Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.mft
File:                     z4TMP4-HdgP0A7Dpi7zRyPS_YoE.mft (raw, json)
Hash identifier:          GJvBURFaW5lxOVEMqvORyaEtWGdU3ydiJe2wcFfv3GY=
Subject key identifier:   E3:87:82:63:53:00:D1:11:CA:13:E1:C5:FE:40:DF:64:10:08:AE:8F
Authority key identifier: CF:84:CC:3F:8F:87:76:03:F4:03:B0:E9:8B:BC:D1:C8:F4:BF:62:81
Certificate issuer:       /CN=cf84cc3f8f877603f403b0e98bbcd1c8f4bf6281
Certificate serial:       018962976590600F180EB1E97203355DDE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.mft
Manifest number:          0557
Signing time:             Mon 17 Jul 2023 06:43:56 +0000
Manifest this update:     Mon 17 Jul 2023 06:43:56 +0000
Manifest next update:     Tue 18 Jul 2023 06:43:56 +0000
Files and hashes:         1: z4TMP4-HdgP0A7Dpi7zRyPS_YoE.crl (hash: z3SxRsEju5R59zviegfgyPvJ2Df8Vnqihr6Ax74EPg8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:97:65:90:60:0f:18:0e:b1:e9:72:03:35:5d:de:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf84cc3f8f877603f403b0e98bbcd1c8f4bf6281
        Validity
            Not Before: Jul 17 06:43:56 2023 GMT
            Not After : Jul 18 06:43:56 2023 GMT
        Subject: CN=e38782635300d111ca13e1c5fe40df641008ae8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:ae:da:69:be:ef:de:f8:61:28:c8:46:e2:
                    21:ca:02:cd:52:85:e6:ae:bc:5d:4f:15:c0:d2:ac:
                    63:99:20:a8:46:81:b7:60:ce:ff:b1:5a:e1:23:d0:
                    2e:bb:87:2f:1d:53:9f:b6:88:04:1c:f6:7b:0f:23:
                    cf:22:da:dd:a5:5c:9c:05:05:94:63:04:f8:fa:99:
                    a5:99:ad:49:15:00:98:8a:68:90:85:97:91:bf:51:
                    49:75:1c:bb:26:2d:1d:b8:61:d6:81:5a:81:5e:be:
                    d5:07:e6:89:ab:04:fa:51:23:44:12:15:ad:d8:2d:
                    c3:77:4e:56:ee:99:0b:ef:bc:ba:68:34:49:52:9d:
                    0c:aa:8b:68:4c:26:98:4f:47:08:32:b0:c2:78:22:
                    37:aa:94:84:17:93:b1:0b:1b:f6:d3:5a:61:e7:dc:
                    e0:bb:81:dc:e7:d6:d7:74:4c:6b:42:dc:79:cd:40:
                    a6:31:f0:2d:ae:42:3a:25:cb:52:bc:da:e1:2d:9b:
                    a2:d6:d8:7a:66:4c:d6:df:b9:08:f9:36:63:a9:83:
                    25:10:3f:77:83:7f:32:d0:14:99:76:4f:25:29:53:
                    9d:f7:cd:ec:05:a9:7e:47:33:07:f7:a6:2a:0e:de:
                    89:92:d2:af:1a:44:c9:2e:72:4b:2c:39:58:00:30:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:87:82:63:53:00:D1:11:CA:13:E1:C5:FE:40:DF:64:10:08:AE:8F
            X509v3 Authority Key Identifier:
                keyid:CF:84:CC:3F:8F:87:76:03:F4:03:B0:E9:8B:BC:D1:C8:F4:BF:62:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:be:d5:fb:df:a1:e8:cb:cd:25:6b:28:7d:a2:93:b0:1d:b2:
         b8:6b:b8:ed:79:d9:09:68:f6:43:81:b7:df:6f:60:8d:f8:99:
         a7:02:24:6b:0e:fc:af:38:af:09:79:38:ba:57:e5:bf:c2:f6:
         89:c1:57:98:9f:a7:43:c4:9e:ec:1e:f4:12:ff:3f:9d:4d:ec:
         01:33:c2:36:3b:a8:ef:1a:c2:ca:04:dc:19:25:8f:42:cd:81:
         ab:9a:5a:4c:1b:c2:4d:dc:ff:83:9f:5a:ec:fc:a1:66:0e:84:
         1b:99:6b:48:a5:72:eb:f3:9e:7e:f4:f5:ae:57:14:02:d2:27:
         7d:54:2f:fb:d0:47:88:2e:15:fd:67:ff:81:43:9d:74:2d:7d:
         f4:22:bd:75:77:d7:9b:40:ab:a2:1e:c1:8e:d3:bc:33:fa:b2:
         7c:92:02:10:38:3a:af:93:e6:34:44:57:c9:db:96:6a:c1:9f:
         5c:ec:b9:1a:cc:6f:49:cb:54:85:ee:2d:81:16:3e:c9:eb:c5:
         cc:10:7c:05:7e:c5:11:1c:93:2e:24:c4:04:ac:7e:ca:75:e9:
         4d:4a:0b:4f:95:13:90:e4:65:92:b8:55:86:89:a7:7a:44:5f:
         0c:d6:0a:8c:1d:18:a7:80:a0:f8:7b:1f:cc:c9:96:13:17:5d:
         99:b5:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:36 2025 by rpki-client