Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
File:                     Z6FPJDBIdf8VT-Kysstuugr5RSM.mft (raw, json)
Hash identifier:          ayL2z2gJoqqJMTMxTzu4RRuyWwUjGWHAu5lJElY5Lwg=
Subject key identifier:   C1:D3:EF:D8:12:F3:B4:99:44:9B:49:0C:C5:E4:EE:DD:C1:DA:0D:5B
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Certificate issuer:       /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial:       0195403330CDDA6E2A3E891AC81E18937739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
Manifest number:          1347
Signing time:             Wed 26 Feb 2025 03:00:51 +0000
Manifest this update:     Wed 26 Feb 2025 03:00:51 +0000
Manifest next update:     Thu 27 Feb 2025 03:00:51 +0000
Files and hashes:         1: Z6FPJDBIdf8VT-Kysstuugr5RSM.crl (hash: Gcy5we3trCA4P4RHvbzjnc1byCSoK3VXhnrH0cXLo+Q=)
                          2: pl66MpODxtxRoZhLJAW-nkoD_Sc.roa (hash: sJLlhjSfYMWQixCxG3V31R8LPRit/+p4sujJjRjMO3E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:40:33:30:cd:da:6e:2a:3e:89:1a:c8:1e:18:93:77:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
        Validity
            Not Before: Feb 26 03:00:51 2025 GMT
            Not After : Feb 27 03:00:51 2025 GMT
        Subject: CN=c1d3efd812f3b499449b490cc5e4eeddc1da0d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:8d:bd:dc:18:3e:50:59:d4:1e:8b:ea:5b:
                    5c:a4:b8:6b:58:96:ae:a0:d6:f9:0f:63:2d:4c:75:
                    fd:07:3a:9a:c5:ef:40:c6:35:2c:0c:1f:b4:de:95:
                    81:22:d3:20:c2:a8:1e:dc:09:37:49:0b:c4:32:b8:
                    3f:2b:8d:ad:c1:7c:04:4f:f4:c4:71:79:6c:ec:82:
                    84:52:68:52:ff:24:5c:2b:2e:d2:81:2e:74:d8:f5:
                    fd:19:b6:7d:eb:3a:fe:4c:92:69:f8:1b:f9:58:4d:
                    48:4f:e6:4f:c3:aa:d2:92:83:cb:27:fb:69:8e:df:
                    2b:bc:66:f5:1b:94:ad:82:e9:f6:28:6d:8c:33:a2:
                    e5:0e:15:06:7b:87:e2:d0:60:94:8f:86:83:d5:f3:
                    55:8c:14:ae:31:b7:b3:61:1c:16:17:5d:dc:11:93:
                    90:a7:1d:ef:91:75:ec:72:98:88:83:36:cb:85:ba:
                    0e:66:5b:db:b3:39:fe:ef:9e:16:b7:0d:df:c5:75:
                    ff:d0:da:a0:47:3a:18:0d:30:9d:84:7a:c7:16:06:
                    38:9d:4a:f3:f9:2c:69:d3:eb:4e:d6:95:84:61:a8:
                    2a:09:36:cb:6c:8c:9f:18:8d:e2:a0:69:7e:39:d9:
                    47:ea:b0:35:6c:94:24:41:2b:eb:36:c8:47:62:25:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D3:EF:D8:12:F3:B4:99:44:9B:49:0C:C5:E4:EE:DD:C1:DA:0D:5B
            X509v3 Authority Key Identifier:
                keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d7:60:f9:13:79:97:44:c8:32:56:4d:cf:ea:25:da:33:48:
         e7:27:67:1a:a5:f2:59:ae:a1:72:a8:1e:c6:9f:e7:80:f6:4b:
         f2:1e:25:67:b1:df:ae:20:e7:ff:f3:08:6e:3c:ab:fd:d4:92:
         17:05:e9:7b:a9:50:af:d4:7d:0d:60:81:f8:51:18:14:18:15:
         60:30:4b:6d:05:2c:47:03:ef:e2:b1:d4:d2:dc:91:a9:89:3d:
         c7:9a:aa:58:13:61:af:fc:13:ea:01:47:15:dd:3c:d1:51:ad:
         ef:d3:fc:fd:f0:a3:6a:e8:81:99:f9:00:92:d1:01:e0:89:c5:
         40:64:3c:a1:c7:7e:39:f3:4e:71:1e:47:7c:e1:2b:dc:30:f3:
         df:8d:67:5a:10:8b:c6:88:e4:c2:8e:e2:63:9a:55:ef:33:4a:
         11:ee:ad:fe:27:47:cb:17:00:ec:41:20:72:49:be:14:89:e7:
         f0:5e:a2:95:de:6d:fd:13:c7:71:e3:1c:85:d8:da:fb:b6:8d:
         19:f9:53:eb:1d:a4:3d:3f:ea:fc:1e:30:33:21:2a:b0:f9:f7:
         f3:81:44:35:f5:96:a6:58:c3:2b:21:e3:38:15:97:45:e4:f6:
         b7:29:39:2b:6f:b7:a8:1c:87:68:46:a6:f3:f7:38:0d:00:18:
         36:4e:ba:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:38 2025 by rpki-client