Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          HAT6WEvTeFDnSMS5CpefHTo4ciTTLgD2gJBmE3TovZo=
Subject key identifier:   07:82:37:43:2C:57:5D:E2:60:9E:4F:4D:22:B2:C0:FC:2C:C6:A0:31
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       0194BCE0613BFB1D20CFEB6AF0D86B124B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          074A
Signing time:             Fri 31 Jan 2025 15:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:08 +0000
Files and hashes:         1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: VHecfXHgdW1/tlDc+91OsAxXvlnxRRw/YYMyG7FVSrU=)
                          2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:61:3b:fb:1d:20:cf:eb:6a:f0:d8:6b:12:4b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Jan 31 15:00:08 2025 GMT
            Not After : Feb  1 15:00:08 2025 GMT
        Subject: CN=078237432c575de2609e4f4d22b2c0fc2cc6a031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:b5:94:d3:8a:9b:4e:5e:64:20:e0:f7:2b:
                    89:df:2c:aa:a0:64:40:b9:f1:4d:f5:4b:dc:27:19:
                    00:57:88:e5:89:93:40:3c:ab:d2:a0:f2:c1:07:b9:
                    a3:6c:ab:ca:ce:e5:6e:46:44:01:b1:3b:f8:6e:5d:
                    0e:06:92:a8:92:ad:9d:d4:d2:c7:cb:17:34:26:0e:
                    57:81:40:45:bf:d5:b9:9d:dc:26:2f:59:6c:45:b4:
                    2a:bb:cc:f1:8d:f6:de:a9:95:6c:2a:ef:15:45:f5:
                    fc:fc:69:46:1e:e7:01:7c:61:01:ed:81:b9:15:cb:
                    a6:88:f7:90:5f:99:4f:a4:d9:87:57:27:20:f4:e6:
                    ca:2c:fd:fc:0f:ef:f4:ab:8a:e8:ed:a1:d1:4c:f2:
                    3e:f8:bc:b6:1d:f3:9a:f0:8f:d0:c8:33:1f:48:4f:
                    6e:73:76:37:c5:db:62:57:14:45:06:78:2c:88:89:
                    ea:54:0f:cf:bc:e9:20:90:cc:e2:fc:e0:3f:4a:e6:
                    4b:86:a2:b2:d5:8d:6d:0c:aa:0d:92:c6:ff:e9:40:
                    8f:4a:1e:f5:bc:44:68:17:2c:24:d2:d6:e1:5d:81:
                    ba:ff:3c:59:77:18:23:b3:c6:b6:a7:4a:ae:89:9c:
                    68:32:89:09:c7:64:67:33:68:fc:16:e0:64:ba:75:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:82:37:43:2C:57:5D:E2:60:9E:4F:4D:22:B2:C0:FC:2C:C6:A0:31
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:5c:96:ce:05:3a:72:e1:7d:96:d2:04:b0:04:51:5b:58:
         77:41:21:7a:8c:90:95:48:70:22:a5:41:92:a8:c5:11:e6:e0:
         9f:3b:f6:63:71:de:cd:11:cf:04:2c:88:69:be:15:f6:d4:83:
         86:19:4d:1a:bd:5b:55:0b:2d:21:ab:07:dc:4c:ab:37:e8:a6:
         af:5f:dc:0c:ec:67:4a:a7:3e:d8:26:a6:9f:cf:11:d0:0b:be:
         69:04:01:d7:c0:5b:e3:ba:4d:fd:b5:94:9f:bc:96:a2:5a:f7:
         38:b6:a6:db:f2:44:76:71:4e:0c:d9:21:f1:8a:28:5a:a9:57:
         7d:29:b2:df:15:b3:33:76:bb:03:17:2f:3b:a3:24:60:98:13:
         34:59:5a:f3:1b:e5:58:0d:37:b2:0e:d3:0c:c0:69:67:d3:ee:
         db:d6:9d:7d:8d:33:aa:d6:2b:6b:8f:79:43:27:4f:ab:bb:b4:
         01:bd:27:b5:03:6f:ac:a2:9b:f4:e4:be:01:c9:9a:e5:6f:ca:
         88:38:4d:dc:ba:fa:18:09:61:3a:54:d7:25:9f:84:a6:67:b5:
         9f:cd:7f:56:bf:ec:91:50:74:cd:a0:30:07:6c:60:e7:7e:5b:
         19:94:c6:89:eb:5f:39:5e:05:f4:3a:34:74:36:cf:cd:8c:a5:
         67:fa:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:14 2025 by rpki-client