Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File:                     Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier:          YqXK0V9Ru18yHOCMKbxe1xWGEqDqCKciaRb3AteZI8k=
Subject key identifier:   93:62:4B:AE:12:69:78:27:F7:F0:10:40:98:F4:B3:22:B9:D1:B4:B7
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer:       /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial:       0194BCA9EE7F41A123356F823E6FBDC208EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 14:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:40 +0000
Files and hashes:         1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: P7lKmWZVT+U0A4b54I3WNIOMTtMcKroFIBxClME+aBA=)
                          2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ee:7f:41:a1:23:35:6f:82:3e:6f:bd:c2:08:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
        Validity
            Not Before: Jan 31 14:00:40 2025 GMT
            Not After : Feb  1 14:00:40 2025 GMT
        Subject: CN=93624bae12697827f7f0104098f4b322b9d1b4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:92:8a:3a:8c:ed:a8:0e:59:18:1a:5e:7e:
                    c3:d8:99:2f:59:30:07:95:eb:02:32:fe:3b:16:a4:
                    52:bb:64:f1:74:92:ef:5e:3e:42:5c:ad:5c:7c:80:
                    53:d4:15:3a:4f:e5:18:7d:c1:a6:6e:73:df:6b:cf:
                    51:a6:7f:05:3b:3c:ea:2e:0a:c5:51:37:0c:0e:3d:
                    af:98:c9:ee:b1:8c:8a:5d:2b:23:de:d7:31:85:4e:
                    21:ff:83:c8:37:ab:3a:02:9b:31:cb:27:6a:36:0a:
                    80:78:b3:57:90:51:7f:d4:9c:29:44:c3:0b:03:7a:
                    9e:72:e7:0c:93:4e:b7:31:03:98:86:d0:00:ee:17:
                    99:74:99:b4:3d:e0:e7:3d:d0:26:a2:aa:fb:e1:4d:
                    ec:25:59:86:cd:12:9b:cb:e6:10:b6:72:3d:45:b2:
                    0a:64:48:99:fb:e5:d0:aa:ec:bd:e7:8c:a1:32:14:
                    f1:55:24:8e:c2:b1:d2:cf:fc:4c:44:04:95:40:da:
                    30:8d:5a:23:9e:c7:95:a6:e6:2c:e3:a3:ae:2d:22:
                    bb:b0:88:9c:1b:a0:f6:24:53:d1:0a:e2:76:2b:34:
                    c6:6d:f0:2d:87:b2:8d:0b:fd:76:de:1b:af:b9:f0:
                    ba:22:c5:1c:83:b4:de:d1:ef:3c:87:1e:49:8f:33:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:62:4B:AE:12:69:78:27:F7:F0:10:40:98:F4:B3:22:B9:D1:B4:B7
            X509v3 Authority Key Identifier:
                keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:66:75:8c:95:43:6e:12:46:4b:73:20:3d:d6:08:ec:78:f2:
         4b:b0:4c:4e:8c:3d:9f:fd:c0:ea:b3:e7:08:43:6f:b1:58:e5:
         cf:b3:5b:a9:bc:81:18:61:47:50:3e:27:9c:7a:64:96:50:9c:
         2a:a8:8f:91:06:c0:09:a8:ec:e0:71:1e:74:11:4f:f7:4a:47:
         01:8b:e4:56:0d:f8:4b:fa:32:8d:3b:87:e8:97:03:d7:c2:2b:
         d6:c0:9f:17:da:de:4d:43:d5:b7:cf:31:7b:f0:9f:72:c8:66:
         8f:6f:db:93:6e:c6:ef:22:2e:e6:ce:ba:3b:ab:13:63:d5:09:
         c7:8f:2a:f9:7d:b2:25:50:7c:fa:9a:f7:d8:e7:e3:9f:fd:b4:
         17:f5:75:c9:26:0b:4f:83:ed:ca:14:a6:0e:85:ec:10:a1:15:
         e8:b9:3c:51:1e:12:ff:22:73:72:07:11:26:33:23:fa:a7:8e:
         77:64:f0:cf:42:61:ef:9e:63:db:4b:9b:c3:19:d2:88:a9:b1:
         58:b3:ab:dd:a1:a7:6f:67:50:a7:5a:0f:11:b7:34:d9:7c:23:
         c9:c3:6f:48:c8:60:22:45:fd:9e:57:2d:a6:d8:25:f0:95:01:
         4e:21:0c:17:41:b4:50:65:92:b7:d8:63:9b:94:9a:97:93:2d:
         b1:fd:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:20 2025 by rpki-client