Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
File:                     YcGgEMsk-ZbneJixJHJbVbY0OOA.mft (raw, json)
Hash identifier:          7sSEvPZGVTBILHlAQWARyrOwG1DwJeIC4Ny4jICya1E=
Subject key identifier:   F5:EE:ED:23:C6:13:4A:8F:B9:53:40:42:05:44:F8:26:0C:71:02:B9
Authority key identifier: 61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
Certificate issuer:       /CN=61c1a010cb24f996e77898b124725b55b63438e0
Certificate serial:       0194BBCE022A144639C30B4F4C24C75A4AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:27 +0000
Files and hashes:         1: YcGgEMsk-ZbneJixJHJbVbY0OOA.crl (hash: BZLpChGcBaDdbprDL3Gbjmw4RsjEM5vyASBSoTT4TMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:02:2a:14:46:39:c3:0b:4f:4c:24:c7:5a:4a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c1a010cb24f996e77898b124725b55b63438e0
        Validity
            Not Before: Jan 31 10:00:27 2025 GMT
            Not After : Feb  1 10:00:27 2025 GMT
        Subject: CN=f5eeed23c6134a8fb95340420544f8260c7102b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:ed:6a:fe:bd:4b:48:88:2c:86:f9:3c:68:
                    aa:f3:fa:97:70:04:35:15:9a:cf:76:6f:23:f9:c4:
                    95:09:91:ef:4d:d6:79:ad:07:fd:6b:69:71:bd:15:
                    7a:41:34:93:0a:d1:c7:11:9b:32:e5:ae:27:db:96:
                    b6:ba:2c:3c:5b:41:c5:15:97:31:76:bb:aa:b5:c0:
                    0a:ab:c3:b8:c8:c7:1f:c8:c4:1c:6b:cb:90:3d:86:
                    fd:f2:15:33:eb:35:eb:12:42:33:a6:61:36:d6:e6:
                    4c:fc:a7:5e:a4:34:b9:e5:77:39:4b:c1:c4:bd:3d:
                    5d:11:4c:80:b1:32:a5:71:b6:57:b4:ea:24:17:0d:
                    c9:34:40:51:78:37:25:4f:25:29:c3:91:97:9a:65:
                    26:d5:c7:0d:46:ba:5c:b9:72:a5:dc:6c:ca:7a:16:
                    42:9b:77:d7:92:43:1e:45:e2:4e:64:33:5c:9a:69:
                    aa:95:8d:c1:73:66:37:50:4f:b5:d7:46:b3:4c:15:
                    f2:57:6c:8f:eb:b4:20:67:f7:39:73:00:a1:b8:4b:
                    15:25:48:d2:e2:97:39:58:a6:8f:ca:f4:67:31:10:
                    8e:df:32:a1:2a:5f:70:3a:65:69:91:83:d3:7b:a4:
                    ce:b6:f4:2f:94:82:13:13:1c:5d:41:62:e8:bc:0f:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EE:ED:23:C6:13:4A:8F:B9:53:40:42:05:44:F8:26:0C:71:02:B9
            X509v3 Authority Key Identifier:
                keyid:61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:68:44:90:27:0d:82:7f:71:2a:f2:33:73:b2:d2:c9:69:
         76:26:6f:f7:cc:3e:10:bd:14:20:3e:d5:20:94:ce:d2:bf:00:
         da:f8:7c:ba:e5:96:43:f7:69:6f:7e:47:2d:d4:1c:95:d6:e3:
         87:22:fe:a7:eb:91:3a:3b:aa:54:4a:a3:da:1b:49:da:36:ac:
         1e:b9:69:99:dc:ea:f8:89:9f:39:56:44:62:eb:73:fc:b9:15:
         95:0b:1f:8d:13:0f:e5:b8:13:08:78:cb:50:af:59:b3:46:54:
         50:4e:cc:4e:60:f9:cc:f9:de:df:89:94:aa:75:7a:50:77:16:
         30:8b:82:70:e5:10:06:73:e2:ad:9f:b7:53:cd:9e:ed:b6:31:
         76:3d:7a:4d:1f:a7:7f:23:a0:33:e6:39:fc:0f:9a:9f:f6:a9:
         1a:40:d1:84:e5:c1:1d:21:99:b7:3c:d8:9d:bb:8c:04:6f:6a:
         d3:b4:d3:42:fc:ed:60:fe:dd:a1:17:db:18:ff:93:ad:fc:b3:
         c9:23:92:d4:c3:9e:05:e0:39:2a:73:60:3b:06:d0:1f:45:fc:
         b3:09:60:31:b2:af:1c:ad:74:56:4a:0f:82:02:fb:a8:c4:a0:
         d6:64:58:e6:c4:0b:64:14:66:40:4f:84:82:5d:d5:9a:ee:34:
         ed:8a:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:14 2025 by rpki-client