Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e4e42f-16a9-4a3e-857b-50bca14f6244/1/ZL01xXSWZTKDDs-8wgps0OqZFFc.mft
File:                     ZL01xXSWZTKDDs-8wgps0OqZFFc.mft (raw, json)
Hash identifier:          NvYohBSV1B/3sjf3uQDXNF0sL/xLfbVvfliLC01z1ZQ=
Subject key identifier:   CE:2A:E9:4B:27:2F:E4:8A:B0:F8:40:F6:C4:01:47:D2:B0:1F:E5:86
Authority key identifier: 64:BD:35:C5:74:96:65:32:83:0E:CF:BC:C2:0A:6C:D0:EA:99:14:57
Certificate issuer:       /CN=64bd35c574966532830ecfbcc20a6cd0ea991457
Certificate serial:       0188948BABF365E25E435C795E51F8E3D754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZL01xXSWZTKDDs-8wgps0OqZFFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e4e42f-16a9-4a3e-857b-50bca14f6244/1/ZL01xXSWZTKDDs-8wgps0OqZFFc.mft
Manifest number:          0DC5
Signing time:             Wed 07 Jun 2023 06:29:21 +0000
Manifest this update:     Wed 07 Jun 2023 06:29:21 +0000
Manifest next update:     Thu 08 Jun 2023 06:29:21 +0000
Files and hashes:         1: ZL01xXSWZTKDDs-8wgps0OqZFFc.crl (hash: EZt98pqRtbKf2JZGKq/1JhRrmLcZvmr7b51TBCOCK8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:94:8b:ab:f3:65:e2:5e:43:5c:79:5e:51:f8:e3:d7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64bd35c574966532830ecfbcc20a6cd0ea991457
        Validity
            Not Before: Jun  7 06:29:21 2023 GMT
            Not After : Jun  8 06:29:21 2023 GMT
        Subject: CN=ce2ae94b272fe48ab0f840f6c40147d2b01fe586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:97:bf:ee:55:a1:39:40:24:88:98:25:dc:
                    33:13:c7:1e:25:85:d7:5c:c8:74:e4:26:44:5c:de:
                    82:4e:d1:1c:af:95:88:52:37:d2:f2:81:e7:89:8e:
                    67:83:fa:5e:d6:a3:61:90:cd:ae:3d:15:47:0c:d8:
                    f4:b5:6f:53:5a:bb:fe:c7:69:1b:38:b2:ce:5e:36:
                    a7:95:bf:3c:5e:2b:de:46:62:0e:91:a7:4b:38:1c:
                    e8:d0:90:68:60:c1:b2:b6:a3:c3:be:86:44:90:1b:
                    3d:58:cb:7a:00:ba:40:e1:af:e0:b7:57:5e:ef:47:
                    f9:1c:f2:5e:a9:18:9e:1a:f8:d1:d6:f1:0a:a8:6e:
                    df:e0:27:03:42:66:40:fe:83:38:72:79:47:d4:21:
                    b1:76:0b:d8:4b:ac:13:69:2c:4b:2c:68:cc:ff:85:
                    15:dc:c6:10:5b:2f:ca:33:11:f3:28:86:3a:32:49:
                    5b:5f:47:0f:f7:ac:06:9c:18:00:f9:e9:ee:98:b4:
                    41:96:f6:ba:81:7e:ab:3c:07:07:ad:4a:8c:6b:f4:
                    64:34:48:53:2e:43:e7:b3:aa:d5:e4:a9:1c:23:9a:
                    1b:2c:f7:da:b3:88:90:b1:a0:88:cb:dd:05:44:9d:
                    f1:b9:6f:46:d9:bf:da:74:8a:0a:dc:01:d2:e9:65:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2A:E9:4B:27:2F:E4:8A:B0:F8:40:F6:C4:01:47:D2:B0:1F:E5:86
            X509v3 Authority Key Identifier:
                keyid:64:BD:35:C5:74:96:65:32:83:0E:CF:BC:C2:0A:6C:D0:EA:99:14:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZL01xXSWZTKDDs-8wgps0OqZFFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e4e42f-16a9-4a3e-857b-50bca14f6244/1/ZL01xXSWZTKDDs-8wgps0OqZFFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e4e42f-16a9-4a3e-857b-50bca14f6244/1/ZL01xXSWZTKDDs-8wgps0OqZFFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:3d:82:c5:9f:88:4f:85:34:7e:b6:82:01:72:4d:0f:cd:
         5f:1a:ad:b9:9a:63:03:8a:70:9d:dd:ce:3b:02:9c:cf:17:f5:
         8f:7f:96:7a:d8:11:82:f1:0e:4e:ea:e4:ee:57:56:56:53:9e:
         e3:9f:aa:70:e1:e7:93:2c:12:46:3c:8e:00:4e:0b:e3:04:2c:
         9c:1b:ef:6e:ed:18:05:08:5d:04:11:33:8f:8b:70:7d:0e:3a:
         e5:f4:fc:48:d6:63:3d:f3:52:b7:47:5e:23:06:54:74:5d:9f:
         50:c4:1d:4c:71:e3:a6:1a:05:19:f5:b8:88:75:ba:11:11:cc:
         8c:d2:83:2d:fa:29:6d:cd:88:3a:16:d7:9b:2d:23:54:83:0d:
         a6:83:33:6c:32:9d:8e:e6:3f:81:9f:50:fc:ea:e7:4f:d4:fd:
         ef:d8:a8:f6:4f:31:9b:b4:b3:25:82:e4:cc:b0:d4:f1:99:42:
         30:4f:55:14:43:55:1d:22:12:a8:b8:86:eb:83:79:68:ff:c6:
         ac:8f:83:fd:88:78:da:fd:51:1b:d4:b0:86:c9:63:43:cc:5e:
         ed:38:39:bc:e9:98:fe:42:a8:40:4a:5a:5c:6e:d3:57:2b:a1:
         d9:cd:75:31:06:55:9a:cf:74:1f:f1:5b:e3:dd:94:76:30:87:
         a9:c5:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:52 2025 by rpki-client