Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft
File:                     zywUDr4TKWR_SFiMjgjHP_2q4vU.mft (raw, json)
Hash identifier:          n0z0HH9Dskki9WtdV2Civ1iXJRJmhfqmpahjmK/mlEU=
Subject key identifier:   09:19:2E:C8:78:22:49:00:2A:15:4B:11:93:E5:04:A1:8C:2C:52:18
Authority key identifier: CF:2C:14:0E:BE:13:29:64:7F:48:58:8C:8E:08:C7:3F:FD:AA:E2:F5
Certificate issuer:       /CN=cf2c140ebe1329647f48588c8e08c73ffdaae2f5
Certificate serial:       019480CC21AFFF038CB753A6286BC9D7952B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zywUDr4TKWR_SFiMjgjHP_2q4vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft
Manifest number:          06EE
Signing time:             Sun 19 Jan 2025 23:00:49 +0000
Manifest this update:     Sun 19 Jan 2025 23:00:49 +0000
Manifest next update:     Mon 20 Jan 2025 23:00:49 +0000
Files and hashes:         1: zywUDr4TKWR_SFiMjgjHP_2q4vU.crl (hash: X07KunSoU2z/Jn3HGZcFmk3as6i3YmxOXBWyfaBR/gQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:80:cc:21:af:ff:03:8c:b7:53:a6:28:6b:c9:d7:95:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c140ebe1329647f48588c8e08c73ffdaae2f5
        Validity
            Not Before: Jan 19 23:00:49 2025 GMT
            Not After : Jan 20 23:00:49 2025 GMT
        Subject: CN=09192ec8782249002a154b1193e504a18c2c5218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:69:34:c6:93:55:39:d4:eb:4f:a4:6b:6e:
                    11:13:51:f8:d8:01:fd:92:b9:4f:d2:4a:a4:5d:62:
                    17:2e:5e:d3:30:ea:d7:67:c7:52:79:23:ad:02:22:
                    43:16:d1:43:6d:17:d3:a2:7a:fc:84:a1:55:00:f9:
                    86:5e:cd:dc:dd:90:0a:91:d9:9f:79:99:08:f3:46:
                    a1:31:ec:48:6d:1f:ed:2a:32:ee:fa:4e:77:23:1a:
                    ce:ff:3d:41:06:0c:11:77:e1:e8:71:85:34:6c:e9:
                    67:92:6a:85:16:cb:99:42:02:98:20:43:b5:1d:d5:
                    2b:a9:4d:32:1a:d7:7f:fb:3e:6d:60:12:98:f3:21:
                    40:50:ff:58:a9:e0:34:d4:e9:e2:66:cd:e0:69:64:
                    66:8e:3b:fa:7a:74:dc:1c:bd:ef:e1:a2:3d:33:0c:
                    fd:af:e7:ef:53:c6:e3:4c:b2:be:88:20:08:fd:92:
                    bc:33:b7:fb:8d:9f:ff:23:9c:50:7f:11:91:c9:ed:
                    8c:04:af:ff:99:13:c5:e2:8a:71:70:de:3b:54:cd:
                    46:a4:ad:50:e2:24:54:8c:7f:e0:a4:55:69:08:b8:
                    8c:70:4b:ed:7e:5f:75:6f:e4:0b:08:4f:db:ca:55:
                    fd:be:94:b7:01:8b:2c:6b:ce:4a:75:d0:f8:79:2f:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:2E:C8:78:22:49:00:2A:15:4B:11:93:E5:04:A1:8C:2C:52:18
            X509v3 Authority Key Identifier:
                keyid:CF:2C:14:0E:BE:13:29:64:7F:48:58:8C:8E:08:C7:3F:FD:AA:E2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zywUDr4TKWR_SFiMjgjHP_2q4vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c8:20:2a:97:13:04:0b:14:ec:20:fc:76:db:da:c2:1e:6b:
         82:ba:23:87:5f:af:2d:c2:86:33:e2:7d:a1:d0:0e:cc:c9:fb:
         e5:aa:04:dc:02:6e:df:d8:ec:39:62:73:29:9b:93:44:ba:8a:
         27:8d:de:56:55:df:fc:68:e6:23:57:8d:1f:dc:61:f2:08:83:
         56:48:eb:95:9d:a4:3b:d8:f9:b6:55:57:64:f2:b3:88:5f:42:
         c5:88:42:42:ad:63:c9:bb:85:33:ea:40:ac:a4:cc:fb:f4:b8:
         74:e9:9f:a4:3e:7f:5b:6e:67:c9:9a:0c:5c:0f:61:91:f3:97:
         41:29:45:62:74:17:2c:e4:96:b6:be:c7:1c:7d:7e:d7:5a:96:
         e8:ab:a5:31:c0:f8:cc:36:7d:c9:81:08:e1:fc:5b:8e:f0:1e:
         e2:b4:38:9d:64:61:d3:60:17:65:de:e1:8e:c1:69:1b:e0:00:
         46:5e:d7:af:8e:d9:dd:df:88:39:fc:99:a0:11:fe:de:32:09:
         b6:47:5c:0d:ad:3b:e7:9e:0f:47:c0:ad:20:3d:4f:3e:c9:67:
         1e:9e:00:c8:cc:15:81:c5:ed:de:20:05:52:31:a1:dc:27:3b:
         7d:98:a8:a3:85:32:74:e3:bd:83:2d:a2:3f:9c:01:69:79:13:
         b9:87:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:36 2025 by rpki-client