Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File:                     ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier:          veBodI6lMXh5kSgift3b8A1B9iQzXxBn9VxKM0RGiLM=
Subject key identifier:   34:7C:C4:3A:6C:EB:5A:94:92:A0:0B:11:CE:41:E8:19:91:21:F4:98
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer:       /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial:       0195E122616D279642E466312C110098AF51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number:          14C7
Signing time:             Sat 29 Mar 2025 09:01:21 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:21 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:21 +0000
Files and hashes:         1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
                          2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
                          3: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
                          4: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (hash: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=)
                          5: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: grWDrBcMbH8L2ln2pj5yxfMMqVRlSphq0s4+BVp1UxA=)
                          6: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
                          7: qGjMBqPIGRJHE7hen5oLYlZvunI.roa (hash: tYN0YvNDzfdVUoqabm5wEwnZWZKNLJ2LiXHf0iUoR6A=)
                          8: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:61:6d:27:96:42:e4:66:31:2c:11:00:98:af:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
        Validity
            Not Before: Mar 29 09:01:21 2025 GMT
            Not After : Mar 30 09:01:21 2025 GMT
        Subject: CN=347cc43a6ceb5a9492a00b11ce41e8199121f498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:d9:2f:b2:da:49:53:e3:94:5e:35:03:b1:
                    8a:ff:df:74:49:c6:6f:ee:23:28:4f:b6:51:aa:dd:
                    09:f8:7d:26:ef:91:8c:8a:6b:2f:ad:d0:68:a4:21:
                    0f:26:cd:e6:eb:8e:0f:b5:19:f0:a4:cf:2b:04:7d:
                    97:91:c9:95:5d:0c:de:93:92:0e:d6:d8:19:d1:ee:
                    7f:41:60:4e:32:a0:1a:8d:89:c9:01:29:4e:d5:64:
                    c1:69:91:a8:46:f0:3d:87:b1:67:2c:77:35:54:3d:
                    bc:10:79:e8:da:ea:9c:17:89:82:eb:52:4e:2b:6e:
                    e5:66:35:89:7b:74:c1:31:e2:95:f9:96:b7:b3:7b:
                    9a:46:ac:de:b5:5c:ce:c1:56:00:43:c2:bd:97:d3:
                    13:2e:d3:1b:b5:2c:f4:db:64:54:f2:3c:b8:db:65:
                    cd:09:d9:10:b5:42:66:cd:ef:e2:27:21:fe:ad:b4:
                    22:83:d5:ca:a0:12:c7:db:af:f9:c7:f1:1c:cf:ff:
                    f0:d0:3d:18:f9:c4:5e:c4:2f:ce:53:1d:fa:5e:f7:
                    76:61:27:33:8f:e8:7e:04:bc:04:b2:da:3e:7c:a9:
                    3b:b5:6b:58:4c:e7:59:ba:b5:70:a5:3d:da:f2:77:
                    55:e9:5d:1f:12:d2:5d:e3:de:ab:e5:99:32:2f:d4:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:C4:3A:6C:EB:5A:94:92:A0:0B:11:CE:41:E8:19:91:21:F4:98
            X509v3 Authority Key Identifier:
                keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:de:b3:85:5b:a7:b1:3d:51:95:34:03:d0:24:d1:c4:af:98:
         38:f9:e2:e2:9e:40:1d:80:9d:fa:e9:48:a9:14:88:ac:11:e6:
         4c:ee:95:0d:bc:f1:5b:86:b2:5a:1e:c4:75:5c:0a:b5:9b:ce:
         64:4f:7e:d2:e7:f2:59:e1:34:09:ed:79:85:b4:02:ef:a9:cf:
         cd:1d:3b:dd:35:0d:8d:3e:c0:08:c0:e9:89:6b:7f:e0:29:85:
         22:35:34:a5:48:da:86:7f:6c:a2:ff:b9:86:c2:fd:7f:6e:8f:
         dc:3a:ea:33:4f:12:0c:54:a2:60:cb:08:ac:a8:47:df:b4:56:
         13:1d:09:b9:7f:a0:74:e9:00:84:83:8d:47:cd:ef:a4:c0:d9:
         ef:8f:49:23:3b:b1:3e:b4:0f:f0:eb:a3:ae:6e:4c:8c:e7:04:
         15:81:82:83:cb:07:a5:6e:6d:ef:d4:a9:5c:30:fb:0b:f4:92:
         d4:b7:e6:b0:a4:c1:55:64:95:e6:f2:ed:40:59:68:73:2d:f0:
         35:c4:2a:bb:80:ec:db:ce:94:ad:e3:ff:ea:86:3f:a7:ed:dd:
         09:d1:2d:87:98:56:e5:42:22:09:1f:f2:f5:8d:99:49:a4:62:
         e3:d9:c9:39:b7:61:1f:cc:8e:f5:13:2e:a9:f8:46:36:c3:fb:
         6c:b3:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:18 2025 by rpki-client