Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File:                     yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier:          mdhxvIV3Qd/sXaaZbmWiYe4n7jgLHBgI/1DD+AokHMc=
Subject key identifier:   46:2A:D5:72:27:3B:4D:43:AB:C3:A6:3A:42:7B:A4:C8:44:B3:09:3C
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer:       /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial:       0194BCE0F4957E834DAD57E5145F9DEE0D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number:          04EC
Signing time:             Fri 31 Jan 2025 15:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:46 +0000
Files and hashes:         1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
                          2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
                          3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: /9qxdHXF6gG8/zYYdleP00tMDcpO6dHzwiWQuAz6aI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:f4:95:7e:83:4d:ad:57:e5:14:5f:9d:ee:0d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
        Validity
            Not Before: Jan 31 15:00:46 2025 GMT
            Not After : Feb  1 15:00:46 2025 GMT
        Subject: CN=462ad572273b4d43abc3a63a427ba4c844b3093c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:6c:d3:47:fa:f6:02:1e:c4:6a:43:a0:25:
                    c9:ac:f7:2b:66:4b:8e:46:3d:3e:39:26:99:82:35:
                    98:bb:41:06:74:ab:99:85:42:b0:64:0b:f9:b3:4d:
                    f6:89:d6:7f:43:3b:18:b9:41:9c:e6:1a:df:6e:1c:
                    f9:13:5a:97:09:70:bf:3a:e1:de:43:da:24:ee:56:
                    34:43:6a:ce:58:78:ad:f6:dc:6b:5a:1f:66:b9:a6:
                    52:2d:0c:88:86:2b:0e:15:a6:41:c9:28:66:64:04:
                    15:16:68:14:b9:69:b1:71:56:04:61:20:1d:df:dd:
                    c9:2a:41:c8:2c:a5:7f:77:26:0b:1e:79:7f:36:fa:
                    81:64:0d:f1:52:31:4b:69:59:48:c6:17:12:46:aa:
                    29:30:11:b2:20:33:ae:af:64:c4:61:6b:4f:2f:40:
                    70:ac:0e:55:6c:aa:48:8d:fa:d9:3f:e0:ae:ae:c3:
                    3c:a3:36:ae:22:a8:da:8c:03:04:8f:0d:56:9d:81:
                    89:02:ab:53:73:f9:48:11:61:3b:6f:45:32:89:3a:
                    a6:60:7a:f4:6e:30:2a:d1:9d:04:df:13:1b:ec:ba:
                    57:d4:24:78:fb:11:94:49:f2:c4:7c:8d:46:20:7c:
                    bf:9c:85:11:1c:8f:58:57:ca:f1:bb:50:bc:8d:88:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2A:D5:72:27:3B:4D:43:AB:C3:A6:3A:42:7B:A4:C8:44:B3:09:3C
            X509v3 Authority Key Identifier:
                keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:48:b9:cb:83:b9:f8:4e:e5:8a:30:63:e7:89:91:c8:ac:24:
         ab:bd:86:90:aa:51:fa:cc:2f:79:42:2f:62:bf:1b:cb:75:fd:
         34:77:00:f5:09:71:c7:40:5a:a8:9a:4c:50:de:a7:cf:5e:75:
         ad:b8:49:f3:bd:61:86:9b:f2:de:d9:32:f8:90:72:6f:34:e3:
         aa:85:02:52:0b:eb:08:21:19:dd:fc:12:ed:1f:2e:9a:48:7a:
         33:40:0b:03:60:ce:1e:db:c0:3c:62:3c:da:90:0e:57:ce:fd:
         2f:d8:ed:5b:c6:38:a1:4f:cc:f3:50:d8:65:f0:bb:3d:ac:23:
         92:20:30:1c:da:23:50:33:2d:7d:77:6a:0e:69:0c:c1:92:3f:
         85:11:2b:20:2b:c7:8a:00:7c:20:ac:bf:4b:bd:62:4e:89:7c:
         a6:16:61:7d:32:dc:17:1b:57:16:ca:9b:09:31:2b:cc:5e:37:
         e3:da:33:ef:d0:21:84:c2:87:c5:db:fc:e7:ac:04:ae:56:28:
         db:b2:83:d6:f0:31:19:70:64:e3:5a:6e:e8:25:2c:1c:c1:c7:
         8e:be:bf:39:7a:a8:06:2d:8d:fb:b6:9e:09:51:87:c1:4f:bd:
         db:e8:41:f7:fb:15:fa:42:98:23:40:1b:8f:59:04:c1:60:1b:
         99:0c:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:17 2025 by rpki-client