Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.mft
File:                     zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.mft (raw, json)
Hash identifier:          zeMouxYaT4EyuVmWsvJkPWVEpL/qKeqEBe4SUooYWF4=
Subject key identifier:   0C:C9:D8:46:DD:EB:38:C8:70:BE:26:A8:43:B3:6F:69:7E:26:EA:18
Authority key identifier: CD:61:79:02:19:EB:FD:8F:21:FE:51:28:44:64:32:0C:D6:09:F9:EF
Certificate issuer:       /CN=cd61790219ebfd8f21fe51284464320cd609f9ef
Certificate serial:       018C201A41F80A78FB849D1BCC2D997B7D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.mft
Manifest number:          0891
Signing time:             Thu 30 Nov 2023 12:00:40 +0000
Manifest this update:     Thu 30 Nov 2023 12:00:40 +0000
Manifest next update:     Fri 01 Dec 2023 12:00:40 +0000
Files and hashes:         1: zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.crl (hash: ywZXpnckLwfp/+UVyRJ3VSPCAK358yOa9flczTUVlS8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:20:1a:41:f8:0a:78:fb:84:9d:1b:cc:2d:99:7b:7d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd61790219ebfd8f21fe51284464320cd609f9ef
        Validity
            Not Before: Nov 30 12:00:40 2023 GMT
            Not After : Dec  1 12:00:40 2023 GMT
        Subject: CN=0cc9d846ddeb38c870be26a843b36f697e26ea18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:81:18:43:88:6f:d1:d5:62:52:f9:92:f6:
                    2a:9a:d2:5a:bf:d1:d1:b0:4b:ac:a4:7d:be:23:1b:
                    4c:16:91:1f:e0:02:64:ec:f1:1d:dd:3b:1d:a4:52:
                    81:98:9d:af:07:ba:d3:72:7d:c0:70:09:51:3b:e2:
                    f9:b7:10:ac:56:5f:4c:e7:38:26:da:74:81:e4:c4:
                    97:c4:a2:be:ac:b4:9b:f7:7c:1f:54:1c:b3:a0:1e:
                    71:d4:7e:61:a8:19:f5:d7:c1:aa:0f:cb:12:26:14:
                    66:db:37:6b:d3:9b:75:d0:23:4a:03:1b:6d:1f:b0:
                    c9:06:f1:5b:fb:c6:60:ea:30:5b:8f:f6:29:97:92:
                    cf:08:ee:aa:f6:53:ca:c3:1c:24:9e:5c:5a:e8:b4:
                    9f:68:58:95:19:10:3d:fd:5b:f4:2a:b0:31:ea:15:
                    76:f2:97:42:cc:19:e1:c1:cc:03:0e:0e:7d:7c:9e:
                    31:33:95:0e:c4:5a:c0:a0:f2:df:27:92:d3:f4:67:
                    a0:0a:ec:04:23:16:09:5f:e5:27:56:c5:49:8a:64:
                    16:f9:ae:5b:f6:e3:14:73:00:30:39:50:61:98:72:
                    7f:33:fa:3f:0b:8d:67:52:33:ba:a0:71:ff:68:1b:
                    a3:aa:07:45:f6:58:56:8e:30:aa:bc:c2:ca:19:1c:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C9:D8:46:DD:EB:38:C8:70:BE:26:A8:43:B3:6F:69:7E:26:EA:18
            X509v3 Authority Key Identifier:
                keyid:CD:61:79:02:19:EB:FD:8F:21:FE:51:28:44:64:32:0C:D6:09:F9:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6d:d5:50:2b:fb:70:32:e5:26:b5:c4:e4:8d:e0:d2:60:7c:
         9b:40:3d:87:8b:43:7e:89:e3:96:a1:0b:05:a6:b2:6e:48:f4:
         f0:8e:7c:6c:e4:85:97:b0:14:ea:ec:27:a0:7e:78:a7:aa:ea:
         38:98:6d:72:b6:8b:13:45:52:d4:d7:3b:96:d8:3e:8b:86:d8:
         ba:4a:b8:e2:12:7e:e0:7e:58:f4:26:3c:2a:3f:5f:48:64:2c:
         bd:8c:36:0b:af:53:c5:7c:19:a1:5e:89:9d:c7:fc:78:e2:57:
         25:ff:bd:6d:87:54:56:a6:0b:15:27:3c:b3:a1:ba:dc:fd:fb:
         e0:5a:0a:86:01:78:94:12:0d:9e:0e:68:01:f4:c5:78:f9:64:
         05:28:38:4e:c1:83:c1:ae:36:2e:32:2f:e1:15:f1:2b:04:c4:
         f4:3c:d3:ed:d5:ce:c3:0b:8e:36:77:88:be:3d:fe:11:30:6c:
         e1:c1:a5:3f:9e:ce:8a:b0:96:1d:94:bd:66:2b:44:19:5c:57:
         56:fe:42:bc:72:be:13:8d:7a:00:0d:9a:bd:87:76:d0:05:8a:
         f3:6b:6f:28:64:86:62:e2:3c:9a:4f:72:f3:03:69:a5:ff:53:
         e2:0a:60:21:0b:34:78:78:d7:9d:06:f1:4f:57:db:9a:72:81:
         5e:47:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:11 2025 by rpki-client