Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File:                     ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier:          EbfyusU5kDjER5sTegJIFyetOWJYCNBAhdifGkJ76gk=
Subject key identifier:   27:4C:99:8F:68:61:EC:6E:FC:85:EE:5D:AC:61:06:F9:A1:F5:8A:BC
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer:       /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial:       0194BBCE220DD6F89EDA445D08EFCD41444E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number:          0F6B
Signing time:             Fri 31 Jan 2025 10:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:36 +0000
Files and hashes:         1: 1DNJXUdN9aHYwhJ0OLj39VSopnQ.roa (hash: QBTrHThXdQY8h/nmwy8ckGzuWyt8cYLb33EN8JyG6aE=)
                          2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: 0uU8t2OuGpptYVnRGHJPZb6zf2yPn4VpW+Hyo3l+dj8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:22:0d:d6:f8:9e:da:44:5d:08:ef:cd:41:44:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
        Validity
            Not Before: Jan 31 10:00:36 2025 GMT
            Not After : Feb  1 10:00:36 2025 GMT
        Subject: CN=274c998f6861ec6efc85ee5dac6106f9a1f58abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:65:26:36:1a:2c:4f:8f:e3:81:7d:0c:82:
                    71:87:c5:1f:bc:06:48:1f:f0:a9:68:4e:4d:3c:fb:
                    a4:42:a9:a0:a2:1a:f7:bc:18:eb:4d:de:28:18:e6:
                    aa:0f:e4:28:61:e7:7c:97:26:7d:90:3a:7e:e2:bd:
                    43:3c:54:8b:b7:1a:1c:5e:5a:27:26:82:28:ed:13:
                    ba:8c:69:6f:2e:e6:f7:21:e5:20:bb:39:9b:df:7c:
                    9c:7f:77:3b:c4:13:e9:d7:7c:d6:0c:dc:26:42:c9:
                    7e:a5:e2:25:98:00:89:96:5e:52:c2:02:0e:fe:5f:
                    c0:a7:49:9c:44:99:1e:9e:e8:9a:f5:53:d5:ca:9b:
                    25:a9:e4:ef:3d:f5:63:1a:83:1f:03:07:c2:32:42:
                    11:8f:f7:a7:10:0a:8e:d5:39:65:25:df:7c:b5:42:
                    70:04:55:bd:69:7c:f4:6c:70:30:b4:47:7c:bc:f2:
                    d5:95:6e:a3:71:e2:4e:86:5c:eb:e3:0a:af:f7:8f:
                    02:7f:b4:f5:05:0c:fb:36:e7:57:68:15:ae:28:d0:
                    75:4a:66:a5:04:78:12:87:12:1f:85:6d:c8:2f:ae:
                    7b:8c:98:d5:9a:c7:eb:32:74:25:f4:f8:83:61:04:
                    4a:38:10:0b:10:f3:f9:05:70:f6:26:a9:72:92:6a:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4C:99:8F:68:61:EC:6E:FC:85:EE:5D:AC:61:06:F9:A1:F5:8A:BC
            X509v3 Authority Key Identifier:
                keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:10:7c:f7:21:32:d9:c8:e5:5f:cd:6d:0b:cb:23:d9:20:
         76:d7:73:50:b5:e2:b9:34:b4:68:46:34:d3:2e:6d:49:f0:d4:
         fd:8d:15:a5:08:d7:03:ec:ed:f0:7e:aa:cd:a0:dc:b3:13:94:
         a7:03:77:1a:6e:95:2d:1a:c3:b4:98:96:a8:e3:2a:d2:f8:a8:
         f7:a3:1e:f8:69:cd:76:26:ed:cb:53:79:83:00:89:da:43:0f:
         a4:93:29:ce:9a:01:2e:5c:f1:c1:2f:6d:1b:a6:87:42:f5:ea:
         28:3e:77:84:cd:15:e0:48:dc:cd:57:d5:ea:f6:8a:74:68:04:
         8e:a2:44:ee:cb:da:11:71:32:cb:cf:1e:ed:9e:71:10:a3:96:
         33:3a:be:7e:7d:23:ad:d2:d4:f8:fc:c5:ab:bc:2e:b6:7d:25:
         80:72:21:6f:70:ae:f1:86:ee:9e:3b:2a:9c:74:07:0d:24:cf:
         39:a0:3c:54:cd:05:9c:a3:a6:f7:e5:11:0c:1a:7d:f8:38:54:
         2b:8b:fc:c1:de:63:ce:2d:07:6e:fb:a2:60:b6:be:59:0b:e1:
         a9:45:09:2e:46:2b:4c:8a:00:ba:b9:84:66:20:5c:26:9b:9e:
         03:fe:b5:a1:fb:36:b7:50:0b:33:e8:99:48:b1:12:a3:ef:ac:
         3d:5b:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:55:39 2025 by rpki-client