Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File:                     ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier:          R6bK+QmbHHSGDiKVNaM4Ty4O3dVLZmbdRo9q8EOAwdg=
Subject key identifier:   DE:0A:1D:E8:63:96:64:67:EE:CF:9E:EF:89:49:E1:84:8E:C2:04:59
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer:       /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial:       0194BBCED1DFB5BF4CAAAFC80ABF334D3900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number:          0F79
Signing time:             Fri 31 Jan 2025 10:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:21 +0000
Files and hashes:         1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: gbCDHvWKtAvbur2DLdV/gRSfstEzjvRGwD3EWndtkrk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d1:df:b5:bf:4c:aa:af:c8:0a:bf:33:4d:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
        Validity
            Not Before: Jan 31 10:01:21 2025 GMT
            Not After : Feb  1 10:01:21 2025 GMT
        Subject: CN=de0a1de863966467eecf9eef8949e1848ec20459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:cb:94:b9:7f:82:1b:fc:67:06:34:13:5b:
                    e2:4f:2f:8a:be:cd:e5:3f:fd:c7:35:35:10:e4:25:
                    e8:5e:e8:d0:05:a6:ad:a0:ff:2d:26:8e:d0:e0:b8:
                    68:2e:3d:96:db:7e:93:b0:5a:36:be:85:46:e2:47:
                    f7:b0:66:1c:c0:54:b0:cd:ea:4f:85:0d:6b:23:72:
                    df:4c:81:18:4b:e9:ae:d9:b7:a5:93:11:94:df:d4:
                    fd:cd:d9:ea:61:70:e9:05:f4:1a:f8:a2:7b:e1:c1:
                    89:5b:91:b5:fc:d5:9e:13:dd:9a:91:c7:4a:4b:26:
                    30:63:dc:27:d6:ae:fe:61:dd:8a:02:ba:af:d2:5f:
                    3f:fc:54:31:34:15:58:17:58:74:44:87:1e:91:c2:
                    91:e1:04:bc:aa:4a:99:9c:58:a8:92:17:45:ea:9c:
                    18:fd:af:d7:25:07:4f:b3:67:53:76:4a:3b:79:b1:
                    70:b9:0c:ac:86:82:30:d1:f7:af:f6:42:c4:fd:04:
                    fc:9a:ad:f5:9f:75:0c:57:e8:17:2b:fd:00:26:54:
                    5d:f9:e4:52:30:7a:e4:71:22:bc:aa:69:69:2a:3d:
                    82:49:10:85:93:e5:e5:15:59:f0:ca:13:fc:62:da:
                    1d:be:8f:a8:c3:58:26:9d:24:50:77:f7:61:8d:08:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:1D:E8:63:96:64:67:EE:CF:9E:EF:89:49:E1:84:8E:C2:04:59
            X509v3 Authority Key Identifier:
                keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:32:5b:c7:89:5c:06:d9:ad:e1:e7:3a:3f:24:42:c3:3a:
         1e:ae:51:f6:a2:16:f9:61:27:b5:1c:8e:99:86:66:f1:d9:78:
         8e:5d:73:4f:c2:30:8e:0f:5c:22:54:36:b2:17:55:d6:b9:a6:
         25:a9:49:fb:7a:da:c3:bc:fa:97:1a:f0:5d:a0:45:b1:15:1e:
         5c:36:5f:19:be:4f:65:5e:30:e2:f7:a3:3c:28:db:bc:2d:e0:
         94:c2:8f:a3:44:42:53:a9:2b:44:bd:b2:d8:97:93:0c:d8:f6:
         df:64:86:5e:5b:a0:22:c2:e7:1b:f2:86:25:84:9a:b0:1e:38:
         cb:5b:4d:7c:e1:83:36:ad:7b:3c:55:4f:cd:4b:90:79:d2:18:
         e5:5f:23:60:98:46:e9:fc:dd:a1:6e:7d:29:76:6d:6d:3f:b4:
         fb:41:b8:c6:6f:60:bb:43:5f:5b:31:a2:26:87:70:91:30:dc:
         af:36:7e:50:06:5e:bb:6a:a6:f1:1a:6a:89:fa:cc:69:94:44:
         52:9e:cc:d4:35:d0:b7:3f:ad:89:47:55:b5:b3:a5:e6:8a:17:
         fc:c8:b3:b0:e5:bc:44:a5:61:21:23:c8:12:76:e8:3d:67:34:
         86:29:43:3f:cb:04:8b:12:68:c4:1c:8e:ec:58:3a:87:31:0f:
         25:1d:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:37 2025 by rpki-client