Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          1dCOJAkKGdB/SuKLRPAgdv/p6EcJDuzdm2Po93KPpPE=
Subject key identifier:   B5:14:A0:D8:79:51:5E:AC:EB:AB:F3:1E:BF:AA:42:5D:5E:BE:7B:D5
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       0194BD17884E2AAD50CD3B9B2D53169F003B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          1469
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: Ere2qliMwsAC5KlCxwkcYGwt5bg.roa (hash: uxdOngJ08K0JSktJRzPCcc2dPJBM0mtYJ7R3h3Dejrk=)
                          2: TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa (hash: xdJre5WYs0QeN/1xP/iEZblWiapiREglW6GQPHWgPiI=)
                          3: Xq12P6tXeEeUMBB6kcjmgXhEej0.roa (hash: jxewTMw/oZOuWYDAJOe88VwsOlwuyR4p20QDx4vY/Ek=)
                          4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: ry/yqSj19pTFxWxHVPhyNtgjkb0RJa6TPHDjaHBqeHY=)
                          5: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
                          6: kNG8doC8aOlVcpdzC4H8wIke8-4.roa (hash: RhzxZTrYI5RS5OoyTDGpnX6oHuBHa87akNaFgCcYhjo=)
                          7: qaon0_VUrQ1CtM8ujS3h5z-HyYE.roa (hash: QjdBf8u7Dl0e5x76/XhPz/FbSF5qqjpq22dycf6FL9w=)
                          8: zya-nVnvYDRCe-NCa3yWVbEp98k.roa (hash: YAuOnGIJzSzoCT2LI34mrWSk3/Q4ZvQVKTNwjixKRhs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:88:4e:2a:ad:50:cd:3b:9b:2d:53:16:9f:00:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=b514a0d879515eacebabf31ebfaa425d5ebe7bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:24:f5:7f:6c:9d:8e:78:ec:47:5f:d2:f0:
                    b3:63:74:dd:42:f1:4d:62:dc:7d:7e:a2:b4:ca:74:
                    9a:51:ca:79:c9:3d:88:90:45:a5:f2:80:95:8e:e0:
                    02:9c:b1:4a:fd:b3:c2:e0:34:9e:b8:b4:07:15:72:
                    3c:86:e8:b4:98:db:36:12:39:56:87:aa:7d:e4:90:
                    33:fd:ec:08:59:ed:f5:0b:1c:ad:e8:e2:de:f8:f1:
                    c9:4c:8d:a2:5f:15:37:f3:7c:86:42:bc:d0:e4:c7:
                    ce:a7:97:31:8d:da:97:e6:2c:af:96:ad:1d:01:ab:
                    bc:a1:8b:54:1f:2a:9e:a4:62:35:c9:bd:5f:8b:c4:
                    45:7c:5a:44:b7:2c:fc:f7:8c:be:dd:95:e1:cb:83:
                    d4:db:1f:4b:d4:fc:7c:88:74:95:b3:df:aa:a1:96:
                    fe:c9:74:0e:b4:95:fc:de:f3:62:d3:36:ac:82:5e:
                    94:e6:40:55:17:67:e8:bf:b6:f0:ff:72:58:b7:a7:
                    4f:6c:77:9c:04:76:c7:d4:2b:07:3c:77:2e:fa:92:
                    67:e5:9e:16:f5:92:ac:1e:c2:b0:9c:a2:59:ed:72:
                    54:c1:ff:df:11:05:c1:50:e2:05:d5:eb:85:34:00:
                    85:07:9d:86:64:f4:67:08:15:0b:d1:88:9e:dc:e9:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:14:A0:D8:79:51:5E:AC:EB:AB:F3:1E:BF:AA:42:5D:5E:BE:7B:D5
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e1:ea:9b:6f:05:4a:43:31:be:8a:06:92:d7:bb:1a:b8:a3:
         27:3c:7a:95:5c:57:91:70:da:3a:19:d1:37:96:c1:d1:71:9f:
         a2:6c:e4:29:e3:87:57:6c:80:61:64:7c:e9:31:35:34:16:9e:
         40:f6:e2:98:ca:dd:91:78:dc:a7:95:b4:3b:45:e6:1a:2e:d3:
         0c:4a:16:de:35:c8:0f:0d:08:cc:05:ce:7e:1d:e5:98:df:2b:
         5c:35:db:17:33:74:51:1d:6e:7f:93:a6:b2:ed:a6:af:88:13:
         d7:fa:a1:e8:20:55:8a:27:b4:71:84:7d:1a:74:9e:75:da:75:
         e0:8d:59:22:fc:ec:dc:61:58:4d:85:19:ab:de:75:e1:17:4a:
         c1:dd:68:a6:32:d2:df:f7:5a:57:1d:f3:20:5a:cd:46:2c:4e:
         ab:d8:93:f8:98:56:13:22:9e:a4:12:2c:05:bb:b9:b5:49:24:
         fd:55:ea:a2:63:b3:94:20:0c:ba:37:50:88:f8:09:cf:1f:3a:
         37:ae:22:f3:94:3b:37:b8:06:70:3c:07:0b:91:8f:f4:8d:ad:
         1a:74:91:61:5d:8d:88:67:00:ee:0c:d3:ed:2d:8c:f4:a4:9b:
         b9:1b:99:aa:38:29:71:7b:de:a5:7a:24:37:bc:db:3b:7e:5b:
         d1:ad:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:54 2025 by rpki-client