Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/qc_kzowZLUYsI7MpzFYS6HNyxIU.mft
File:                     qc_kzowZLUYsI7MpzFYS6HNyxIU.mft (raw, json)
Hash identifier:          zd+g5elMcEjgSYBAmPBM9XCYVZ7qMW4aFnvkbw+N928=
Subject key identifier:   42:F7:AF:51:08:A5:B4:05:B8:D8:9A:F8:76:F9:67:6D:12:F2:9E:0C
Authority key identifier: A9:CF:E4:CE:8C:19:2D:46:2C:23:B3:29:CC:56:12:E8:73:72:C4:85
Certificate issuer:       /CN=a9cfe4ce8c192d462c23b329cc5612e87372c485
Certificate serial:       018C66453EB010C037217DF3B50F175C3146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qc_kzowZLUYsI7MpzFYS6HNyxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/qc_kzowZLUYsI7MpzFYS6HNyxIU.mft
Manifest number:          096A
Signing time:             Thu 14 Dec 2023 03:01:03 +0000
Manifest this update:     Thu 14 Dec 2023 03:01:03 +0000
Manifest next update:     Fri 15 Dec 2023 03:01:03 +0000
Files and hashes:         1: qc_kzowZLUYsI7MpzFYS6HNyxIU.crl (hash: f2yXiuqbnR+Sdt4szwwCUhsdS6tjlZkBfVRwQILfhbI=)
                          2: r0eHor_zGjeS_Sm7yMDfTCp9-XM.roa (hash: M29z2af22KJ7aT4sY7fPLYU8NEH5XqV78p0lSt+k+Ek=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:45:3e:b0:10:c0:37:21:7d:f3:b5:0f:17:5c:31:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cfe4ce8c192d462c23b329cc5612e87372c485
        Validity
            Not Before: Dec 14 03:01:03 2023 GMT
            Not After : Dec 15 03:01:03 2023 GMT
        Subject: CN=42f7af5108a5b405b8d89af876f9676d12f29e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b7:4e:8f:52:bf:56:e4:71:02:71:6c:4d:e4:
                    a1:5a:38:de:10:0c:58:1d:2f:19:39:4e:62:ec:a3:
                    0e:3f:21:bb:4d:8f:3e:75:94:6f:5d:73:01:74:b9:
                    e3:d8:8b:81:a1:1f:85:e8:07:bc:55:f8:d1:6a:0d:
                    ed:10:d4:f9:ea:20:37:e3:c6:9e:59:47:19:7e:f1:
                    6f:88:e6:55:af:b0:57:29:23:55:ec:77:31:55:b4:
                    78:19:45:2c:81:12:41:32:f9:f9:6e:87:5f:b3:54:
                    2c:43:1b:e6:22:2d:44:aa:7f:d8:39:24:de:42:fc:
                    32:fb:e8:3d:b4:d3:db:3b:bd:e5:6a:bd:24:89:d1:
                    29:fe:d2:d9:d3:6b:52:87:2c:94:76:94:64:ba:83:
                    ac:a1:aa:44:5e:ee:e8:8b:88:52:0a:98:bd:f3:34:
                    50:1f:c4:8c:a4:9e:fc:27:d9:0e:e7:12:ec:2a:a2:
                    75:eb:23:2c:79:2c:b3:bf:07:da:08:b0:21:7c:7f:
                    ef:46:22:ee:d6:fb:a4:1d:2d:72:f0:1f:d0:2b:e4:
                    68:f1:c5:8b:b4:16:08:54:83:93:d2:f7:58:42:b2:
                    9b:db:5f:73:b3:65:97:50:d3:35:73:9f:4f:1e:9e:
                    6e:76:e2:f1:5c:84:09:bb:59:17:c3:12:d8:f6:e5:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F7:AF:51:08:A5:B4:05:B8:D8:9A:F8:76:F9:67:6D:12:F2:9E:0C
            X509v3 Authority Key Identifier:
                keyid:A9:CF:E4:CE:8C:19:2D:46:2C:23:B3:29:CC:56:12:E8:73:72:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qc_kzowZLUYsI7MpzFYS6HNyxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/qc_kzowZLUYsI7MpzFYS6HNyxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/qc_kzowZLUYsI7MpzFYS6HNyxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:79:1e:f4:43:3d:c7:78:de:f4:cd:8f:08:18:a0:54:d4:
         6a:d8:15:56:92:5a:71:63:89:c3:ec:68:f3:8f:bf:20:37:03:
         b7:6a:1c:7c:af:1b:f2:b7:e7:cf:ff:28:5f:1d:8d:e0:1a:18:
         c9:57:64:a0:1a:97:59:8b:f6:2e:2d:8e:78:2d:21:51:dc:1f:
         6e:04:aa:4b:7b:d6:97:26:9b:ed:d7:ff:10:a3:76:0a:c4:50:
         68:72:8d:07:a1:07:00:6b:25:5b:db:f0:70:89:e8:c7:27:3e:
         ee:e1:8f:05:fa:2b:6f:4b:d2:23:88:35:57:60:0c:0f:d8:1f:
         6b:af:95:a7:3b:52:84:f9:a7:01:ab:6e:b5:e0:1d:a1:82:b8:
         bc:b5:33:40:8d:57:f1:dd:51:a7:b2:a8:8f:41:89:1c:b5:3d:
         66:7d:cc:aa:31:cd:8d:d3:74:90:1e:cb:46:b6:98:9e:8e:47:
         e1:43:86:3f:4e:12:93:a8:5c:ff:47:c8:2d:01:a4:59:59:c3:
         9e:71:4b:41:73:55:c8:13:b4:b1:a5:40:67:f9:cd:e2:4c:47:
         a5:88:5d:dd:07:39:57:4a:60:9d:3b:a9:7d:fb:31:96:f0:68:
         f0:21:07:ae:8e:92:b5:25:50:39:e5:68:35:8f:7d:9d:ef:e9:
         bd:e2:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:34 2025 by rpki-client