Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File:                     zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier:          clfoxKOcwQ0mGo6G0IYfJiKz1BpRG67SMWWowlZ+8qg=
Subject key identifier:   BA:BD:38:6C:94:34:4B:5D:E3:2A:09:0E:75:C7:D5:EB:08:62:36:DB
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer:       /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial:       0194BCA9C30B91127254038EC8190D822D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 14:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:29 +0000
Files and hashes:         1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
                          2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: ppLm2WAaS6fTOaeYCuLrb5++SdG7cK78hk1gP5uHExg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:c3:0b:91:12:72:54:03:8e:c8:19:0d:82:2d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
        Validity
            Not Before: Jan 31 14:00:29 2025 GMT
            Not After : Feb  1 14:00:29 2025 GMT
        Subject: CN=babd386c94344b5de32a090e75c7d5eb086236db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:da:83:ca:73:b1:cb:24:25:49:57:1d:97:
                    cb:87:94:52:26:d0:7b:2d:51:7a:07:81:6f:55:11:
                    50:98:0c:47:5e:1e:38:37:37:9c:45:ef:fa:57:84:
                    85:c3:2e:70:d1:e8:d6:5c:40:51:5b:3b:81:fc:4c:
                    e6:20:57:07:92:6a:34:1b:cb:d5:5e:78:27:7d:4c:
                    14:bb:e8:4e:b7:22:33:25:d6:be:4d:98:56:b7:44:
                    42:1d:12:21:2a:e4:cc:c5:00:d7:7f:fa:de:6d:8f:
                    e1:79:a1:85:1b:92:5e:46:5e:63:50:e9:4c:b1:a6:
                    89:b9:b3:75:a4:b4:93:56:d6:11:f7:0f:eb:e1:ec:
                    42:2d:21:e7:b3:a2:2b:fd:0d:e6:a0:2e:35:5f:9b:
                    f3:c9:cd:d1:f3:08:29:1a:ad:5a:77:c8:7b:29:5a:
                    55:e6:5d:b8:cd:6e:90:fa:6b:d4:9b:51:0c:a4:39:
                    e8:bb:07:f4:34:4f:c8:8f:1b:ae:62:6b:da:7a:37:
                    f0:e0:12:be:4a:17:6b:7a:e2:d9:ef:fa:5f:6a:43:
                    3b:9a:aa:60:68:3c:78:53:5b:dd:51:74:e7:eb:6a:
                    a9:86:98:a1:2f:52:fb:16:fb:37:ea:46:49:0f:ba:
                    c6:60:92:4f:49:f8:e9:68:39:00:f2:13:78:27:6a:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:38:6C:94:34:4B:5D:E3:2A:09:0E:75:C7:D5:EB:08:62:36:DB
            X509v3 Authority Key Identifier:
                keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:84:24:c9:41:54:96:d1:c9:56:c0:19:f7:36:4e:90:18:1a:
         42:d8:e7:18:65:4c:d8:c9:98:30:4c:f6:ad:cc:33:13:30:1d:
         72:d5:3f:19:64:13:a8:84:60:25:40:80:3b:fa:53:75:56:d2:
         f4:65:a1:52:09:67:2f:4c:1f:a1:84:10:25:31:a4:bb:d6:cb:
         bb:c2:3e:8a:82:b9:4a:d6:17:6d:bb:e5:cc:1e:0d:58:8c:86:
         96:04:e1:5d:1c:e7:0b:b7:01:da:b2:1f:da:4f:0f:b8:ec:2d:
         c3:b1:5c:2e:21:0a:f3:88:a5:c7:29:34:63:e7:ac:c8:03:07:
         ec:94:ae:de:91:5b:b6:2a:fe:cc:92:24:ce:ec:c9:23:33:d8:
         bd:ef:7a:5b:3d:ba:04:58:8c:73:fd:51:7f:76:85:ca:61:f3:
         47:1b:96:e4:c9:31:28:e2:73:0c:04:3f:5e:3c:21:f5:93:04:
         56:79:94:e7:d0:28:e9:44:e5:bf:66:2f:01:2c:5b:27:62:ac:
         8d:69:67:e9:0a:c7:76:18:47:d3:40:7e:52:b8:b8:87:63:95:
         9c:a1:c9:a1:31:9c:33:28:b1:ad:ff:49:bd:7e:54:13:59:77:
         dc:5e:d7:94:f8:d7:66:27:70:6b:53:5e:93:39:67:b7:ee:57:
         16:d1:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client