Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft
File:                     ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft (raw, json)
Hash identifier:          RAm8gmLCDlWuBoQXCw5iV3i4rNceJUMAiB0FoW8M9Gs=
Subject key identifier:   34:66:6F:C0:EB:75:D3:68:AB:F2:F0:1F:7A:3D:79:55:1F:39:A4:83
Authority key identifier: 65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
Certificate issuer:       /CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Certificate serial:       019346DEB27C50690CCE746BB11DF93B2AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft
Manifest number:          22
Signing time:             Wed 20 Nov 2024 00:00:19 +0000
Manifest this update:     Wed 20 Nov 2024 00:00:19 +0000
Manifest next update:     Thu 21 Nov 2024 00:00:19 +0000
Files and hashes:         1: ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl (hash: OrCjig8+XSgeRFvGEqReG5+3y6m+4KXx9eQy6T3s61w=)
                          2: mgmhZpvdI8U7ngEGFH7MdL65YfA.roa (hash: iLCEo/VpwFpNUBrDl2NYDwnXoHns667E/YuKFFW+TAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:de:b2:7c:50:69:0c:ce:74:6b:b1:1d:f9:3b:2a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
        Validity
            Not Before: Nov 20 00:00:19 2024 GMT
            Not After : Nov 21 00:00:19 2024 GMT
        Subject: CN=34666fc0eb75d368abf2f01f7a3d79551f39a483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:ae:42:07:9a:c4:e6:40:80:98:c7:ea:e2:
                    04:52:0f:f3:04:b3:7b:e7:ec:88:0b:d2:79:00:1c:
                    3d:da:2d:27:27:9b:63:47:22:5c:fb:31:af:6f:67:
                    38:94:0f:90:62:4f:73:b4:41:4b:df:1b:ec:7b:b5:
                    f9:38:b9:10:36:82:33:43:47:1e:72:31:15:b9:8f:
                    de:49:3d:32:ff:81:bc:24:b7:b4:80:a7:c3:23:67:
                    72:cd:99:07:1d:31:a2:0a:d5:6e:8f:ed:eb:00:50:
                    37:1e:04:30:c4:67:2c:34:f5:e7:54:c2:5b:14:99:
                    f9:27:43:56:8e:69:e2:5a:40:bd:3a:e9:e6:4e:ef:
                    ca:d8:81:73:90:14:10:1b:1a:66:9d:ce:ec:c5:eb:
                    8e:da:76:85:25:54:bc:c3:ee:85:43:68:c6:54:3c:
                    89:f1:03:48:78:0b:c5:d5:40:55:d3:d6:c3:2c:00:
                    ba:8b:1f:31:7c:30:7b:c2:05:85:37:0b:10:2c:14:
                    a2:7c:94:22:a2:94:c0:ec:36:09:a2:ed:a7:75:dc:
                    bb:70:72:03:44:20:f4:d5:9f:55:a5:1c:1c:cb:16:
                    91:63:62:4e:08:5b:3b:8d:48:90:0b:f6:dd:3e:84:
                    1c:b7:5f:85:ff:08:45:6f:84:fb:74:e3:f1:67:43:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:66:6F:C0:EB:75:D3:68:AB:F2:F0:1F:7A:3D:79:55:1F:39:A4:83
            X509v3 Authority Key Identifier:
                keyid:65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:64:9e:2f:35:74:57:ca:d4:ab:09:08:1d:8b:7e:a7:d8:
         0c:77:6d:bc:9e:7e:35:d9:77:26:69:fb:41:f3:fe:90:2e:4a:
         aa:ad:2d:8a:3d:66:af:b4:d7:a1:22:67:40:40:62:83:3b:0e:
         f9:62:85:2c:77:97:21:db:b7:c7:57:ad:62:5d:9a:1f:c4:eb:
         3e:16:9e:40:03:78:99:4b:ca:2f:6c:37:cb:d8:7f:bb:99:a8:
         1f:48:c0:15:d6:51:38:08:f5:f5:94:69:63:86:69:7f:93:a6:
         5b:29:ca:3d:62:a7:15:7c:eb:2a:3a:77:b3:c1:eb:9d:5f:7a:
         9d:45:66:dd:37:5f:3f:68:6d:e2:bf:a4:5e:a3:9b:50:2a:ff:
         4c:05:b2:aa:05:ef:fd:15:6c:c4:e1:9b:a1:29:74:c6:1a:b7:
         5f:31:33:0a:09:15:21:03:60:63:70:5e:e9:44:c7:ac:e4:22:
         19:83:36:03:4b:d6:31:1e:93:8e:c0:3c:8c:0a:c5:3b:e0:01:
         f9:7d:2a:06:28:87:21:88:c2:49:d0:43:2b:53:78:71:06:e3:
         a2:70:7e:24:85:9c:64:8a:ff:95:19:aa:05:60:fd:72:61:5a:
         06:29:13:fc:ef:ee:a2:be:cb:59:89:f1:b6:86:21:cc:a3:1a:
         12:06:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:20:01 2024 by rpki-client on console.sobornost.net