Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft
File:                     y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft (raw, json)
Hash identifier:          89VBM1xtMgpI4mVU2HK8RRJbrwuUmgJNB3iqiBDqCO8=
Subject key identifier:   D8:6B:51:A5:06:5F:C7:BE:B0:3F:A2:CF:58:9F:5B:18:DA:8A:16:12
Authority key identifier: CB:C2:EB:DA:3A:B0:85:10:EB:E9:A1:0E:60:BE:23:16:02:28:A9:42
Certificate issuer:       /CN=cbc2ebda3ab08510ebe9a10e60be23160228a942
Certificate serial:       0194BBCE4E43A8B1DD275F67DD4D50EF970E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:47 +0000
Files and hashes:         1: y8Lr2jqwhRDr6aEOYL4jFgIoqUI.crl (hash: dLNxdH/6XHfuOqsK7XNKDhfTt5ET+9LJdooLj9Ek2gI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:4e:43:a8:b1:dd:27:5f:67:dd:4d:50:ef:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc2ebda3ab08510ebe9a10e60be23160228a942
        Validity
            Not Before: Jan 31 10:00:47 2025 GMT
            Not After : Feb  1 10:00:47 2025 GMT
        Subject: CN=d86b51a5065fc7beb03fa2cf589f5b18da8a1612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:f2:ea:13:c3:b8:99:21:4b:8a:87:63:f7:
                    32:58:f9:3d:1f:dc:2e:24:dc:e3:65:ae:38:2e:40:
                    22:9a:5f:c3:1f:a2:f7:1f:5a:e1:7a:42:21:40:1c:
                    06:7a:90:be:41:1c:4e:2e:08:08:cd:5e:0f:9f:4a:
                    7d:b1:8b:47:25:9b:f4:6c:aa:f1:c9:5a:3c:38:67:
                    b9:3e:c1:89:b0:92:72:66:0b:7a:94:03:2b:5f:97:
                    d2:fb:28:97:85:f9:02:0d:e7:93:95:ea:e3:81:2a:
                    84:0b:fc:92:d2:56:29:9f:6b:7b:d7:2a:ac:b7:ac:
                    40:49:78:04:6d:ed:4e:9b:b8:f7:78:cf:4d:d9:58:
                    f5:1d:e4:f7:a9:83:eb:8a:12:0f:3c:19:a5:bb:bb:
                    2a:b3:ec:ab:10:da:2b:4e:28:70:d7:34:74:ba:18:
                    51:14:96:c0:58:51:d9:cf:20:3e:1c:6e:20:85:8e:
                    c7:24:ce:28:a7:4b:46:03:c2:1c:4a:ea:5e:6d:a9:
                    02:0c:91:61:97:4c:ce:ed:b7:6b:d3:35:fc:92:fa:
                    4a:90:a4:2e:bf:1d:11:c8:f5:f8:5d:31:a1:b3:ea:
                    41:d5:b7:fe:06:91:ea:e2:56:0e:ce:e2:36:89:18:
                    ea:8b:b5:41:05:45:a7:d5:94:c9:d3:bd:a8:2b:35:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6B:51:A5:06:5F:C7:BE:B0:3F:A2:CF:58:9F:5B:18:DA:8A:16:12
            X509v3 Authority Key Identifier:
                keyid:CB:C2:EB:DA:3A:B0:85:10:EB:E9:A1:0E:60:BE:23:16:02:28:A9:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:79:a7:84:31:48:f5:91:ac:e5:ec:34:01:a8:08:db:1a:46:
         1b:70:e6:86:26:80:40:ae:81:dc:49:0f:44:51:98:5d:62:85:
         16:9b:f9:5c:ac:02:6a:57:89:42:05:60:7a:9b:5d:2b:ca:7e:
         02:85:1b:81:32:7a:31:92:41:34:cd:e7:46:b4:9c:12:b2:5b:
         8e:a7:f5:e2:df:b6:9c:f5:5c:d3:8e:9a:a3:38:a6:94:e4:f9:
         7f:ae:b3:3e:ab:74:f9:43:49:8b:60:c1:09:98:d3:01:65:c5:
         07:45:77:2f:73:dc:a3:bd:7e:d1:4c:fc:8f:d9:71:0f:06:98:
         f9:be:41:b7:df:5b:ce:fe:81:65:8a:b1:c3:e6:89:8c:61:76:
         b0:d7:4b:f3:65:f2:c9:73:64:89:aa:62:97:50:b0:5b:99:c9:
         da:d9:79:08:bf:2d:94:b9:04:49:c5:f7:04:83:d2:1f:9a:b8:
         28:84:75:e5:7f:02:a5:59:a6:09:76:9c:88:bb:cd:3f:b8:d4:
         8e:c8:4a:72:6b:cf:14:b8:15:ef:0c:05:49:99:6c:ca:e8:60:
         83:0a:de:09:db:5b:9a:37:da:bf:b5:4e:35:3e:24:4d:34:1e:
         5f:eb:e3:cf:f6:ac:0c:22:8c:46:33:45:ce:dd:a4:e3:32:44:
         f2:59:7d:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk5DqLHdJ19n3U1Q75cOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYzJlYmRhM2FiMDg1MTBlYmU5YTEwZTYwYmUyMzE2MDIy
OGE5NDIwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
EyhkODZiNTFhNTA2NWZjN2JlYjAzZmEyY2Y1ODlmNWIxOGRhOGExNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vzy6hPDuJkhS4qHY/cyWPk9H9wu
JNzjZa44LkAiml/DH6L3H1rhekIhQBwGepC+QRxOLggIzV4Pn0p9sYtHJZv0bKrx
yVo8OGe5PsGJsJJyZgt6lAMrX5fS+yiXhfkCDeeTlerjgSqEC/yS0lYpn2t71yqs
t6xASXgEbe1Om7j3eM9N2Vj1HeT3qYPrihIPPBmlu7sqs+yrENorTihw1zR0uhhR
FJbAWFHZzyA+HG4ghY7HJM4op0tGA8IcSupebakCDJFhl0zO7bdr0zX8kvpKkKQu
vx0RyPX4XTGhs+pB1bf+BpHq4lYOzuI2iRjqi7VBBUWn1ZTJ072oKzWqJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhrUaUGX8e+sD+iz1ifWxjaihYSMB8GA1UdIwQY
MBaAFMvC69o6sIUQ6+mhDmC+IxYCKKlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveThMcjJqcXdoUkRyNmFFT1lMNGpGZ0lvcVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84MTRkZDAtMDllMS00MjczLTg3M2Et
NzQ2MzgxNWEzZjRlLzEveThMcjJqcXdoUkRyNmFFT1lMNGpGZ0lvcVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84MTRkZDAtMDllMS00MjczLTg3M2EtNzQ2MzgxNWEzZjRl
LzEveThMcjJqcXdoUkRyNmFFT1lMNGpGZ0lvcVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnmnhDFI
9ZGs5ew0AagI2xpGG3DmhiaAQK6B3EkPRFGYXWKFFpv5XKwCaleJQgVgeptdK8p+
AoUbgTJ6MZJBNM3nRrScErJbjqf14t+2nPVc046aozimlOT5f66zPqt0+UNJi2DB
CZjTAWXFB0V3L3Pco71+0Uz8j9lxDwaY+b5Bt99bzv6BZYqxw+aJjGF2sNdL82Xy
yXNkiapil1CwW5nJ2tl5CL8tlLkEScX3BIPSH5q4KIR15X8CpVmmCXaciLvNP7jU
jshKcmvPFLgV7wwFSZlsyuhggwreCdtbmjfav7VONT4kTTQeX+vjz/asDCKMRjNF
zt2k4zJE8ll9TA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:50:05 2025 by rpki-client