Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.mft
File:                     Ztp-hWdrlum6aVNGDvUoCZUih-I.mft (raw, json)
Hash identifier:          Za5kym5aGcozSpljMbzuCQ1I8jTUu27BzWV0PfOl4aA=
Subject key identifier:   3A:6C:04:C0:74:5E:1C:E4:29:B3:A6:A7:2A:E3:39:29:74:6B:03:69
Authority key identifier: 66:DA:7E:85:67:6B:96:E9:BA:69:53:46:0E:F5:28:09:95:22:87:E2
Certificate issuer:       /CN=66da7e85676b96e9ba6953460ef52809952287e2
Certificate serial:       018EEADC6BFC588115A299432F6C949E7903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ztp-hWdrlum6aVNGDvUoCZUih-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.mft
Manifest number:          08B5
Signing time:             Wed 17 Apr 2024 07:01:37 +0000
Manifest this update:     Wed 17 Apr 2024 07:01:37 +0000
Manifest next update:     Thu 18 Apr 2024 07:01:37 +0000
Files and hashes:         1: Ztp-hWdrlum6aVNGDvUoCZUih-I.crl (hash: KToHTmyFnjd2FkGUbTmpdUj9KA1S8SaAqVR1minHS0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ea:dc:6b:fc:58:81:15:a2:99:43:2f:6c:94:9e:79:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da7e85676b96e9ba6953460ef52809952287e2
        Validity
            Not Before: Apr 17 07:01:37 2024 GMT
            Not After : Apr 18 07:01:37 2024 GMT
        Subject: CN=3a6c04c0745e1ce429b3a6a72ae33929746b0369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:25:59:ac:c2:a6:77:5e:87:54:e1:b4:8c:
                    b2:ee:83:a9:c3:37:f1:29:77:7f:b4:63:05:b8:28:
                    f3:3e:ee:50:d6:e2:4c:92:e9:74:f9:6b:cb:b1:af:
                    60:29:0f:28:66:50:fa:bb:6a:f4:09:6b:5a:b2:3e:
                    34:95:7e:6a:31:b7:99:c7:84:fc:17:37:2e:1e:c8:
                    6c:c3:a9:94:80:68:45:be:07:30:7f:60:f6:41:c0:
                    e5:c8:5d:4c:60:bf:cf:a6:24:0f:91:43:81:ec:c3:
                    ac:da:7e:86:40:be:a9:59:c2:6b:7d:6f:9a:0b:08:
                    8e:5d:7f:d4:86:1f:2c:9e:37:e5:b9:ed:41:e0:c4:
                    1f:91:5a:17:fa:f8:6d:fb:70:7c:2b:f9:af:09:41:
                    45:07:11:b7:ab:8b:a4:75:35:64:a4:e1:1f:32:b2:
                    fe:7c:69:60:f4:3c:19:05:25:2e:cb:3d:f8:a3:fe:
                    c3:30:d1:65:dc:22:df:ed:43:3e:1f:cf:e2:7a:a3:
                    9a:25:c0:25:7a:b3:be:9c:ee:45:81:21:9d:d7:12:
                    f7:bd:f4:31:5a:3f:ef:23:96:21:65:ed:b1:1e:f5:
                    6a:66:2c:6f:43:9e:9b:9f:5b:93:15:db:2c:00:18:
                    07:36:76:21:f9:2c:18:1c:bf:3a:76:98:43:74:75:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6C:04:C0:74:5E:1C:E4:29:B3:A6:A7:2A:E3:39:29:74:6B:03:69
            X509v3 Authority Key Identifier:
                keyid:66:DA:7E:85:67:6B:96:E9:BA:69:53:46:0E:F5:28:09:95:22:87:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztp-hWdrlum6aVNGDvUoCZUih-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:ec:58:01:ac:19:ba:16:9b:40:1c:3d:2f:9b:48:71:b9:
         e3:6e:1a:9c:44:e2:58:3b:b1:80:b5:21:3c:91:84:bf:6d:fa:
         22:cf:16:60:7e:f5:f1:15:7e:1d:16:b6:1d:36:b9:39:0e:5f:
         de:8c:b3:fe:9e:13:c1:73:d1:1c:01:d6:94:12:5d:6b:76:71:
         35:3c:5f:a0:49:a8:25:41:54:61:9f:c9:b6:04:66:e9:c6:10:
         30:e6:bc:0c:29:8a:b2:95:c4:1e:60:36:b5:89:1a:e1:45:a3:
         a8:68:ae:a8:32:c8:86:dc:ed:ea:94:93:97:7a:21:04:d5:eb:
         b6:c9:b3:a4:ae:4d:8a:83:6d:e7:5a:f9:f7:a0:45:a3:7f:f9:
         46:79:9c:2b:d1:f3:65:66:ae:b5:d0:0c:7c:18:da:ce:de:2f:
         ee:82:0e:c4:30:8f:62:51:ed:39:cc:1e:6e:4d:b0:5c:64:80:
         2b:e6:56:aa:88:ac:e5:40:bd:d6:ec:41:12:82:33:d3:35:ad:
         1a:1a:db:d7:28:b2:3e:09:94:71:0c:18:c3:82:a6:89:f1:8b:
         7b:7e:57:35:a4:7f:87:33:a7:48:12:41:22:5c:43:7d:f5:72:
         31:94:64:d3:5a:61:2b:cb:b5:84:7c:93:c9:e8:e7:db:47:30:
         b5:89:21:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:09:43 2024 by rpki-client on console.sobornost.net