Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft
File:                     Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft (raw, json)
Hash identifier:          wEcedsVetm973uBEGmVA4jAOi22lFHWeFDdkNbfhLQ4=
Subject key identifier:   B3:0B:8D:58:18:AD:A8:A3:00:82:88:E9:97:1F:EC:C1:77:EA:90:9F
Authority key identifier: 67:CF:EB:2C:21:3F:12:85:07:80:B3:02:66:0A:CA:0A:72:2C:FF:6D
Certificate issuer:       /CN=67cfeb2c213f12850780b302660aca0a722cff6d
Certificate serial:       01890B3E237834FF50E57BFA6947CEC0DAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8_rLCE_EoUHgLMCZgrKCnIs_20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft
Manifest number:          D6
Signing time:             Fri 30 Jun 2023 07:39:28 +0000
Manifest this update:     Fri 30 Jun 2023 07:39:28 +0000
Manifest next update:     Sat 01 Jul 2023 07:39:28 +0000
Files and hashes:         1: Z8_rLCE_EoUHgLMCZgrKCnIs_20.crl (hash: g0ulKN1aa5MAZjBfNh770TjjmZiVSrCG9BCkZLfi0ms=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:0b:3e:23:78:34:ff:50:e5:7b:fa:69:47:ce:c0:da:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67cfeb2c213f12850780b302660aca0a722cff6d
        Validity
            Not Before: Jun 30 07:39:28 2023 GMT
            Not After : Jul  1 07:39:28 2023 GMT
        Subject: CN=b30b8d5818ada8a3008288e9971fecc177ea909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:2f:97:86:7e:65:14:76:2d:4c:33:02:9f:
                    df:12:48:dd:64:28:99:30:e1:31:65:ec:23:c9:8f:
                    f4:13:02:3f:36:02:fb:6d:ed:20:e3:76:ea:79:64:
                    65:56:00:22:2d:d0:14:d7:d1:fe:24:21:21:a4:04:
                    2a:fa:39:2b:15:a6:30:03:54:52:21:25:2f:0d:4c:
                    e9:89:75:07:03:d3:4a:12:59:a6:93:1b:78:84:fb:
                    d9:c2:9b:5c:70:fe:0a:ec:dc:6e:28:fd:33:09:3b:
                    39:b6:fd:e9:8c:79:ef:3f:b1:6f:cd:22:e9:77:d1:
                    0c:16:f5:5f:71:1c:c2:c8:a7:3e:dc:f8:cd:99:ea:
                    75:d8:81:9a:d9:ec:89:c9:b4:85:02:b3:b4:13:69:
                    94:fc:0c:78:af:2a:6d:f6:ff:ee:2a:e6:08:7a:ad:
                    d3:82:f4:95:da:f4:ff:4e:26:66:70:10:fd:b6:dc:
                    10:c8:61:0b:39:c3:7d:9e:37:1a:df:5f:7b:ef:0e:
                    a4:ff:ad:3b:4a:02:20:28:b3:a1:70:d2:8f:5f:9e:
                    24:98:ee:5b:ce:ee:72:a7:67:24:20:75:39:a1:d5:
                    6f:6a:48:67:af:85:ce:63:e9:98:f8:73:d6:ef:72:
                    a1:41:22:f2:0f:39:50:d4:7f:35:65:7b:25:58:13:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0B:8D:58:18:AD:A8:A3:00:82:88:E9:97:1F:EC:C1:77:EA:90:9F
            X509v3 Authority Key Identifier:
                keyid:67:CF:EB:2C:21:3F:12:85:07:80:B3:02:66:0A:CA:0A:72:2C:FF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_rLCE_EoUHgLMCZgrKCnIs_20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:fe:03:1d:29:f6:4a:dd:e5:8c:bf:8b:0d:5a:ad:0a:b5:20:
         19:d6:96:dd:61:44:eb:2c:bd:67:1f:2c:91:a8:3f:04:cb:38:
         e0:bf:63:e3:f1:41:51:34:3a:d1:57:06:15:48:91:6e:e1:1c:
         4d:15:db:f0:79:16:76:c3:0e:18:c3:41:cb:b3:10:0c:00:5c:
         49:d4:16:93:b0:d6:3c:87:00:54:4a:02:6a:0d:03:92:fb:3b:
         08:57:e1:38:9a:4b:12:6a:a0:3a:bf:f4:f5:fe:e7:aa:c3:59:
         6c:14:1d:73:5c:c0:ba:1d:ea:6e:da:5a:76:fc:df:64:48:78:
         7b:5f:c5:a9:7d:15:d9:9f:ab:e2:a2:ec:53:1a:b0:cf:bb:c0:
         73:30:b5:9c:fa:fb:64:5f:34:46:7b:1b:51:de:59:50:6b:11:
         c9:f9:2c:48:db:bf:7e:5d:7e:d0:61:ea:5c:5a:f6:08:b0:d5:
         2b:8f:4d:59:fa:f7:28:89:30:ec:2d:ab:89:4c:88:71:10:ae:
         02:d6:2f:43:46:18:87:67:c1:83:88:45:c2:37:dd:12:91:c3:
         21:1f:a8:bf:24:50:45:1d:4c:f3:4c:58:48:c4:5f:8e:f1:e9:
         4e:f1:12:8f:2c:83:21:78:e0:cd:44:69:fa:ed:e6:ea:f4:9d:
         f0:ef:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:07 2025 by rpki-client