Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
File:                     PbZurh7_N8XOflhyiwFuSR2sJqo.mft (raw, json)
Hash identifier:          bze8ny3VN2kE2oIdBIX0KOV6pUpXMDJe680CyWUdC2Q=
Subject key identifier:   E3:8E:96:82:18:8E:21:A7:C5:8E:76:74:78:69:BC:BF:3E:EA:76:58
Authority key identifier: 3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA
Certificate issuer:       /CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
Certificate serial:       01965B02EF529594A935E61A36ECCD1A9F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
Manifest number:          0944
Signing time:             Tue 22 Apr 2025 01:00:41 +0000
Manifest this update:     Tue 22 Apr 2025 01:00:41 +0000
Manifest next update:     Wed 23 Apr 2025 01:00:41 +0000
Files and hashes:         1: PbZurh7_N8XOflhyiwFuSR2sJqo.crl (hash: +1+2IzNKdp2kflrIEDdSRtVpp/Med/3VqxIFPZDgY9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:02:ef:52:95:94:a9:35:e6:1a:36:ec:cd:1a:9f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
        Validity
            Not Before: Apr 22 01:00:41 2025 GMT
            Not After : Apr 23 01:00:41 2025 GMT
        Subject: CN=e38e9682188e21a7c58e76747869bcbf3eea7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:48:18:cb:c6:0a:08:4b:b5:f2:75:cc:d8:
                    ae:d6:ae:f8:a0:c4:7e:23:af:9b:3d:fd:8d:40:dd:
                    55:61:d5:f2:8f:4a:66:d0:bb:07:5e:ed:af:d9:36:
                    f9:1c:b7:31:b3:09:5e:6a:e8:bc:50:fe:ce:db:c5:
                    5f:7e:20:17:d5:64:7c:fd:eb:97:38:e3:c1:c0:ef:
                    c2:a9:48:c2:18:93:07:1b:54:82:9c:df:7e:16:dd:
                    48:be:0f:46:50:91:05:e2:2d:ef:d2:55:45:fd:27:
                    33:53:ed:0f:08:0b:73:bf:1f:a1:45:e4:bd:02:ab:
                    a0:f8:4b:2a:02:08:ab:73:c6:7b:0d:e8:e8:06:05:
                    2e:32:94:f2:d2:69:54:45:8a:32:fb:43:f2:b7:32:
                    7c:b7:9d:11:87:f3:63:65:96:ba:23:6e:dc:12:8b:
                    09:18:1f:4a:ff:d8:9e:be:ed:ef:75:55:32:d8:50:
                    b4:3c:96:6b:a9:da:08:06:ea:2f:32:89:46:67:97:
                    57:bc:f2:19:ed:db:3c:22:14:51:c0:27:8d:18:04:
                    e5:26:04:6d:d7:6f:04:d3:dc:31:b3:41:84:c8:c3:
                    ee:91:e3:b5:84:de:a8:92:fd:4d:70:92:d7:8f:48:
                    b4:b4:c8:ba:03:68:78:74:84:15:dd:46:8d:39:43:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8E:96:82:18:8E:21:A7:C5:8E:76:74:78:69:BC:BF:3E:EA:76:58
            X509v3 Authority Key Identifier:
                keyid:3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:80:2d:b8:4c:58:68:c0:1d:33:3a:2e:20:8f:4e:eb:32:18:
         c4:62:1e:ca:68:43:63:b4:ca:99:b9:3a:59:bd:61:bf:3c:54:
         89:29:9f:dc:3e:22:ad:c9:55:99:04:30:85:3e:c7:39:db:28:
         59:f4:0f:fd:4a:1d:90:0b:3e:21:3e:27:f4:2c:60:62:42:28:
         90:dd:90:d9:d0:fb:74:44:a8:66:8f:97:04:e5:99:a6:94:39:
         c2:23:f7:03:51:71:e0:37:eb:f5:b5:a5:2b:c4:af:72:8b:64:
         c0:7f:3a:a4:f9:23:e7:d7:e2:8f:8d:fd:ab:11:65:9b:50:c1:
         98:4c:3f:91:85:56:a9:28:3b:ee:21:40:91:2f:16:58:d3:6e:
         b7:4c:ec:52:ab:1c:b4:fe:a3:5d:ae:a2:bb:0e:6d:dc:44:13:
         ea:d1:c6:91:c4:27:f7:35:eb:47:7c:68:0d:6f:c4:09:67:11:
         67:6e:13:25:85:6e:8b:bd:00:95:93:1e:94:da:a4:fa:40:3b:
         52:0b:7a:a4:e4:f1:a0:5e:1f:fa:de:92:b8:b9:62:27:1c:82:
         f1:28:de:57:62:37:94:a2:63:c7:f5:61:a9:a2:92:2e:38:ae:
         02:46:5e:90:59:8e:ce:0e:46:59:9e:b7:be:0e:a3:8c:16:04:
         ca:fe:65:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAu9SlZSpNeYaNuzNGp9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjY2ZWFlMWVmZjM3YzVjZTdlNTg3MjhiMDE2ZTQ5MWRh
YzI2YWEwHhcNMjUwNDIyMDEwMDQxWhcNMjUwNDIzMDEwMDQxWjAzMTEwLwYDVQQD
EyhlMzhlOTY4MjE4OGUyMWE3YzU4ZTc2NzQ3ODY5YmNiZjNlZWE3NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza1IGMvGCghLtfJ1zNiu1q74oMR+
I6+bPf2NQN1VYdXyj0pm0LsHXu2v2Tb5HLcxswleaui8UP7O28VffiAX1WR8/euX
OOPBwO/CqUjCGJMHG1SCnN9+Ft1Ivg9GUJEF4i3v0lVF/SczU+0PCAtzvx+hReS9
Aqug+EsqAgirc8Z7DejoBgUuMpTy0mlURYoy+0PytzJ8t50Rh/NjZZa6I27cEosJ
GB9K/9ievu3vdVUy2FC0PJZrqdoIBuovMolGZ5dXvPIZ7ds8IhRRwCeNGATlJgRt
128E09wxs0GEyMPukeO1hN6okv1NcJLXj0i0tMi6A2h4dIQV3UaNOUMUrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOOloIYjiGnxY52dHhpvL8+6nZYMB8GA1UdIwQY
MBaAFD22bq4e/zfFzn5YcosBbkkdrCaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85YzUwZTUtYjFkMC00Yzc4LThkZTYt
ZTcxNmM5OGNhNWY3LzEvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85YzUwZTUtYjFkMC00Yzc4LThkZTYtZTcxNmM5OGNhNWY3
LzEvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYAtuExY
aMAdMzouII9O6zIYxGIeymhDY7TKmbk6Wb1hvzxUiSmf3D4irclVmQQwhT7HOdso
WfQP/UodkAs+IT4n9CxgYkIokN2Q2dD7dESoZo+XBOWZppQ5wiP3A1Fx4Dfr9bWl
K8SvcotkwH86pPkj59fij439qxFlm1DBmEw/kYVWqSg77iFAkS8WWNNut0zsUqsc
tP6jXa6iuw5t3EQT6tHGkcQn9zXrR3xoDW/ECWcRZ24TJYVui70AlZMelNqk+kA7
Ugt6pOTxoF4f+t6SuLliJxyC8SjeV2I3lKJjx/VhqaKSLjiuAkZekFmOzg5GWZ63
vg6jjBYEyv5lfw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:07 2025 by rpki-client