Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File:                     13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier:          AKrTvA7sdh7e4WhHaZRnUyjhzBr8DPUCbbd7vBoXEBI=
Subject key identifier:   EB:1C:EE:F2:55:44:45:EF:6E:27:C3:5D:A7:66:67:92:95:93:DD:25
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer:       /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial:       0194BD854F8CA97376F5347552A37CD401F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number:          1211
Signing time:             Fri 31 Jan 2025 18:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:17 +0000
Files and hashes:         1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: 8d0Fbwj3xqZyu3J/dmRvxzeYVbagLfN/sQb8xVQ80BI=)
                          2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:4f:8c:a9:73:76:f5:34:75:52:a3:7c:d4:01:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
        Validity
            Not Before: Jan 31 18:00:17 2025 GMT
            Not After : Feb  1 18:00:17 2025 GMT
        Subject: CN=eb1ceef2554445ef6e27c35da76667929593dd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:2f:41:a4:84:59:7f:e2:e4:8e:69:83:c4:
                    35:91:e3:9d:81:e9:bd:07:13:9d:4d:b4:6e:1f:48:
                    28:1b:7c:1b:e3:18:b5:e5:13:4e:77:a9:ce:ca:35:
                    97:b5:e9:1d:bf:a0:cd:ad:10:56:42:28:4b:ae:a9:
                    52:47:26:91:2c:b2:e9:16:51:6a:df:c7:16:01:2a:
                    81:f1:57:9b:fb:4e:e0:aa:36:59:e3:0c:a0:fd:e2:
                    2f:28:96:0e:2a:f7:06:a2:0e:56:08:56:bf:dd:e4:
                    78:86:d0:a2:d1:81:da:e3:e7:af:12:6b:8a:c6:f5:
                    fb:7a:92:21:cd:9a:0a:82:cc:dd:6c:f0:d8:e1:2b:
                    8b:c9:0a:69:71:95:2e:e4:c4:1e:db:17:86:27:36:
                    c4:38:e2:ea:22:be:88:f7:c2:73:4b:cb:51:bf:e6:
                    f0:bd:5b:60:56:cc:85:d6:e3:89:80:8b:ab:30:5e:
                    a5:47:48:52:a3:9e:8c:c3:8a:4f:b3:28:25:92:ec:
                    28:86:bd:21:4a:53:d6:f8:30:06:6e:6b:97:fd:6e:
                    6b:76:0a:5a:8d:f8:b7:3c:d2:24:6f:42:1e:6f:e9:
                    ac:a5:50:8d:60:2f:c7:f0:6e:50:82:dc:ac:8b:8a:
                    23:48:18:d0:be:cf:27:f9:eb:f7:93:6e:b8:c9:a5:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:EE:F2:55:44:45:EF:6E:27:C3:5D:A7:66:67:92:95:93:DD:25
            X509v3 Authority Key Identifier:
                keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:ff:13:4a:43:f8:9e:52:a3:fe:01:52:47:79:10:9a:f9:
         48:d0:3a:f2:06:20:8a:1b:75:a2:88:db:71:63:0b:f3:80:8e:
         7b:fc:25:f7:c4:af:90:d6:57:78:e9:57:82:de:39:81:82:7d:
         02:6f:9c:33:ae:88:2d:f2:0b:1e:be:07:01:b0:ec:53:a2:58:
         25:90:45:d4:ce:bf:5b:25:57:4b:d4:21:7f:ba:aa:81:2d:fb:
         b6:42:71:dc:d1:29:20:ed:aa:fe:84:0c:9b:9e:95:4c:46:c1:
         dd:ce:8a:23:ab:a6:9f:b1:2a:7f:53:51:29:a5:3d:07:a9:0a:
         fd:bd:32:5b:8f:1f:b4:d8:65:c8:52:ba:1e:44:1f:08:d9:79:
         2d:7d:81:ce:78:7b:ae:39:12:73:2e:ba:70:a4:2f:1b:9d:a8:
         cc:ac:2b:6b:03:d6:bd:1d:4e:21:2d:94:e4:5b:c6:20:79:f9:
         47:6c:ae:e9:7d:7c:c0:f4:4b:6c:00:1a:b3:04:1c:40:4d:4a:
         a2:15:09:a8:18:23:a8:11:30:b9:93:3f:fd:a1:1d:bf:6b:d2:
         32:68:e8:fb:9f:60:c3:0c:64:f6:fa:0a:61:ab:e4:d2:19:8a:
         64:7b:35:71:07:bb:b8:df:fc:59:09:72:c5:41:b6:6f:73:57:
         9a:f0:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:44 2025 by rpki-client