Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
File:                     G_mzHCCQb4foYHjbRYHl8e5Tt68.mft (raw, json)
Hash identifier:          xi8FCqmjpFRi1+kI3Xn4C52TBr07J+/rh1ipVXtfC/U=
Subject key identifier:   65:66:DD:53:5B:EB:77:79:F1:31:A0:48:9E:13:08:80:89:7B:69:27
Authority key identifier: 1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF
Certificate issuer:       /CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
Certificate serial:       0195A76AC4E718CF00E568B90239495A93B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
Manifest number:          0968
Signing time:             Tue 18 Mar 2025 04:02:27 +0000
Manifest this update:     Tue 18 Mar 2025 04:02:27 +0000
Manifest next update:     Wed 19 Mar 2025 04:02:27 +0000
Files and hashes:         1: G_mzHCCQb4foYHjbRYHl8e5Tt68.crl (hash: IvZIH/ccsGEJma/j96k8OeHUOZsn2aDPg6x06bbkNJw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a7:6a:c4:e7:18:cf:00:e5:68:b9:02:39:49:5a:93:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
        Validity
            Not Before: Mar 18 04:02:27 2025 GMT
            Not After : Mar 19 04:02:27 2025 GMT
        Subject: CN=6566dd535beb7779f131a0489e130880897b6927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:3d:ab:ef:ac:66:3a:28:c9:e4:aa:da:7a:
                    36:2e:c9:83:f6:2f:9e:79:c7:a3:01:d0:f6:9f:31:
                    f1:e1:12:30:f7:c1:f8:89:ee:24:86:67:1b:b1:9a:
                    e1:e6:82:cd:71:8f:75:5d:93:64:4f:1f:85:00:a7:
                    99:f5:a3:14:a6:70:d8:60:24:e8:5a:82:fd:2a:c5:
                    a3:88:48:e6:76:2d:e3:bb:53:f4:14:a9:a9:58:3d:
                    ec:1c:05:82:20:62:2e:f9:72:b5:93:c2:ff:1a:e4:
                    c6:c6:91:f8:ba:dd:b9:10:95:26:27:69:7f:5b:73:
                    28:3e:5e:cd:cd:5d:05:f7:e8:cc:8a:8b:6b:5e:5c:
                    3b:3d:09:75:04:9e:31:e8:26:81:01:52:b7:54:1f:
                    e2:d5:f2:14:b1:a9:da:d9:37:41:fa:07:44:19:e6:
                    96:de:0a:82:ae:12:06:a0:02:fb:3f:37:73:5b:08:
                    df:8b:21:43:b9:0c:46:e0:f7:c1:38:7a:62:3e:ff:
                    34:1c:22:f1:94:0e:9d:b0:cb:6f:c5:b2:46:cd:e0:
                    bb:12:e8:39:6d:34:c2:b2:b2:19:fa:59:6d:1c:78:
                    c3:7a:48:17:f6:c0:7b:ae:73:2f:52:4d:d2:1c:f2:
                    4a:ff:2e:95:5e:4d:5c:30:67:38:9e:f6:3e:74:32:
                    ce:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:DD:53:5B:EB:77:79:F1:31:A0:48:9E:13:08:80:89:7B:69:27
            X509v3 Authority Key Identifier:
                keyid:1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:08:cf:f1:b6:3b:33:5d:01:bb:ce:bc:f9:65:03:e0:8e:
         b0:67:6e:85:48:9b:29:07:d2:7f:32:8b:a7:46:5f:1f:a3:96:
         02:b5:5a:5b:49:d8:a8:e8:75:95:12:d2:64:82:79:90:52:94:
         83:4f:df:03:eb:b3:28:21:de:00:5a:31:61:a1:cd:5a:81:6d:
         52:5a:08:60:d8:b4:af:c6:9f:70:03:1c:b9:dc:49:45:29:74:
         c5:91:20:ee:fd:38:25:16:1f:fe:5a:15:67:20:bc:d8:59:d3:
         ea:4f:8f:b2:ff:15:15:07:77:06:be:db:ce:86:01:4f:e1:6b:
         2e:45:c8:ad:0b:1c:e1:bd:60:6c:30:01:17:4f:9a:c3:57:e9:
         32:9f:10:be:bd:ba:1c:e2:28:82:7c:93:12:c3:7a:d8:7d:62:
         c0:3c:e5:bc:be:2a:8d:67:87:36:1f:93:60:3d:64:80:f6:71:
         87:92:2b:d3:ff:d8:98:25:35:05:9a:e0:5c:a7:5b:13:88:be:
         b6:1d:33:1c:b5:c4:c0:eb:db:1e:e5:e8:a9:65:89:c1:f8:72:
         df:ae:3b:f6:db:f4:5c:b7:fc:10:6a:87:c7:86:82:ed:6f:02:
         9b:3d:2b:5f:f3:13:3f:09:a2:c5:d1:82:6b:d9:83:6d:93:1d:
         7f:f7:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:50:43 2025 by rpki-client