Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.mft
File:                     MzinLtQGDKFZfk3LzU3kMLxOG7w.mft (raw, json)
Hash identifier:          ap/+6qdFJ1MDXhoyGGinhqJP2TDO732W87VPEcXft3M=
Subject key identifier:   CC:E1:29:AD:A1:44:F8:6A:07:32:62:CF:39:5F:59:43:4E:7D:39:D1
Authority key identifier: 33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC
Certificate issuer:       /CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
Certificate serial:       018AFEDAE51BD07941D7AA3DDF87373A3ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.mft
Manifest number:          08A7
Signing time:             Thu 05 Oct 2023 08:01:12 +0000
Manifest this update:     Thu 05 Oct 2023 08:01:12 +0000
Manifest next update:     Fri 06 Oct 2023 08:01:12 +0000
Files and hashes:         1: MzinLtQGDKFZfk3LzU3kMLxOG7w.crl (hash: SKDHeezfUd040O+fuSZBptkrf0cl/YV3nL1ed/cUX7w=)
                          2: oUZI7NTN8qWCLDGXibh8uJdgYDk.roa (hash: 9Sg/soPhKv5usKNFhZspG8cqzaqLhUAEbAOzaGcTBKY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:da:e5:1b:d0:79:41:d7:aa:3d:df:87:37:3a:3a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3338a72ed4060ca1597e4dcbcd4de430bc4e1bbc
        Validity
            Not Before: Oct  5 08:01:12 2023 GMT
            Not After : Oct  6 08:01:12 2023 GMT
        Subject: CN=cce129ada144f86a073262cf395f59434e7d39d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:49:49:c3:29:90:3f:c8:2a:8d:b4:4d:12:
                    f7:d1:db:2c:fb:c2:86:32:ad:fb:44:b7:9b:58:09:
                    b2:44:ab:b5:4c:a4:c5:a2:6a:f3:35:51:72:5d:44:
                    2c:6b:04:79:df:cc:04:f7:db:6b:e3:20:d9:31:19:
                    70:b0:55:f2:68:40:06:d3:94:14:a1:c0:e8:11:ab:
                    b8:fe:12:d4:4b:c8:9b:d4:29:80:99:62:ac:d2:d0:
                    02:fd:2e:9f:6e:a6:5f:61:ca:c0:1c:fd:ed:c3:08:
                    64:5e:6f:4b:3b:69:cb:e5:ce:48:7e:e8:b3:75:48:
                    f6:bd:13:09:9c:6d:db:3a:d5:97:e4:e8:b6:b3:85:
                    f4:dc:89:c7:fd:54:52:05:cd:b6:9a:6f:94:d1:0b:
                    4d:5e:8f:d4:6e:78:64:4c:63:49:48:ec:18:5f:a0:
                    a0:12:b4:5f:1a:8c:a0:8b:0a:37:cf:35:7e:fb:f4:
                    fd:77:7a:02:38:ca:05:5a:88:71:cf:85:1a:9b:70:
                    a8:df:58:0b:8a:2d:ca:65:1f:87:95:c1:6e:e6:84:
                    11:4e:0d:b7:53:a0:56:72:c9:3a:1e:c5:0c:7a:35:
                    6a:d4:c8:09:28:15:30:95:90:02:71:19:ea:ac:5a:
                    83:08:81:0c:0f:d8:43:95:b9:31:32:e5:17:66:8d:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:29:AD:A1:44:F8:6A:07:32:62:CF:39:5F:59:43:4E:7D:39:D1
            X509v3 Authority Key Identifier:
                keyid:33:38:A7:2E:D4:06:0C:A1:59:7E:4D:CB:CD:4D:E4:30:BC:4E:1B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzinLtQGDKFZfk3LzU3kMLxOG7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/be4ba4-88ab-4f33-98ae-af6d2bdae087/1/MzinLtQGDKFZfk3LzU3kMLxOG7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:85:0c:36:93:77:59:c7:25:cd:6a:10:f2:bb:84:04:33:
         82:ff:0d:5e:2d:8b:c8:ed:85:81:e1:b0:b0:9b:d1:1b:39:e8:
         92:b1:32:6f:66:09:65:09:c7:61:4d:c4:53:d2:fd:3f:aa:3c:
         13:d7:30:e7:ee:62:8a:cc:63:e0:c6:20:4a:0d:bf:b2:d6:2e:
         1f:58:b9:3e:ab:a6:cb:5c:b2:06:3c:ce:af:b4:4e:d9:a0:d0:
         a6:8f:e2:3d:90:47:18:af:61:c0:03:a1:21:1f:92:f3:f4:43:
         6a:9d:8c:a0:dd:f2:ef:88:8b:fd:98:66:10:c0:b8:d5:14:6b:
         c9:eb:29:66:87:17:b0:c3:48:d1:11:69:19:87:33:8e:88:a6:
         5f:a0:44:21:43:7c:0b:5c:b7:8f:93:39:40:9b:6c:f4:d4:06:
         06:55:6d:78:23:a2:50:ef:48:70:b3:4a:c7:f4:e5:7a:b0:91:
         d7:a4:34:6a:04:30:1f:b8:db:79:b5:c7:4d:e7:90:1a:60:b6:
         2f:25:cf:fe:ad:55:bf:68:0d:21:fa:a6:61:ec:d1:32:52:dc:
         b7:ff:1a:d2:d0:cd:13:d1:1e:7b:a3:8e:ac:9b:ef:c2:10:c2:
         d6:b9:5e:b2:38:72:20:2e:18:05:35:9d:cd:14:89:e5:1a:01:
         02:e5:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:32 2025 by rpki-client