Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File:                     Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier:          Js44/yaGL2J6m0F1p4Jt13Sf6eWtcVSs5I2Uv5C9t4g=
Subject key identifier:   02:3C:7F:4C:ED:1C:CF:55:06:DB:9D:3E:B5:B8:0C:DB:0F:9F:E9:2A
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer:       /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial:       0194BCE07B3B5DB273417ED500951AEF2F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 15:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:15 +0000
Files and hashes:         1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
                          2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: e6ywoLokGEMDIj8kd+HzjinDSmUQyP7fC23Kf4SsPys=)
                          3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:7b:3b:5d:b2:73:41:7e:d5:00:95:1a:ef:2f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
        Validity
            Not Before: Jan 31 15:00:15 2025 GMT
            Not After : Feb  1 15:00:15 2025 GMT
        Subject: CN=023c7f4ced1ccf5506db9d3eb5b80cdb0f9fe92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:93:01:6f:eb:3e:3e:f5:d7:b8:77:dd:06:
                    94:71:b2:ff:58:00:fd:f4:8a:22:b1:d3:97:70:e2:
                    33:f5:eb:c4:c6:91:e1:10:b6:30:ec:05:22:23:37:
                    8c:d1:26:75:20:89:e1:07:d5:07:a6:b2:71:c6:46:
                    7f:c6:eb:51:a9:3e:8d:71:66:f9:e0:3f:aa:d0:a4:
                    47:b7:fb:80:85:91:5f:ae:33:b4:71:db:44:06:9c:
                    ac:5a:16:c7:03:fe:4e:75:aa:fa:96:90:cf:4f:11:
                    31:29:9c:02:ea:55:b0:e7:79:da:8f:da:d6:94:61:
                    f5:24:fc:c5:23:16:12:a1:4a:23:72:5b:f1:4a:a3:
                    1b:0c:20:28:04:90:4c:79:16:6a:39:db:5d:24:37:
                    62:85:19:8f:17:c0:c0:5d:2e:71:af:90:29:d8:f0:
                    1e:d1:15:7d:61:da:bf:85:a8:6c:4c:ef:18:8d:69:
                    f9:5d:1b:1a:8d:61:01:be:e0:ea:ee:29:23:0d:67:
                    88:48:d7:a9:a5:07:85:25:36:e1:4a:d1:38:99:20:
                    17:b9:80:58:13:d3:1c:a3:c4:49:0d:dd:eb:5a:03:
                    f1:1f:fe:d7:6e:76:38:8c:f9:98:49:b8:1c:f6:f0:
                    5b:0b:c9:03:21:54:9a:32:9c:ce:80:2c:9f:07:e0:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3C:7F:4C:ED:1C:CF:55:06:DB:9D:3E:B5:B8:0C:DB:0F:9F:E9:2A
            X509v3 Authority Key Identifier:
                keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1f:9a:a5:5a:62:23:3c:eb:d3:33:61:e9:5f:e4:86:38:50:
         6a:75:bd:74:8a:10:35:3e:a2:88:ba:3b:a0:ba:4b:5d:f7:c9:
         a7:a9:16:0b:cf:d4:09:21:2a:fb:06:2e:53:84:d7:72:2b:ee:
         e9:c8:67:b2:08:4d:9e:77:67:7f:70:f1:29:a4:f0:30:57:4d:
         df:c9:25:2d:42:01:a2:83:23:74:55:6b:ab:c5:35:ee:1b:b2:
         bc:7f:24:0a:18:aa:95:84:53:f0:7d:82:d4:0d:4d:07:1d:a5:
         7d:6b:54:fd:06:b7:7f:5f:b2:06:40:ab:2f:27:85:ce:fa:c5:
         dd:db:4f:28:83:30:6c:be:56:11:a9:27:a1:b3:8f:23:e4:42:
         39:71:8c:2d:06:ca:33:45:8c:02:00:53:c9:6c:a6:1a:28:15:
         86:6b:5c:54:e6:71:45:d1:27:45:59:99:3f:b0:f1:3b:6e:a0:
         a9:7c:9d:47:d7:39:1f:03:21:ce:e3:91:7a:59:f4:23:50:48:
         d0:d4:ee:89:d1:09:65:66:65:de:ad:9f:79:6a:5a:c3:71:19:
         62:e6:40:10:af:9b:9d:b7:9c:58:24:af:14:0c:4d:8d:63:cd:
         ca:a0:37:83:8e:61:65:68:02:99:24:5b:85:87:7f:42:c9:b0:
         04:e3:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:05 2025 by rpki-client