Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/309332-a40a-4999-86a9-9ff167c70478/1/MZcn5xjPV_ksYrtJqR9TtOL67p4.mft
File:                     MZcn5xjPV_ksYrtJqR9TtOL67p4.mft (raw, json)
Hash identifier:          01REyFJdO3NejRRjAYziapeJmoGICj+1i+S84behMr8=
Subject key identifier:   07:BC:98:E0:02:8D:6F:6B:22:6F:6D:6C:E8:8D:DD:CD:57:CC:A4:A0
Authority key identifier: 31:97:27:E7:18:CF:57:F9:2C:62:BB:49:A9:1F:53:B4:E2:FA:EE:9E
Certificate issuer:       /CN=319727e718cf57f92c62bb49a91f53b4e2faee9e
Certificate serial:       018FE6C5A539C6352FB1727A79CB3CC2C9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZcn5xjPV_ksYrtJqR9TtOL67p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/309332-a40a-4999-86a9-9ff167c70478/1/MZcn5xjPV_ksYrtJqR9TtOL67p4.mft
Manifest number:          0E
Signing time:             Wed 05 Jun 2024 05:01:03 +0000
Manifest this update:     Wed 05 Jun 2024 05:01:03 +0000
Manifest next update:     Thu 06 Jun 2024 05:01:03 +0000
Files and hashes:         1: MZcn5xjPV_ksYrtJqR9TtOL67p4.crl (hash: JmElJ0JUFz95swTbYyTIfLdhKYhcCoHHNO946+QG998=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e6:c5:a5:39:c6:35:2f:b1:72:7a:79:cb:3c:c2:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319727e718cf57f92c62bb49a91f53b4e2faee9e
        Validity
            Not Before: Jun  5 05:01:03 2024 GMT
            Not After : Jun  6 05:01:03 2024 GMT
        Subject: CN=07bc98e0028d6f6b226f6d6ce88dddcd57cca4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:c4:09:4f:ba:1c:76:14:6e:ee:d4:2f:b2:
                    b6:45:d5:70:de:75:8f:36:9f:91:4b:e3:62:63:f3:
                    49:55:a1:3e:4b:62:d1:25:65:38:0f:a0:96:6a:6a:
                    69:e5:bb:1a:12:80:bb:0c:21:3a:fe:73:6d:9f:bd:
                    d7:cb:a0:7a:a4:35:0b:f1:2b:6b:c6:a9:48:7d:bc:
                    41:2a:fd:a7:d9:92:92:51:a4:59:2b:0c:33:c7:27:
                    92:84:d1:6d:be:57:a0:7b:c2:a3:63:18:69:1f:9a:
                    15:4f:a5:78:cf:f8:ab:5e:8d:ab:98:7a:72:ef:ac:
                    5a:ea:07:14:ce:65:85:b1:b4:60:8d:3e:7e:a2:4a:
                    8a:d8:fb:57:fa:be:10:1d:ce:99:fe:ca:06:1c:dc:
                    ca:fb:40:7d:0a:cb:50:77:2b:c9:bb:90:b8:bc:54:
                    4a:be:06:f3:a6:bc:21:b0:91:fc:f6:52:db:d3:4e:
                    97:b9:c5:f6:56:a3:75:b2:b5:34:76:99:cb:62:c1:
                    35:07:7c:f9:fb:57:b3:21:df:3b:87:39:ba:ab:4a:
                    5a:63:e4:f4:2e:95:dc:6c:ad:b6:14:72:fa:63:01:
                    e7:1c:56:24:fa:4a:1f:0e:bf:05:48:5d:13:75:8a:
                    af:0e:86:72:0b:79:42:44:e3:65:d7:30:39:59:fd:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BC:98:E0:02:8D:6F:6B:22:6F:6D:6C:E8:8D:DD:CD:57:CC:A4:A0
            X509v3 Authority Key Identifier:
                keyid:31:97:27:E7:18:CF:57:F9:2C:62:BB:49:A9:1F:53:B4:E2:FA:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZcn5xjPV_ksYrtJqR9TtOL67p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/309332-a40a-4999-86a9-9ff167c70478/1/MZcn5xjPV_ksYrtJqR9TtOL67p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/309332-a40a-4999-86a9-9ff167c70478/1/MZcn5xjPV_ksYrtJqR9TtOL67p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:d7:94:9a:75:bd:f1:c8:be:e2:2e:33:01:1e:14:0f:de:
         d3:d9:7a:b7:4a:11:13:36:5b:2a:88:2e:69:20:e1:69:85:41:
         d0:7e:4a:da:10:9f:0a:28:e9:c0:c3:01:5f:2b:4e:65:61:5f:
         de:6c:fc:0e:f0:67:08:95:cc:16:ec:29:6d:1d:a2:1f:3a:49:
         d1:dc:8f:17:70:18:24:f2:06:18:59:99:f4:49:33:29:e9:f1:
         1a:30:c9:6e:a9:a9:08:88:38:82:44:67:65:fb:b5:e2:58:e8:
         b7:2e:93:b9:ae:33:af:f4:2e:1d:1a:5d:20:be:69:a4:be:5a:
         c4:34:d0:c6:1d:08:3d:6a:c7:5c:b7:17:65:61:a3:a2:b2:36:
         aa:c1:4c:a1:1c:13:1c:a1:94:e6:68:bd:6a:b3:99:cf:fb:c3:
         40:b7:be:aa:f4:c2:50:27:d0:78:14:ad:ab:eb:42:c4:23:2e:
         98:85:65:b2:bb:5a:2c:3e:a2:06:ae:2c:11:a2:3f:7e:4e:45:
         fc:46:1d:93:cd:1b:e3:b9:5f:b2:60:5a:ec:95:36:d1:5e:50:
         b5:0e:6e:2e:6d:e5:b5:b9:a0:bf:b5:af:25:de:29:d5:e1:41:
         9a:0a:77:4b:99:5f:65:05:fa:88:49:4b:eb:d4:9c:f3:4b:f2:
         72:61:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:24 2025 by rpki-client