Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File:                     ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier:          N1QwuYMX1mVMfBDVwfRc1oalqmubZvSyoIg8ZJCYer0=
Subject key identifier:   59:0B:0F:C7:C6:02:48:16:E6:BB:04:ED:67:A4:C4:29:74:D6:D7:78
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer:       /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial:       0194BD17CA5F0E65B2C1DD3958B18BBF55A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 16:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:40 +0000
Files and hashes:         1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: bCi29MnAosABfhG1EO5DNkZlhly6uqvWCxNzeLk6Yzo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ca:5f:0e:65:b2:c1:dd:39:58:b1:8b:bf:55:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
        Validity
            Not Before: Jan 31 16:00:40 2025 GMT
            Not After : Feb  1 16:00:40 2025 GMT
        Subject: CN=590b0fc7c6024816e6bb04ed67a4c42974d6d778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:36:ec:a6:b4:0a:2d:99:f8:42:22:8f:b0:
                    a8:7c:07:06:80:4b:45:98:52:6e:2c:da:5f:20:e3:
                    15:0e:76:ab:b9:bf:a8:3f:6e:f2:0d:e7:84:34:d9:
                    1a:0f:a0:6c:e5:ae:ec:19:a8:5f:1a:81:da:0d:51:
                    54:6f:7f:c2:26:99:78:20:dc:69:9e:bb:a5:67:22:
                    17:a7:e9:4e:ca:d6:d7:eb:5f:e9:65:c0:df:9c:d4:
                    37:ca:e1:17:c5:9e:7c:65:c6:6f:46:9a:3a:56:44:
                    1c:1e:ee:1c:e9:b7:3f:16:b6:00:4f:f0:50:0a:38:
                    5e:34:bd:48:6a:0a:22:26:4a:84:6b:88:d3:2d:d4:
                    c6:fc:7c:7d:8a:ff:70:86:f2:4a:81:64:3f:9f:ff:
                    8c:46:50:94:48:c8:9f:74:e7:f6:1e:c4:7f:de:72:
                    cb:35:a1:ab:65:19:2c:59:ad:ae:be:d5:70:c0:e0:
                    8b:3a:91:c5:70:78:ba:29:2e:91:46:bb:20:a3:ee:
                    75:77:94:8f:c6:43:1e:28:8f:f7:07:1a:af:bd:23:
                    7c:fc:34:93:27:32:2e:de:c7:74:36:ba:04:47:37:
                    8f:9d:16:9e:81:64:78:c4:e3:97:81:91:70:13:49:
                    f9:48:a6:e5:9e:10:6d:07:40:48:40:83:40:0f:3e:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:0F:C7:C6:02:48:16:E6:BB:04:ED:67:A4:C4:29:74:D6:D7:78
            X509v3 Authority Key Identifier:
                keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:fb:9f:18:82:de:30:d3:37:4e:81:f9:f9:5d:4f:67:67:
         dd:c1:f0:85:7e:2e:f1:89:13:74:cb:53:c4:a9:72:21:44:a5:
         26:3c:2b:f2:c3:1d:ca:ee:28:9c:ee:fd:4f:46:8f:c4:ba:04:
         7a:74:24:73:4e:44:de:29:90:98:6e:3c:a9:d6:19:61:86:fc:
         4f:cf:61:02:96:68:9b:5c:5c:cf:6c:e6:61:a9:ac:75:93:f7:
         33:9c:e5:42:89:f4:6a:a5:41:f4:cf:62:d9:a2:9b:f4:b7:75:
         59:74:b2:08:8b:b7:55:d4:83:c5:7c:3d:fb:d4:77:ad:3b:6e:
         47:43:4c:bb:f1:01:78:33:ff:e8:bd:26:64:e1:aa:14:1e:9d:
         7e:52:5d:03:85:a1:61:35:0c:59:03:2c:2e:03:0b:4f:93:da:
         d6:cd:5a:8e:9e:5c:0c:bd:15:e8:d9:8e:0a:9c:75:e5:23:9b:
         58:07:ca:0d:eb:bc:d3:d7:ce:b9:ab:a7:c1:85:33:09:88:e7:
         d1:97:78:0c:79:56:c5:6a:57:dc:79:b6:2d:5e:0e:92:59:91:
         79:43:de:29:40:dd:7c:5b:b8:60:38:28:b5:8b:f7:48:08:a8:
         7e:ea:a5:be:e6:9b:24:b9:e8:49:75:d7:95:34:14:7e:37:53:
         5b:87:0c:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8pfDmWywd05WLGLv1WiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDdmN2UxNzQxNzlhMTMzZTMwYzY2MGVkZmE4NmU3NGE0
MGRkOTUwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
Eyg1OTBiMGZjN2M2MDI0ODE2ZTZiYjA0ZWQ2N2E0YzQyOTc0ZDZkNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiM27Ka0Ci2Z+EIij7CofAcGgEtF
mFJuLNpfIOMVDnarub+oP27yDeeENNkaD6Bs5a7sGahfGoHaDVFUb3/CJpl4INxp
nrulZyIXp+lOytbX61/pZcDfnNQ3yuEXxZ58ZcZvRpo6VkQcHu4c6bc/FrYAT/BQ
CjheNL1IagoiJkqEa4jTLdTG/Hx9iv9whvJKgWQ/n/+MRlCUSMifdOf2HsR/3nLL
NaGrZRksWa2uvtVwwOCLOpHFcHi6KS6RRrsgo+51d5SPxkMeKI/3BxqvvSN8/DST
JzIu3sd0NroERzePnRaegWR4xOOXgZFwE0n5SKblnhBtB0BIQINADz5hhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkLD8fGAkgW5rsE7WekxCl01td4MB8GA1UdIwQY
MBaAFGTX9+F0F5oTPjDGYO36hudKQN2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEt
NDE2MjQ2NWI5ODgwLzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEtNDE2MjQ2NWI5ODgw
LzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPb7nxiC
3jDTN06B+fldT2dn3cHwhX4u8YkTdMtTxKlyIUSlJjwr8sMdyu4onO79T0aPxLoE
enQkc05E3imQmG48qdYZYYb8T89hApZom1xcz2zmYamsdZP3M5zlQon0aqVB9M9i
2aKb9Ld1WXSyCIu3VdSDxXw9+9R3rTtuR0NMu/EBeDP/6L0mZOGqFB6dflJdA4Wh
YTUMWQMsLgMLT5Pa1s1ajp5cDL0V6NmOCpx15SObWAfKDeu809fOuaunwYUzCYjn
0Zd4DHlWxWpX3Hm2LV4OklmReUPeKUDdfFu4YDgotYv3SAiofuqlvuabJLnoSXXX
lTQUfjdTW4cMpA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:11 2025 by rpki-client