Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          gSbOx3iW5gCWVALOJ16zQ2CMQFKFjO/LXQyFgJv73wQ=
Subject key identifier:   A4:E4:0F:95:05:EA:C2:F9:DF:51:69:91:D6:25:21:97:43:A0:EA:CB
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       0194BCAA0C138594E9C5B9D34B3A52C0741E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 14:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:48 +0000
Files and hashes:         1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: 9FVNNsOkIBPJV+ppOYdO+ecJBBS6OgZrheUFMH2QrCY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0c:13:85:94:e9:c5:b9:d3:4b:3a:52:c0:74:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Jan 31 14:00:48 2025 GMT
            Not After : Feb  1 14:00:48 2025 GMT
        Subject: CN=a4e40f9505eac2f9df516991d625219743a0eacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:68:50:52:af:2c:72:e0:d0:26:9b:42:34:
                    5c:3d:6d:07:7a:5b:86:19:05:ee:fe:d4:be:5a:9a:
                    07:2f:99:63:70:e5:cf:a6:49:f8:d9:d3:34:03:a3:
                    41:1c:b6:fa:15:4f:4a:fe:af:cd:1d:d3:1e:32:76:
                    35:57:33:98:f7:2c:d5:4b:c4:50:fd:c2:ed:61:11:
                    ed:1c:14:5b:b9:55:a0:a6:ce:50:4a:27:ce:11:71:
                    44:2d:3a:2e:8f:b3:85:74:4a:92:bc:4a:f9:ec:fe:
                    ee:1f:48:10:80:80:64:01:42:79:79:5d:b7:11:75:
                    a5:0f:28:56:99:37:45:f7:e2:d2:d1:f1:51:25:f1:
                    17:ec:12:d0:96:3b:65:1d:56:e3:6f:79:e5:75:6a:
                    a9:cc:e3:81:88:0e:c4:06:69:5e:2f:2a:04:31:c2:
                    5a:86:7d:fa:4b:13:de:b5:60:61:c5:7d:34:b6:93:
                    5b:25:37:97:0e:bd:9b:29:18:1a:ee:8c:e6:73:7a:
                    ab:98:f4:67:a5:ca:7b:a2:95:89:8b:bb:d8:21:8f:
                    49:2f:9d:0e:27:26:9f:73:a8:56:54:6a:7e:a5:45:
                    9b:58:42:63:3b:3c:ef:49:00:35:b7:23:de:80:1a:
                    c0:9c:a9:f7:0c:3c:ec:b8:c0:c7:ac:74:65:52:1e:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:0F:95:05:EA:C2:F9:DF:51:69:91:D6:25:21:97:43:A0:EA:CB
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:af:42:b9:3e:ee:85:3c:11:70:58:4c:e4:e8:46:f5:2c:97:
         0d:d0:46:04:41:42:2a:fc:01:98:35:62:1e:e9:f2:3e:88:31:
         17:f4:fc:d1:a2:a6:ac:d1:65:e6:d1:5e:8d:f5:83:7b:d2:40:
         36:83:47:04:85:2d:1b:33:5b:96:07:2e:23:91:27:e1:a0:f8:
         84:dc:ab:1c:3d:f1:83:18:55:38:37:3e:94:54:37:ff:2e:bb:
         9f:6b:1a:c0:dc:92:10:3c:fa:d8:65:ac:de:bd:78:34:cd:9f:
         d0:cd:ed:e3:8a:db:55:37:0e:bd:8e:23:57:7e:3b:b9:aa:c8:
         ba:6a:96:0a:95:a9:c9:d6:c1:1a:10:11:83:2b:29:a5:36:3e:
         97:7c:00:1e:e6:70:e9:95:54:43:01:19:67:3c:83:55:e6:b1:
         9d:f4:19:1e:4f:c7:34:26:32:ef:43:20:2c:ab:5b:80:72:fe:
         70:29:94:38:53:ac:dc:b0:e4:46:ce:1c:36:4b:f7:a1:2e:b4:
         a7:e7:0b:8f:09:b4:69:ad:5c:64:44:55:5b:14:72:43:94:aa:
         67:c1:bc:a8:cc:ae:d2:f1:05:c9:4b:64:22:99:b4:5f:37:62:
         a5:0b:02:f0:12:06:0a:e4:7c:c2:87:cb:fd:60:f5:0c:40:b1:
         72:41:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:55 2025 by rpki-client