Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.mft
File:                     ZDR0ZbySXI51bd-qYJ7aAsxS0DE.mft (raw, json)
Hash identifier:          2WcJQP6GdzGznpHOjgGYmo/FJFZMWBgKj1HAOF4QHNo=
Subject key identifier:   55:E1:5B:AD:63:CB:76:87:7A:71:34:42:A6:25:75:CB:A3:09:B4:29
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Certificate issuer:       /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial:       018F70F8C4023B6FB26F7B20F9CCBCFB3750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.mft
Manifest number:          1176
Signing time:             Mon 13 May 2024 08:01:42 +0000
Manifest this update:     Mon 13 May 2024 08:01:42 +0000
Manifest next update:     Tue 14 May 2024 08:01:42 +0000
Files and hashes:         1: 8dBpzydREJ1oZE53NssBk-gVBS0.roa (hash: k9xLfQtMw41BuiwtGd1AdNQy+Z6g+sTI8hIyAld5n6E=)
                          2: NBJtD0mrjZrVy0usLIMHY0UxB94.roa (hash: E13vOjwu89PVhdY9mF+lpHRTFrryLdZebGrY7iYp04c=)
                          3: YxYRh0JYFG2DD0yTMBmp-pEIAWY.roa (hash: vxltZ+UonXGDM5MFpgb5Oq895mlJjbY/W5n8H9MQM6k=)
                          4: ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl (hash: HIkuHME3bN8yQ/rMPM6vIA5dXUjz7ywkq3vWGzXUcE4=)
                          5: _V0WwGdkmx-f9f1Ol8B0JrhjO8Y.roa (hash: IX9X13Y8MaL00MfxNmETMP4NAK/3gwsR1CGU9U1MnqM=)
                          6: qePkdGNsrKV8QSuuR8fXxdfOHrs.roa (hash: ije6cSUp1aJ1UWzqw81HukRV91IRMPu/1UXgVYMY2R8=)
                          7: rONVMfoc5GbAp36XvlGxVHmeMOQ.roa (hash: aUGcSGOY8z4H3UxpbXFz+nt7OnLCrSIc9V6KcQY2OSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:f8:c4:02:3b:6f:b2:6f:7b:20:f9:cc:bc:fb:37:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
        Validity
            Not Before: May 13 08:01:42 2024 GMT
            Not After : May 14 08:01:42 2024 GMT
        Subject: CN=55e15bad63cb76877a713442a62575cba309b429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:d0:fc:22:2c:ba:58:7b:1e:d7:19:20:82:
                    a2:c5:68:9c:58:41:b3:63:35:00:87:40:9b:84:b5:
                    a2:2a:48:58:34:06:1c:8a:c6:69:01:0a:bf:cc:31:
                    77:2d:dd:68:bc:ed:9d:74:c2:4f:fd:e9:cb:71:39:
                    44:0e:04:c2:a9:04:69:af:1f:10:47:3c:94:3e:21:
                    8c:ac:85:f5:a9:45:63:1a:d9:57:95:8b:37:83:a7:
                    2f:94:eb:ee:f3:03:15:4b:e5:e7:98:ba:db:f6:d4:
                    b2:38:f0:2f:e6:a5:93:99:27:b4:68:5a:83:36:31:
                    7e:1e:57:01:44:0b:a5:24:29:a8:74:70:41:ba:21:
                    58:a2:e7:f7:46:e7:74:66:a3:53:51:37:8a:30:92:
                    b7:7f:24:eb:3e:d3:c1:69:b3:02:47:b1:51:e4:ce:
                    71:43:58:cd:6c:cd:51:94:24:00:be:d6:64:5d:52:
                    5b:a1:53:65:c5:bb:92:34:0f:c0:58:6b:b3:fc:e6:
                    a1:9d:ec:e4:f2:9a:4a:f8:bb:a2:57:d3:b8:b0:1f:
                    d8:a2:6d:64:f6:dd:27:28:2c:2c:0f:3c:97:8f:e7:
                    03:0d:12:64:9e:bc:e1:a1:85:ea:be:54:50:09:04:
                    da:15:07:58:09:4d:66:dc:d8:2f:34:06:16:74:26:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E1:5B:AD:63:CB:76:87:7A:71:34:42:A6:25:75:CB:A3:09:B4:29
            X509v3 Authority Key Identifier:
                keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:d1:1d:a3:76:6c:df:52:95:06:05:0b:5c:1c:c1:a0:87:a1:
         89:e4:87:04:5b:21:bd:23:05:d2:12:a0:3a:6b:7b:ab:84:72:
         d5:c4:7a:fe:eb:c7:7c:ba:cd:ad:5c:1c:81:42:fc:64:e3:c8:
         37:3b:aa:86:20:ea:83:dc:b7:ef:ec:37:42:35:30:0f:5e:2b:
         d8:06:00:ab:96:98:e6:12:9d:6a:d5:b7:b4:a8:fe:22:71:99:
         28:c3:b9:44:7e:7b:2e:ab:b5:da:20:ab:bf:38:2b:d2:09:43:
         a9:4b:22:c7:bc:d6:3d:f5:0a:54:23:53:52:f2:2f:94:fa:ae:
         70:d4:dc:8d:61:d7:75:0a:2e:db:34:e5:b4:11:db:4d:32:73:
         01:21:b4:3d:3e:f7:fc:e8:64:fb:87:cb:13:5c:8c:03:8f:77:
         29:9e:e6:fd:68:f1:9d:a6:3b:63:02:9a:50:f9:fb:3e:4c:1f:
         a6:c9:aa:fa:d3:0e:0a:74:95:82:c1:59:50:d1:a4:76:bd:c9:
         99:b7:2a:40:14:39:56:4c:49:d6:98:56:01:f2:74:d5:e6:20:
         77:6b:7d:fe:ef:fb:86:8b:ac:a6:e5:e4:35:5d:1d:34:1c:c9:
         f8:f4:07:19:93:93:69:6a:19:71:cf:19:b4:95:c6:c2:dc:98:
         1f:f0:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:13:57 2025 by rpki-client