Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File:                     ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier:          6rqk8M9jAY9W7nbYF8iPnhcUO2gswQfAB3llH7gjYF0=
Subject key identifier:   60:CC:92:AB:DF:46:85:1C:24:6E:1F:BB:55:56:1F:58:93:AE:1E:7F
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer:       /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial:       0194BBCDC07907442D4CD2965163ACCC7092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:11 +0000
Files and hashes:         1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
                          2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: iEoX6Phne/+oXuGpvzsbH3gPaR/S6G2dUhmCzU8l4mo=)
                          3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:c0:79:07:44:2d:4c:d2:96:51:63:ac:cc:70:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
        Validity
            Not Before: Jan 31 10:00:11 2025 GMT
            Not After : Feb  1 10:00:11 2025 GMT
        Subject: CN=60cc92abdf46851c246e1fbb55561f5893ae1e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:3e:54:c7:5b:2d:c5:15:75:8a:05:cf:79:
                    cd:8b:89:2d:c7:2c:61:e9:ad:53:a3:00:15:98:43:
                    ad:8a:f4:e0:8c:0f:a5:6a:28:c6:ac:aa:29:0a:79:
                    79:fd:1e:b8:33:8d:22:38:da:33:48:9f:f3:ee:92:
                    f8:23:71:f7:8b:11:69:19:ca:6b:21:c7:b8:95:91:
                    72:ad:be:81:7a:c8:2f:24:ce:e1:d9:41:2d:c1:17:
                    9e:8b:7b:81:ee:7c:04:56:f5:f8:45:2e:3d:3c:6d:
                    64:69:c8:7b:84:e7:83:ae:b4:6f:84:53:fa:fa:cd:
                    49:0b:f3:1f:47:c5:50:d8:2d:5a:7b:64:78:18:72:
                    21:d5:cb:36:17:c2:6c:8a:4e:8d:d2:8c:7d:4b:e4:
                    e1:df:39:52:ba:aa:70:a8:81:18:53:2b:4b:3a:66:
                    5b:a9:25:5c:09:11:78:7d:b6:00:01:da:d2:39:91:
                    b2:85:15:f7:ec:48:c9:4d:6e:ec:02:93:23:f2:75:
                    73:d4:96:0a:96:45:23:eb:00:1c:2a:c1:41:dc:9a:
                    f5:ae:f0:d2:54:ca:d2:3e:3b:d6:6d:aa:2c:7b:62:
                    1f:83:20:2d:c4:9f:9b:44:52:b4:58:70:91:1a:49:
                    7a:26:97:52:60:6d:0c:7e:68:35:3a:b9:d3:fa:51:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:92:AB:DF:46:85:1C:24:6E:1F:BB:55:56:1F:58:93:AE:1E:7F
            X509v3 Authority Key Identifier:
                keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:2b:2c:8a:14:52:c7:d4:9c:c0:03:d5:ce:fb:18:7b:a9:d1:
         d9:de:24:94:ea:42:c9:fe:6b:4b:bb:08:63:73:5c:aa:8d:bc:
         6d:05:2e:45:18:24:7e:7f:e3:2a:ae:9e:a8:e3:8d:bb:ae:92:
         e2:60:dd:77:00:1e:b7:2d:56:7e:5a:64:0b:f9:8e:19:fe:b0:
         c9:74:31:45:6b:c0:eb:d9:62:4d:25:33:ff:11:cb:f1:6e:bd:
         6c:e8:8a:a5:3b:e2:7d:da:78:fb:d5:a7:ab:41:40:19:ac:f0:
         ae:41:c0:fb:72:88:8e:e8:de:26:e1:9c:5c:86:ce:22:5b:53:
         13:a6:16:95:94:31:fe:ee:e1:24:7b:78:19:05:ee:aa:b3:e9:
         3a:4c:55:3a:e8:20:70:73:1c:bf:16:2e:cb:98:d6:75:a6:4d:
         ac:a7:cd:00:75:57:66:a8:31:97:9b:6c:8e:e9:3e:0d:b7:e0:
         80:b9:b4:d5:6e:db:66:4b:75:b1:f5:1a:cf:db:24:d4:0d:6e:
         30:be:d4:44:23:be:77:90:23:93:a4:7e:0c:0b:ba:56:66:80:
         eb:d3:58:f4:f6:f1:f6:a3:09:20:37:52:a1:4a:86:64:86:f3:
         fd:32:d7:15:8b:26:40:7d:5b:27:2e:21:bd:d3:4c:1c:57:06:
         44:6a:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:28 2025 by rpki-client