:52:1a:ed:ba:34:
                    94:fe:93:3d:27:7b:0e:c8:a8:17:55:34:40:e1:5a:
                    d5:5d:3f:17:11:5e:37:77:bd:3e:3e:7e:cb:c9:88:
                    ae:c4:96:cf:7a:d7:9a:85:3a:f2:96:98:7d:69:05:
                    ae:a4:3f:18:b8:ce:0e:65:4e:29:cb:a3:44:6c:cf:
                    24:24:d5:04:fe:9b:30:c5:22:15:68:9b:2a:0d:5a:
                    89:5b:d5:5c:b9:fc:e9:9f:57:90:b5:4d:71:f3:5d:
                    13:ec:0d:fc:60:bc:03:1d:14:63:68:84:6a:35:13:
                    8d:9c:21:e1:5e:f4:bb:8f:10:41:3e:21:c3:2c:ea:
                    77:4f:fd:65:b7:03:14:b0:1f:13:74:5d:20:95:74:
                    3e:3d:06:61:2f:7f:b6:13:bf:bd:3e:e5:12:26:ec:
                    f1:02:69:53:b0:5a:95:e4:dd:ec:32:08:26:5c:2b:
                    29:ac:e1:e2:29:bc:68:72:45:47:8b:0e:22:c3:ca:
                    5c:67:83:7d:d6:e1:2c:06:56:62:3d:77:06:bd:fa:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:67:0C:10:C9:90:B5:24:9E:87:42:84:2A:0D:FB:D1:DB:B3:57:4B
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c4:e8:d4:d3:07:95:46:5b:4b:f4:62:97:c4:8d:e6:6e:fe:
         ec:b0:a7:fb:22:31:0f:52:12:4b:2d:d3:d6:ce:4b:91:42:f5:
         8f:00:1e:8a:f9:c5:8b:53:2b:31:92:23:a3:fe:19:96:81:fa:
         c9:01:36:22:8e:87:76:59:2e:49:3b:5f:59:bd:44:0f:34:9f:
         0e:c7:68:cf:d1:ea:41:73:ee:2d:a9:e7:04:15:69:dc:a8:4d:
         22:b9:5f:ce:f8:28:90:53:f8:d4:65:b0:6c:53:19:b7:3b:c5:
         35:a7:a4:53:94:2b:f6:ed:bb:e8:a0:1f:21:a7:2e:4b:f5:f8:
         4e:9c:56:9a:d1:e9:3d:bc:15:6c:94:1f:e3:31:1c:c2:b2:74:
         02:3f:50:bb:34:d7:eb:e9:00:17:49:c6:b1:d0:18:33:3b:c6:
         32:66:93:01:67:32:0e:e5:33:3c:ae:43:d8:be:93:cf:1e:b5:
         d1:b8:91:09:e5:97:ac:3e:46:05:65:08:d3:3c:8c:4c:7a:47:
         b1:ce:64:0d:ba:83:87:4d:19:35:6e:49:ef:0a:d5:70:6e:53:
         36:e5:cf:87:35:9a:3a:70:19:db:5c:4c:96:be:1d:b0:6a:09:
         29:bb:c6:43:94:de:bd:cf:de:56:28:0d:dd:b6:52:80:ad:0a:
         dd:c7:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:59 2025 by rpki-client