Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File:                     zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier:          24sO4jrQdvRk27CVIv0fwBu8KEPFRGAvneN7fRl13+k=
Subject key identifier:   05:E6:6A:9C:64:AC:37:86:03:2D:31:71:ED:B6:E2:5D:98:65:C9:E1
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer:       /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial:       0194BD17D338C0ECEE45A7ABD02A86B0C020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number:          0EDD
Signing time:             Fri 31 Jan 2025 16:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:42 +0000
Files and hashes:         1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: Y6/mK4OLU2hpJIGeT0JyNDT6vz9+xOvSiQ0E6vHnXHc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d3:38:c0:ec:ee:45:a7:ab:d0:2a:86:b0:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
        Validity
            Not Before: Jan 31 16:00:42 2025 GMT
            Not After : Feb  1 16:00:42 2025 GMT
        Subject: CN=05e66a9c64ac3786032d3171edb6e25d9865c9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:5e:ba:3b:93:65:39:92:97:29:0e:e5:c0:
                    d9:85:49:86:be:7b:90:b3:d8:9e:95:22:3d:b3:b6:
                    47:36:75:e7:4f:fe:a6:2a:e8:53:a1:f8:78:78:fa:
                    54:2f:a9:ad:c7:e0:f0:82:7a:3b:e6:5e:9d:5e:7e:
                    73:4e:1e:d0:c1:68:6e:74:c9:6d:d3:69:a1:5d:f7:
                    cd:b0:71:90:24:f8:46:5f:cd:42:39:19:96:bd:e1:
                    96:13:84:1b:0c:82:dc:cb:b1:c5:0c:11:0b:7f:a2:
                    ae:3c:32:28:98:6e:39:a3:98:f7:2e:a3:0a:d0:a6:
                    5d:62:74:c2:0c:86:26:ee:7f:4b:db:3e:bf:e9:3c:
                    10:92:f3:66:a4:9f:e7:3a:b0:07:3f:10:a9:60:ff:
                    2d:05:c4:08:92:27:5a:69:37:5a:c1:e0:52:c0:19:
                    2d:b8:b0:e5:46:2e:23:00:c2:ca:3b:e8:02:7c:1a:
                    90:d3:b3:17:b4:03:78:9c:2a:f9:a3:cd:7c:ad:4f:
                    7a:55:1d:25:58:f5:f6:1b:e0:b2:fa:09:f1:ef:57:
                    f1:52:e6:21:85:9d:f0:89:6a:90:0e:c4:36:b6:07:
                    8d:c6:73:28:9f:48:c9:dc:f8:3c:53:9a:f3:09:59:
                    08:b7:f0:e6:32:93:17:b5:5e:39:a3:a5:c2:33:ad:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E6:6A:9C:64:AC:37:86:03:2D:31:71:ED:B6:E2:5D:98:65:C9:E1
            X509v3 Authority Key Identifier:
                keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2f:5f:90:df:50:d7:79:4d:c5:c4:70:7c:56:27:58:23:90:
         57:1c:c0:e6:0a:ec:5d:59:56:c5:0c:5e:42:1e:8c:e0:8b:c4:
         5e:16:c2:77:36:da:83:06:f7:3c:cd:d7:27:1b:4e:28:39:b3:
         d4:b1:35:3a:d4:ac:c8:1e:58:33:95:b1:9d:96:17:2d:02:18:
         e0:49:c9:f3:6d:95:60:c5:1d:40:17:bb:59:15:5d:07:28:ac:
         b2:23:4b:59:ea:1a:c0:44:9c:dc:9e:b2:ba:95:fc:11:e5:7a:
         2d:0e:73:e0:7e:17:01:c2:3c:fe:55:5c:ac:e9:85:81:95:d2:
         f1:9b:37:c9:2d:ec:95:24:a8:86:01:cb:f0:ad:03:78:4f:2c:
         98:02:0e:c6:4b:94:1f:20:dc:46:bf:fd:5c:d1:99:e4:c6:d0:
         33:1e:a0:b4:ab:17:95:27:06:de:49:64:dc:04:fb:81:02:d5:
         79:79:04:1b:a0:7a:d3:7d:34:54:60:c5:90:bb:70:83:85:c7:
         49:8d:01:30:91:fb:ec:16:5d:56:82:16:ad:16:54:97:c7:7c:
         f3:a0:69:c2:dd:8f:fe:03:2f:cc:2e:1c:c6:39:02:55:6d:29:
         d7:97:fc:6f:3f:07:f3:da:b1:3b:aa:da:11:c9:e4:f4:f3:cf:
         9b:f3:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client