Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/ZrpHR08sBT1rBsGDy9BvEG6JC_k.mft
File:                     ZrpHR08sBT1rBsGDy9BvEG6JC_k.mft (raw, json)
Hash identifier:          yoXQ2SK69h16SyI/sUsKwEzrq7+Zfl35sD9JuYlt5Og=
Subject key identifier:   E0:EB:33:7D:D1:53:30:BC:71:20:E5:8A:2C:F6:63:4D:D1:B8:46:5C
Authority key identifier: 66:BA:47:47:4F:2C:05:3D:6B:06:C1:83:CB:D0:6F:10:6E:89:0B:F9
Certificate issuer:       /CN=66ba47474f2c053d6b06c183cbd06f106e890bf9
Certificate serial:       018D554F428A166641CD57B45B5CFAC41245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrpHR08sBT1rBsGDy9BvEG6JC_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/ZrpHR08sBT1rBsGDy9BvEG6JC_k.mft
Manifest number:          01E7
Signing time:             Mon 29 Jan 2024 13:01:13 +0000
Manifest this update:     Mon 29 Jan 2024 13:01:13 +0000
Manifest next update:     Tue 30 Jan 2024 13:01:13 +0000
Files and hashes:         1: Bi_aMgwUTymFYLZ1dqHN3xb1WIM.roa (hash: OlV4UGhtcjUWyQ60wNWyGVKylSK2gkMgaPlselbjwQc=)
                          2: ZrpHR08sBT1rBsGDy9BvEG6JC_k.crl (hash: +aBrF2MO7+8sGgHD4FxmCImslCw1u0hjNcnYuVUetRM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:55:4f:42:8a:16:66:41:cd:57:b4:5b:5c:fa:c4:12:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba47474f2c053d6b06c183cbd06f106e890bf9
        Validity
            Not Before: Jan 29 13:01:13 2024 GMT
            Not After : Jan 30 13:01:13 2024 GMT
        Subject: CN=e0eb337dd15330bc7120e58a2cf6634dd1b8465c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:6e:76:c1:5d:59:9f:ba:7e:75:e8:44:34:
                    df:75:a2:fb:5a:e8:98:ab:ae:e2:1a:08:3e:45:b5:
                    e6:6b:d9:87:18:a5:23:0f:f1:6e:87:3e:6f:26:aa:
                    93:81:85:a6:9d:9f:7b:fa:3a:5c:e0:ce:a7:1d:b6:
                    66:f8:9c:d8:ac:dc:b3:95:2c:e6:46:25:4e:5a:39:
                    9e:43:48:cc:3c:60:c2:48:a2:d3:19:0e:28:80:b4:
                    c0:6e:71:0c:a2:05:52:64:a7:0e:ab:86:e0:ed:b4:
                    3a:d7:79:70:b1:df:ce:18:11:aa:a6:28:70:84:62:
                    9f:8b:c4:87:67:93:3b:3f:9c:e6:9a:ff:c2:2f:0f:
                    76:54:04:67:c4:97:f0:12:30:c1:38:a5:0f:e0:8c:
                    79:dc:4e:79:7d:14:ea:86:fc:fe:38:e9:ae:5b:e8:
                    14:f3:1d:f1:9f:5c:67:ea:aa:05:e2:7c:97:b9:3a:
                    04:da:1d:43:8d:4e:ea:ff:7a:c0:4a:98:e6:f9:37:
                    b0:e6:41:54:99:21:3d:5e:81:4a:23:e3:d9:c4:57:
                    af:24:7e:69:b1:a3:b3:5b:50:f6:bb:cd:9b:89:27:
                    50:bf:82:02:1a:26:0b:6e:3f:6f:15:ae:e1:77:89:
                    65:25:50:5c:bc:73:54:08:87:25:fd:7f:08:8f:bf:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EB:33:7D:D1:53:30:BC:71:20:E5:8A:2C:F6:63:4D:D1:B8:46:5C
            X509v3 Authority Key Identifier:
                keyid:66:BA:47:47:4F:2C:05:3D:6B:06:C1:83:CB:D0:6F:10:6E:89:0B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrpHR08sBT1rBsGDy9BvEG6JC_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/ZrpHR08sBT1rBsGDy9BvEG6JC_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5de8ae-1705-4317-9ff5-ae9d419ef6ea/1/ZrpHR08sBT1rBsGDy9BvEG6JC_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ff:da:e7:94:e8:66:70:df:45:87:f7:5c:dd:80:b5:b7:fa:
         e5:1f:26:58:26:5c:b0:c8:75:f4:54:eb:8c:38:4f:0b:53:9c:
         f5:f7:2e:27:15:e8:eb:83:75:96:d4:cf:95:5e:43:59:01:d9:
         fa:53:e6:41:24:d5:07:a1:d7:60:6f:6a:79:3e:9a:76:fa:d6:
         7a:03:96:e0:21:60:f8:39:0a:23:84:30:57:96:16:55:fd:1b:
         7d:01:3b:56:ae:7d:94:6d:2c:c4:73:42:91:20:62:9e:91:38:
         fa:96:4f:f4:8d:07:69:65:4c:85:ef:11:5a:84:d4:5b:af:54:
         ad:05:53:67:4f:d0:85:2e:b8:94:c3:49:94:57:5e:27:3a:cf:
         fc:9c:66:86:8e:90:3f:4a:41:50:37:0d:16:58:8f:77:b1:5c:
         05:87:cc:0c:85:7e:f1:ec:71:b9:54:53:93:4c:52:b9:14:ac:
         9e:b5:2e:83:6f:ab:22:e2:4e:94:71:5f:41:d9:87:2b:bd:11:
         1c:bf:37:56:77:2c:f2:d1:98:54:c7:dd:f1:1b:9c:42:2d:b1:
         01:56:a3:1d:4c:a3:7a:c1:71:73:3e:fe:d4:6c:5d:0d:1a:90:
         be:2c:19:a5:f8:ff:37:2a:9c:96:00:5e:a4:da:55:12:ca:56:
         22:2a:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:15:03 2025 by rpki-client