Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          0nn7dhP52Jzuu0IQCXDy9H/om1FolgKl3iHyHhA1ifs=
Subject key identifier:   2E:72:E6:48:E7:31:D1:F0:5C:3E:4A:51:21:71:5B:A4:73:B3:51:49
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       0194BBCEE49B4E1914019502B1A72FB3620C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          11F5
Signing time:             Fri 31 Jan 2025 10:01:25 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:25 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:25 +0000
Files and hashes:         1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: Levocvcd+Y8OHSHGt4XEVlO4Sb5xC1ctzuRU43j6Hrw=)
                          2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e4:9b:4e:19:14:01:95:02:b1:a7:2f:b3:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Jan 31 10:01:25 2025 GMT
            Not After : Feb  1 10:01:25 2025 GMT
        Subject: CN=2e72e648e731d1f05c3e4a5121715ba473b35149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:d4:ca:89:4f:69:36:72:91:16:98:9c:3d:
                    b4:1e:ec:45:98:c1:3e:71:b2:6d:1a:fa:13:81:1a:
                    84:4f:fc:5f:f4:68:ba:7a:e7:02:fc:44:25:e1:05:
                    35:21:28:3c:2f:71:fe:34:bf:c5:87:0f:b4:34:48:
                    e7:66:58:b5:c4:8f:e7:9e:9c:91:1f:ce:e7:01:ad:
                    81:99:f9:7e:11:ea:ad:26:06:5a:b0:40:8d:20:37:
                    a2:27:08:63:be:2e:1f:3f:7c:fd:0a:30:4f:b3:c5:
                    e8:e7:d6:23:8f:fe:d7:57:4b:ab:4f:9c:a9:2a:26:
                    c3:a4:a2:b0:00:56:54:17:61:3a:7d:9a:33:e8:3a:
                    6a:11:fb:ac:3f:6a:85:e2:ba:76:94:8b:9e:72:9c:
                    93:6e:f2:77:98:9b:5c:37:44:f9:b8:44:c3:3f:d5:
                    9f:8d:97:c3:96:19:2c:07:76:66:65:2d:31:44:ca:
                    c3:44:f9:8f:61:ea:0f:72:53:5b:74:5d:81:df:c6:
                    a2:44:f5:74:8d:6d:b7:c8:58:6b:b1:8a:b3:5b:b2:
                    ca:20:e1:36:1b:c9:1a:d7:84:0e:87:dd:e4:42:53:
                    b9:f8:77:ff:39:a5:f0:21:22:07:05:54:85:f4:5c:
                    51:67:a4:a1:88:72:b8:08:85:09:a8:ee:85:fd:3b:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:72:E6:48:E7:31:D1:F0:5C:3E:4A:51:21:71:5B:A4:73:B3:51:49
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:7a:1a:64:2c:61:6f:47:32:ba:fb:d3:e1:3c:d0:73:8c:
         6e:ba:f7:81:08:01:9a:ed:f0:32:c4:e2:ed:fb:42:8b:88:78:
         68:50:03:53:9c:3c:3b:76:fe:d5:8a:b2:dc:9a:22:de:f4:53:
         ae:2e:0a:cd:fb:50:ab:53:9e:9b:1e:01:bd:d8:7a:15:82:61:
         f1:99:0e:d1:c8:76:6c:a6:4c:ad:f3:be:ed:e2:a8:c9:3e:9e:
         97:e6:f6:54:22:e7:ed:b8:2a:be:c7:eb:32:07:e9:c2:5b:33:
         76:73:7e:ad:e4:a8:a9:c8:ba:85:7b:8c:c7:2c:e1:e6:a0:c7:
         21:3c:41:c2:d5:c4:55:d5:ed:55:71:35:64:2c:31:d0:5a:ef:
         84:b4:00:06:0b:39:fa:50:e9:6d:1a:c4:5c:a7:b0:c8:6f:fe:
         11:26:38:66:8e:24:ee:43:63:3b:71:b5:b2:92:0f:4e:31:9c:
         34:09:e2:78:b3:6c:80:4d:a7:d8:70:dd:a4:3f:b9:23:46:f8:
         c3:de:ee:7c:5b:45:d4:92:f0:23:ad:94:96:62:e2:c8:a3:8d:
         19:93:a9:c3:e9:3d:8f:6a:a1:ff:59:c5:fe:a8:4d:e5:94:09:
         51:36:d7:55:b9:a6:d4:23:4a:5d:f9:fb:8b:e7:0a:ff:7f:14:
         01:21:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:57 2025 by rpki-client