Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/84870f-6dd4-43fc-a157-89ef0d8eb9c1/1/Fz_Ss4wMFgccGI35zIruEhpqhQ0.mft
File:                     Fz_Ss4wMFgccGI35zIruEhpqhQ0.mft (raw, json)
Hash identifier:          UzJRtAgL77DJ3bP8Ni0waIEOcZphBnQohxSKTyw+Tyg=
Subject key identifier:   5C:EE:60:41:35:29:9B:78:EB:CF:54:AD:E2:91:8B:D3:47:CE:1E:9D
Authority key identifier: 17:3F:D2:B3:8C:0C:16:07:1C:18:8D:F9:CC:8A:EE:12:1A:6A:85:0D
Certificate issuer:       /CN=173fd2b38c0c16071c188df9cc8aee121a6a850d
Certificate serial:       018CD4907422ECEBCB8DDB7E8D0D83E9DE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fz_Ss4wMFgccGI35zIruEhpqhQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/84870f-6dd4-43fc-a157-89ef0d8eb9c1/1/Fz_Ss4wMFgccGI35zIruEhpqhQ0.mft
Manifest number:          0ED8
Signing time:             Thu 04 Jan 2024 13:01:25 +0000
Manifest this update:     Thu 04 Jan 2024 13:01:25 +0000
Manifest next update:     Fri 05 Jan 2024 13:01:25 +0000
Files and hashes:         1: Fz_Ss4wMFgccGI35zIruEhpqhQ0.crl (hash: fRGKXW0tGrIl2C4A/brUqY1SSeR17D2nDQmdnZ2yzAc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d4:90:74:22:ec:eb:cb:8d:db:7e:8d:0d:83:e9:de:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173fd2b38c0c16071c188df9cc8aee121a6a850d
        Validity
            Not Before: Jan  4 13:01:25 2024 GMT
            Not After : Jan  5 13:01:25 2024 GMT
        Subject: CN=5cee604135299b78ebcf54ade2918bd347ce1e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:0a:93:aa:9d:f8:59:4a:4e:c4:e5:0e:a4:
                    b0:de:bd:4d:a7:5a:2e:80:fe:9f:f4:16:8a:f3:96:
                    a6:1f:ce:37:1e:90:08:b3:25:f4:02:f9:bc:e0:cd:
                    bf:c5:fd:46:91:de:c0:a5:0e:27:c3:13:ce:ec:07:
                    98:0a:d0:e3:c6:3f:48:e4:7a:ec:03:19:06:2b:16:
                    79:39:81:45:af:43:d8:22:6e:2a:9d:f3:fc:1a:26:
                    c9:b3:c3:60:a4:8a:0c:7f:d1:0e:01:7b:1d:01:2f:
                    ab:60:fd:28:4b:29:b7:2c:c1:77:eb:f0:62:d4:58:
                    89:b5:c7:14:aa:6b:76:55:0c:3a:c6:63:ef:17:92:
                    47:7e:5c:27:65:ec:32:f5:f2:17:a0:08:45:cf:ef:
                    fc:75:cc:ad:dd:9c:18:0a:2c:19:2c:08:11:c5:c7:
                    7e:be:0e:cb:be:b3:31:3d:ea:eb:a3:39:67:f4:29:
                    59:b0:39:b0:cc:92:77:c6:89:e0:81:29:9d:77:b2:
                    c4:73:2b:3d:72:2f:99:1a:41:c5:39:7a:99:3f:b1:
                    7d:66:a2:e1:7b:c8:62:65:5f:66:97:0e:bf:a9:86:
                    7b:57:e5:bb:6c:47:5e:64:06:11:c7:ed:af:47:4c:
                    69:fa:be:fb:cc:49:8f:d1:25:c2:c2:fb:91:9a:ec:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:60:41:35:29:9B:78:EB:CF:54:AD:E2:91:8B:D3:47:CE:1E:9D
            X509v3 Authority Key Identifier:
                keyid:17:3F:D2:B3:8C:0C:16:07:1C:18:8D:F9:CC:8A:EE:12:1A:6A:85:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fz_Ss4wMFgccGI35zIruEhpqhQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/84870f-6dd4-43fc-a157-89ef0d8eb9c1/1/Fz_Ss4wMFgccGI35zIruEhpqhQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/84870f-6dd4-43fc-a157-89ef0d8eb9c1/1/Fz_Ss4wMFgccGI35zIruEhpqhQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:06:61:4d:4f:48:b6:ac:e4:5f:c0:cf:99:98:b4:52:84:ac:
         25:7c:fa:a8:f3:78:2c:a6:f0:44:b7:b9:b3:93:ba:17:58:1f:
         81:53:e8:ab:36:89:9c:ec:a3:93:4f:d9:50:31:82:d4:02:d9:
         cc:dd:44:81:ef:e3:e8:02:ed:79:01:39:7b:b9:52:a2:21:41:
         84:c6:e3:88:23:01:74:61:fd:d9:2c:63:ef:83:a0:1a:c7:50:
         9c:97:97:eb:7f:a8:61:a6:f4:26:a3:17:f9:ad:4c:ef:41:07:
         83:18:6f:9c:cb:37:8d:8a:96:4b:c3:71:ea:5e:48:fc:f9:56:
         20:72:6c:70:51:4e:e9:8f:32:fc:34:76:e8:93:d2:6f:cf:2d:
         eb:73:4f:20:09:7e:12:f6:68:65:81:2c:a6:52:5f:26:52:bd:
         81:3a:72:f2:d0:a9:0d:d5:76:3d:ad:1d:c4:d6:1d:f3:3e:ef:
         23:03:e6:a9:3e:1b:02:28:75:dd:7b:46:5b:f0:13:76:89:d8:
         81:38:6d:a1:34:7f:43:70:df:b2:60:d5:01:31:0e:af:8f:99:
         7f:14:d6:f4:11:a0:9d:02:a8:f7:35:c1:21:24:ed:7e:0e:1b:
         6a:6b:b1:11:ed:5e:03:fb:8d:38:38:46:f1:3e:63:4f:86:e0:
         45:35:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:17 2025 by rpki-client