Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
File:                     ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json)
Hash identifier:          M31ZH4QE12VbIOMgVmx8770I//r8wbd8FS+twNiIfRQ=
Subject key identifier:   72:C0:5F:84:92:20:E9:89:BE:DB:AA:7A:44:C7:46:99:66:B5:ED:37
Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
Certificate issuer:       /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Certificate serial:       0194BD17B0BB547642874C739D8E87C9BB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
Manifest number:          0AE1
Signing time:             Fri 31 Jan 2025 16:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:33 +0000
Files and hashes:         1: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: YJBfGxIxyiRzAmOYRTR53w4BRHjGrUiDpsabgbUX2SE=)
                          2: luEbamkkQ3JNKI_McJaQ-rwJjV0.roa (hash: ErxV+CJ+EDpVd4vCMZWyy26jRiSWzXrUb4kdxbwG3ZY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b0:bb:54:76:42:87:4c:73:9d:8e:87:c9:bb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
        Validity
            Not Before: Jan 31 16:00:33 2025 GMT
            Not After : Feb  1 16:00:33 2025 GMT
        Subject: CN=72c05f849220e989bedbaa7a44c7469966b5ed37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:38:6a:19:d1:fe:4a:5a:b6:c6:9a:f1:24:
                    77:a4:b0:3d:ff:ea:e5:85:a4:46:36:b9:e1:98:95:
                    00:38:91:a4:3e:ef:a0:1c:0c:4d:1f:ec:4a:fc:4e:
                    d3:37:30:e0:a0:a4:a6:fa:25:99:ea:50:61:2a:9a:
                    82:0f:42:1e:ba:45:5f:56:ba:d2:0e:b4:86:f9:5b:
                    8e:a2:9f:38:8f:d3:59:bb:48:cb:12:a9:5e:52:42:
                    78:0a:ea:c3:81:db:39:9e:02:4a:3c:a0:3c:32:27:
                    f0:32:90:ee:5a:28:48:ce:71:39:0f:11:4c:6e:1c:
                    ec:2a:9b:29:76:ff:8a:bd:91:f0:43:e6:18:db:f8:
                    9b:a0:92:2e:1d:96:5e:e8:d0:44:76:31:c5:97:96:
                    99:6d:77:79:56:58:90:51:3c:74:f0:d8:e5:82:8a:
                    18:9b:31:b6:30:b4:1e:53:0e:94:ac:a6:c7:18:37:
                    0d:54:c0:3d:a6:9a:0e:8c:25:f3:9f:a2:3d:3f:81:
                    48:58:73:a7:09:bf:a4:7c:31:68:fc:91:b7:e6:07:
                    ff:86:25:af:8c:c9:37:ce:c2:fe:a2:fa:85:27:20:
                    58:52:0d:95:2a:a9:41:5e:d6:28:6f:20:9c:74:74:
                    5d:1b:57:8f:13:94:c1:22:03:c7:a5:9f:5f:17:b3:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C0:5F:84:92:20:E9:89:BE:DB:AA:7A:44:C7:46:99:66:B5:ED:37
            X509v3 Authority Key Identifier:
                keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:05:4b:2d:9e:5e:93:44:98:7e:cc:be:4a:5c:cc:cc:e1:91:
         09:fa:67:c0:d3:3f:2e:14:fc:7a:5e:1a:48:e4:05:ac:e9:68:
         23:63:88:b3:e2:1c:83:2e:ec:64:fe:01:76:61:76:c2:0c:e4:
         a2:50:4c:25:47:b9:67:3b:e4:05:0b:17:5e:61:f2:0e:f6:6e:
         cc:72:67:a7:a0:39:e8:db:94:16:ee:68:bd:c1:1d:32:b7:be:
         f7:ac:97:e6:fc:ff:c5:ba:f6:51:a5:dd:b9:27:f2:8c:3c:bf:
         cc:e0:b0:70:e2:b6:f1:b7:70:00:a2:04:a6:42:9e:95:d4:64:
         fe:e6:2d:d1:1e:e8:69:3a:1f:d8:71:f4:0e:5f:d1:81:fb:22:
         97:5f:3f:b0:9e:fc:ea:b1:51:3d:79:64:9b:8f:f2:38:b3:6d:
         9e:1f:1a:e5:72:da:6e:f4:00:73:c6:33:0c:f7:3b:14:e1:f9:
         2e:ad:42:dc:36:c8:70:33:88:9c:00:5e:d3:1b:cd:04:75:06:
         16:7b:de:ff:5a:32:1f:4b:8e:cf:ac:ff:90:d5:e5:e3:96:f5:
         ac:3a:18:7e:e0:d6:8f:77:00:ce:f2:2e:43:50:72:6d:e0:29:
         f8:e5:4e:da:5d:58:e1:1a:d4:ab:3d:77:59:6a:03:aa:51:10:
         00:43:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:46 2025 by rpki-client