Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File:                     ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier:          wDDjNsMghftH3yrxSxelYbhE/zSNJu2zGQmmdr/I9V0=
Subject key identifier:   34:EE:08:7D:31:DB:71:77:EF:2B:B7:87:5B:66:B9:07:D2:73:49:70
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer:       /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial:       0194BD856E948F816E859CFA1831EC573AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 18:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:25 +0000
Files and hashes:         1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
                          2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
                          3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
                          4: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
                          5: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: yOqe5ty3pEafENVeuDhzaN6qUjVDqRuuFA2kuaZMICk=)
                          6: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
                          7: qGjMBqPIGRJHE7hen5oLYlZvunI.roa (hash: tYN0YvNDzfdVUoqabm5wEwnZWZKNLJ2LiXHf0iUoR6A=)
                          8: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:6e:94:8f:81:6e:85:9c:fa:18:31:ec:57:3a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
        Validity
            Not Before: Jan 31 18:00:25 2025 GMT
            Not After : Feb  1 18:00:25 2025 GMT
        Subject: CN=34ee087d31db7177ef2bb7875b66b907d2734970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:3e:44:08:cf:a9:58:80:2f:09:0c:89:5a:
                    ce:c1:fc:ce:af:56:0c:0e:5d:ec:7f:82:fc:c2:f5:
                    33:86:c4:cf:a9:cb:26:ae:d4:a6:33:ed:32:01:a7:
                    fe:f8:6e:b7:80:16:51:43:8c:2b:3b:0b:39:15:55:
                    ff:36:42:e5:ff:e7:a7:4a:8b:85:e0:40:b6:91:4f:
                    58:91:ee:b2:7c:34:34:09:d9:5b:3f:68:10:b9:1d:
                    b5:df:c1:15:cd:36:5f:41:8f:8b:8f:aa:ba:2b:a5:
                    19:45:2e:05:23:07:9a:f2:f1:22:17:c1:7d:13:11:
                    e6:98:17:89:0f:3d:db:ee:a4:e0:59:9b:80:da:79:
                    cb:f6:9e:e2:43:90:03:f5:73:f5:6a:71:56:fd:a2:
                    97:29:0f:2d:54:dc:7d:2f:47:d4:7f:26:dc:c6:eb:
                    5c:09:67:7e:7e:ee:34:7f:eb:7a:a2:b6:64:5a:bc:
                    ec:7a:c6:40:51:ea:97:11:cf:d8:42:34:32:28:b0:
                    5e:97:47:b7:b3:64:c7:79:1a:ff:6b:28:24:4d:a9:
                    48:16:f4:29:b4:78:b2:7f:fc:b1:25:11:d0:bd:d5:
                    74:c7:4e:7f:c2:ab:47:ae:69:83:49:5d:63:62:40:
                    b1:47:6f:a9:c1:4e:28:24:be:4e:9b:be:52:3b:db:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:08:7D:31:DB:71:77:EF:2B:B7:87:5B:66:B9:07:D2:73:49:70
            X509v3 Authority Key Identifier:
                keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:d4:2f:8d:a1:12:d9:0b:68:6a:97:9e:87:86:8f:b6:ac:
         fc:33:3c:ba:6e:22:e2:90:7d:e8:09:96:53:d3:8f:a4:30:11:
         72:1e:2a:44:bb:00:32:6f:f3:43:c2:18:3a:23:40:1b:68:7f:
         1a:a6:17:8b:7b:ab:dd:36:3e:c5:93:86:e9:a8:42:41:ca:cb:
         1e:0e:65:70:33:51:b5:d9:bd:6d:b8:ad:28:b6:75:5f:0f:5d:
         75:90:2d:ef:7c:ea:95:10:48:7e:3d:65:f6:ee:15:b0:bd:26:
         ec:e5:9a:66:36:1a:ea:73:7a:28:2b:24:63:89:a4:a2:10:6f:
         b1:d2:03:33:cf:e3:3e:0c:ca:3c:53:76:4c:16:8d:d1:7d:a0:
         42:6d:2b:ba:25:11:af:e1:b6:15:99:1d:19:b7:0f:17:fe:07:
         09:e2:05:85:11:39:ca:d1:ba:a6:85:ac:2f:3d:91:a5:3e:da:
         d2:5d:f1:53:f2:ef:12:73:36:62:3e:ea:a0:b9:8b:24:7b:04:
         22:6d:4f:39:4c:6d:10:7e:9b:a4:54:94:6d:d8:43:dd:08:8e:
         8e:41:3a:b0:ff:7b:df:34:1e:97:43:6a:82:7c:a7:1e:e0:08:
         0d:e6:d7:71:f5:fd:18:ea:5b:47:72:bb:e1:57:e2:66:63:8e:
         fc:42:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:55 2025 by rpki-client