Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File:                     2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier:          7R8BJM1uwCNYUXQGOnYqeFlIR9AVwJtkyBZfQEiBC40=
Subject key identifier:   AC:5D:F6:07:9C:D3:B4:2D:7B:B3:FD:0D:46:A5:B1:88:B1:A9:43:41
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer:       /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial:       0194BD17E764589883A0DF6E3D0D18539708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number:          0269
Signing time:             Fri 31 Jan 2025 16:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:47 +0000
Files and hashes:         1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: 73veWSu2jNui4zXTAGYxtov1lSnz8X8kdljNprBOT3w=)
                          2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e7:64:58:98:83:a0:df:6e:3d:0d:18:53:97:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
        Validity
            Not Before: Jan 31 16:00:47 2025 GMT
            Not After : Feb  1 16:00:47 2025 GMT
        Subject: CN=ac5df6079cd3b42d7bb3fd0d46a5b188b1a94341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:d2:c7:5c:62:ad:77:87:74:62:58:95:30:
                    7c:4b:63:e9:ae:6c:a5:09:7b:60:3d:54:71:73:f9:
                    54:2e:69:a2:97:fd:28:ea:0d:09:e8:61:58:25:a4:
                    9c:e1:aa:e1:df:6c:2e:d7:fb:74:0e:2e:d7:06:88:
                    f4:bd:a2:c0:12:a6:08:82:11:c2:84:4e:aa:c6:0d:
                    17:a2:3a:76:76:59:40:d3:0d:83:24:27:ae:7a:5b:
                    45:7e:8e:b9:53:47:65:71:ab:3b:55:c2:9a:6f:f6:
                    a1:c1:35:a9:35:dd:c6:fb:eb:16:ff:45:73:b4:94:
                    64:d3:d4:79:e4:bd:13:79:f1:c1:ae:8a:f1:a1:36:
                    2a:3a:ae:bd:69:49:99:0f:51:8c:22:de:9c:19:6e:
                    9f:43:3a:c9:0d:da:2f:0c:c8:e7:3f:6a:ba:d6:1e:
                    d9:96:1f:e3:79:2a:65:5b:65:84:bb:5d:c3:d9:fa:
                    9a:bb:37:08:48:95:e6:a0:a8:3b:59:66:6b:9f:19:
                    c7:4d:50:7d:49:b2:98:d2:f9:20:e8:53:0f:4d:04:
                    be:ca:55:44:74:9a:ce:87:a6:4b:5e:67:a8:ab:2f:
                    66:2a:d8:e5:f0:47:0e:42:1a:c3:a6:74:93:4a:74:
                    6e:c9:76:8c:60:b2:d9:57:6a:50:8a:b2:c1:ae:61:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:F6:07:9C:D3:B4:2D:7B:B3:FD:0D:46:A5:B1:88:B1:A9:43:41
            X509v3 Authority Key Identifier:
                keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:b5:a0:74:9a:d6:69:81:99:12:2e:0d:78:a6:30:ab:5b:
         c0:61:e4:5b:bf:57:ff:1f:9a:63:c2:4c:60:08:3a:66:e7:a8:
         85:91:7b:9c:1a:be:ef:84:83:76:30:6c:ae:94:c5:13:69:62:
         c1:4a:04:45:18:01:b4:b5:be:f9:a8:ca:80:21:ce:e7:22:7c:
         c3:a3:75:43:98:13:c2:84:74:8d:f7:c2:96:60:e4:73:be:b8:
         c9:14:49:ed:0f:94:a2:61:50:cc:e0:7e:a8:65:83:eb:6c:1b:
         49:9e:89:0a:c3:4b:3f:08:1b:33:8e:4b:53:6b:9e:36:65:21:
         ba:b2:b4:aa:80:e8:07:22:4e:fa:99:62:e0:26:01:30:8c:3f:
         1e:61:7c:c2:da:2c:fb:55:4f:c3:6f:31:8c:7f:ed:d2:fe:df:
         4b:f3:58:83:2e:78:af:79:73:6e:1b:bb:24:53:ff:f8:4a:d4:
         4e:42:74:9e:3d:04:de:a7:45:75:6b:14:2d:53:3b:ea:10:6a:
         ed:61:9c:1b:26:43:2b:52:49:56:b5:f9:e7:7d:43:42:39:5d:
         d8:11:fe:3b:6b:ee:c7:36:fb:2a:bd:f0:0b:29:db:f4:d6:80:
         90:86:8b:f3:44:e5:f4:d7:16:5b:78:7f:68:28:8d:2f:bc:bf:
         95:c9:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:35 2025 by rpki-client