Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
File:                     Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json)
Hash identifier:          L4VTbgmmV320/vUoyp4UqCIXjJRKz2Vi628iqQU8Th0=
Subject key identifier:   59:02:1F:A1:BC:9D:4A:2A:C9:84:C2:D5:06:FC:02:69:F4:34:30:12
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Certificate issuer:       /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial:       0194BD4E6023F732CBE5B133576C2234F1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
Manifest number:          1435
Signing time:             Fri 31 Jan 2025 17:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:17 +0000
Files and hashes:         1: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=)
                          2: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=)
                          3: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=)
                          4: SlqdND-78hGcK3DSc7ZKEerME7A.roa (hash: SEirbswQmHkNk0PgwlxFNKIeQsYu37/SMLLURNnYxLQ=)
                          5: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=)
                          6: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: f+z+69UqMlt8PzMvLIiEzdGMr1dbFSEUSfxWMMFePCY=)
                          7: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=)
                          8: lwEVC0oQt9HD8A2kDH3Bz_ZvmGM.roa (hash: 35V/NgFt91mT4i4/6gmMhv4ToygRlPpbev7oxF2F+xk=)
                          9: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=)
                          10: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=)
                          11: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:60:23:f7:32:cb:e5:b1:33:57:6c:22:34:f1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
        Validity
            Not Before: Jan 31 17:00:17 2025 GMT
            Not After : Feb  1 17:00:17 2025 GMT
        Subject: CN=59021fa1bc9d4a2ac984c2d506fc0269f4343012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:cf:71:a3:54:0f:15:09:52:e6:51:6c:04:
                    32:c8:9f:5a:a9:70:7b:0b:b0:b1:fd:f3:f9:d4:bf:
                    d3:eb:a8:36:7b:d0:dd:d3:32:d9:bd:2d:79:16:2c:
                    26:0d:dd:a6:82:b8:1d:fe:b0:98:cd:1d:29:eb:93:
                    f7:63:f9:47:b3:3a:32:c8:02:28:ac:f5:bd:67:bb:
                    ae:d5:2b:56:3a:5b:fe:ad:54:ef:79:73:19:73:ec:
                    4f:1c:12:fc:ce:bd:04:3a:5c:71:c5:8c:78:a5:86:
                    d2:18:a5:ef:c7:12:df:e6:9b:b0:ff:6b:19:c3:c6:
                    ee:33:f8:da:55:98:46:25:1a:e4:57:cc:2c:52:e0:
                    3b:18:05:15:0c:d6:ad:1e:f2:4f:fd:c8:2b:e1:4d:
                    13:04:83:3e:ba:73:0b:a3:81:6f:88:38:2b:6c:88:
                    fb:f4:99:70:7d:6e:90:86:33:01:90:ef:dd:2a:82:
                    6e:6b:ca:b7:46:b2:e6:e3:37:b9:e4:26:b2:f2:90:
                    36:b7:b0:7e:89:b4:d0:cd:e2:dd:f1:7e:bc:a4:0e:
                    f5:19:eb:82:0a:d1:c0:96:15:83:b0:53:7b:67:b7:
                    cd:24:c6:b0:6d:0a:f5:27:44:0d:35:8e:ad:54:e2:
                    46:3e:2d:eb:ac:ae:4c:9b:04:8f:2a:50:24:af:69:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:1F:A1:BC:9D:4A:2A:C9:84:C2:D5:06:FC:02:69:F4:34:30:12
            X509v3 Authority Key Identifier:
                keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:10:53:96:4c:f3:af:3c:f7:f1:ff:4e:f2:76:28:ae:2d:
         72:9b:55:1d:1b:37:02:ce:4f:f5:a0:73:4f:7a:0d:a8:3e:cc:
         47:71:06:44:89:d7:09:18:f8:c8:ec:07:82:f2:29:8f:bb:eb:
         59:52:b6:95:cb:c5:fe:2f:d4:55:f6:58:be:f3:36:9b:14:53:
         cb:e2:db:a3:4a:25:3c:53:87:a5:8e:b1:de:45:1c:86:84:c7:
         92:ef:e1:12:e3:8e:c8:95:3b:cb:88:56:bd:ee:6d:60:37:1c:
         b0:5e:4f:4b:eb:a5:7d:10:48:a3:45:a0:ef:3c:e3:ec:1c:84:
         ea:9c:c6:c7:cd:06:13:a3:11:e2:fc:0d:ac:d1:a4:b7:3a:89:
         22:fa:db:e9:61:e6:2b:ad:27:e2:13:e9:97:c1:27:62:59:36:
         72:83:61:67:23:54:ff:b7:bc:eb:67:3b:4b:cc:a9:82:68:68:
         1b:f4:b7:9c:ea:39:75:5e:30:79:f1:ee:f5:0c:be:93:4b:8e:
         9b:3c:41:3c:3f:ca:cb:a6:05:6d:5e:0b:08:71:bf:8a:8d:28:
         a2:78:fc:0e:54:d5:44:67:b3:e6:f1:c0:ea:8c:8a:58:94:f6:
         6f:3e:12:99:eb:21:ed:cb:9e:89:98:eb:05:59:34:42:46:09:
         e1:57:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:54 2025 by rpki-client