Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5bcc2a-ae85-42f0-9f19-f9a69e73f453/1/Z7czMrUMAxBB9mXRzRUHeBorpnI.mft
File:                     Z7czMrUMAxBB9mXRzRUHeBorpnI.mft (raw, json)
Hash identifier:          jvtKpGTwwoJWsF8FfUz0F2S/6sk2VHiVEZZUSYRQ6S4=
Subject key identifier:   D4:51:B3:8F:BC:04:38:DB:3D:BD:9F:66:AE:83:E2:4E:50:0E:65:1F
Authority key identifier: 67:B7:33:32:B5:0C:03:10:41:F6:65:D1:CD:15:07:78:1A:2B:A6:72
Certificate issuer:       /CN=67b73332b50c031041f665d1cd1507781a2ba672
Certificate serial:       0192F554FBEEE484C34237C506D511053D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7czMrUMAxBB9mXRzRUHeBorpnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5bcc2a-ae85-42f0-9f19-f9a69e73f453/1/Z7czMrUMAxBB9mXRzRUHeBorpnI.mft
Manifest number:          1295
Signing time:             Mon 04 Nov 2024 04:00:40 +0000
Manifest this update:     Mon 04 Nov 2024 04:00:40 +0000
Manifest next update:     Tue 05 Nov 2024 04:00:40 +0000
Files and hashes:         1: Z7czMrUMAxBB9mXRzRUHeBorpnI.crl (hash: pC71ddYtNyis+3hwYuxqFgYTxrX4QTCfTCMCagCb2fo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f5:54:fb:ee:e4:84:c3:42:37:c5:06:d5:11:05:3d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b73332b50c031041f665d1cd1507781a2ba672
        Validity
            Not Before: Nov  4 04:00:40 2024 GMT
            Not After : Nov  5 04:00:40 2024 GMT
        Subject: CN=d451b38fbc0438db3dbd9f66ae83e24e500e651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:25:64:07:07:77:30:bd:2a:82:ae:74:80:a2:
                    83:e1:9b:e0:b6:82:27:f3:6d:a9:c2:5a:c1:bf:46:
                    8f:b2:74:eb:24:e9:86:a6:87:d1:b0:d3:1f:e2:56:
                    93:5c:30:11:01:37:b7:40:f0:49:ae:a9:e8:7f:35:
                    ca:7a:f9:5f:c7:1a:7d:96:39:a9:85:f4:94:70:e4:
                    40:c2:9a:53:24:44:74:91:91:1d:d6:1f:85:7c:24:
                    0a:7b:15:0c:46:8c:96:86:ba:a4:2c:0a:19:93:f3:
                    c2:0d:ad:87:a9:04:11:f6:b6:51:2f:ed:0c:e3:c0:
                    28:93:a6:9c:90:af:14:f1:ae:11:6c:1a:d1:53:4f:
                    e6:bc:a7:5a:14:b1:72:b1:29:8c:61:5f:e0:a3:96:
                    de:18:b8:f3:da:27:ab:66:5e:68:b4:79:b0:82:c0:
                    60:c8:2f:9d:e4:fa:b9:99:78:ed:38:2b:70:6c:4e:
                    22:a6:8b:e5:7b:29:63:4f:24:65:e7:98:2e:53:e1:
                    5a:a3:49:4b:51:1c:6b:2f:2c:27:ae:0b:dc:cf:8b:
                    c8:26:97:55:20:e9:ca:5f:63:11:c8:10:d6:35:b4:
                    6d:23:85:6f:c7:69:cf:fe:33:70:e0:72:13:62:d5:
                    91:03:90:ce:55:c5:11:a0:1e:5a:32:17:24:9a:d7:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:51:B3:8F:BC:04:38:DB:3D:BD:9F:66:AE:83:E2:4E:50:0E:65:1F
            X509v3 Authority Key Identifier:
                keyid:67:B7:33:32:B5:0C:03:10:41:F6:65:D1:CD:15:07:78:1A:2B:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7czMrUMAxBB9mXRzRUHeBorpnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5bcc2a-ae85-42f0-9f19-f9a69e73f453/1/Z7czMrUMAxBB9mXRzRUHeBorpnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5bcc2a-ae85-42f0-9f19-f9a69e73f453/1/Z7czMrUMAxBB9mXRzRUHeBorpnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4d:73:1c:61:dc:b7:16:14:f9:aa:cd:c2:ea:a4:d5:5a:d2:
         e5:a5:42:f2:f3:bd:0d:c3:cc:45:f1:48:a5:a1:63:fc:1c:6f:
         10:e2:35:0f:7c:f4:7a:75:8a:f3:34:0c:d8:fa:21:5b:31:7a:
         c6:ef:6d:02:30:19:82:13:0e:68:e0:cc:70:ba:cd:76:a8:32:
         ed:0b:44:f7:37:0c:13:f9:0f:40:b6:f7:11:8b:af:c9:8b:23:
         85:b4:24:da:e5:cd:07:e8:bb:6f:d8:bc:5d:52:94:5c:1a:40:
         f7:81:f8:5d:67:5b:54:ea:f4:7f:31:f0:d6:04:3b:4b:f4:9a:
         ac:fb:cf:30:b8:53:a7:49:2a:76:f0:14:f4:b2:9f:e6:ea:94:
         72:b6:56:3c:9e:60:1e:cd:21:82:47:0f:50:96:e3:5c:d4:58:
         aa:ed:3b:18:03:98:39:57:51:f7:7f:3e:bf:9a:8e:19:9b:99:
         48:f5:31:b4:d9:76:16:51:85:45:cd:7e:38:6f:8f:41:73:21:
         15:45:90:c6:9d:43:d0:8b:18:5c:d8:10:77:6b:93:b5:08:cd:
         9a:08:57:92:37:57:fc:a2:b5:dd:9d:ba:ae:0b:d6:df:82:63:
         95:33:52:68:dd:a0:35:40:60:68:17:fc:ed:7b:e9:b3:b3:f4:
         0d:f0:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:06 2025 by rpki-client