Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File:                     yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier:          sjCLUHeq7naDDjpLOlFwjsalyTSFwvWg+EODAmyH7QQ=
Subject key identifier:   B4:D7:81:99:71:8A:7E:A6:1D:10:3A:92:51:D5:FB:C9:D9:D9:1F:20
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer:       /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial:       0194BCA9A56E43903C2E0D1CF0F8A247EC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number:          0646
Signing time:             Fri 31 Jan 2025 14:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:21 +0000
Files and hashes:         1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=)
                          2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: pd3cAycNVKN6QygHP2Ifemng3sZixCYSnGcvyleiaRE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:a5:6e:43:90:3c:2e:0d:1c:f0:f8:a2:47:ec:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
        Validity
            Not Before: Jan 31 14:00:21 2025 GMT
            Not After : Feb  1 14:00:21 2025 GMT
        Subject: CN=b4d78199718a7ea61d103a9251d5fbc9d9d91f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:ed:6d:c5:94:33:f5:e7:ea:77:49:7e:73:
                    66:21:b3:f9:f2:12:60:14:ba:8d:50:b9:cb:81:a7:
                    d2:7a:d4:9c:eb:52:55:04:11:a1:93:fb:35:48:be:
                    29:0d:28:27:d8:1b:40:04:5a:03:05:b5:a2:68:4f:
                    3d:35:cb:4f:8e:63:fa:7b:5e:25:b0:12:29:ef:e2:
                    6e:a0:c6:22:01:b2:a1:a3:9c:95:84:01:e6:db:6a:
                    d8:22:ce:d9:31:ad:dc:8b:81:df:8a:6d:0a:b4:8e:
                    a2:c8:04:cc:43:35:e3:8a:e4:fa:e7:87:2f:70:f3:
                    c3:5a:82:68:fc:0c:18:4c:a6:76:ed:d2:5f:97:a9:
                    dc:a8:bc:1f:33:a0:f6:7a:a3:12:31:c7:05:4d:31:
                    cb:ae:dd:3c:99:be:58:f4:58:c3:19:df:fb:f8:de:
                    75:76:fe:5e:6e:2e:a2:35:6e:79:e0:cd:c3:17:ca:
                    64:3e:58:f8:8d:a4:1b:90:68:72:af:c8:77:b5:90:
                    4a:3d:be:45:d4:c0:bf:19:38:37:62:a0:36:11:bb:
                    78:15:10:0c:09:60:14:64:a9:42:8d:e9:5f:ad:5a:
                    a2:5a:28:8c:c9:e7:ca:78:0f:5b:b9:3e:e8:ba:48:
                    4c:97:2a:6b:b7:7a:f4:64:5d:f8:63:3c:31:5a:ec:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D7:81:99:71:8A:7E:A6:1D:10:3A:92:51:D5:FB:C9:D9:D9:1F:20
            X509v3 Authority Key Identifier:
                keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d0:61:cc:6b:59:a3:9e:3f:0d:96:f9:53:96:14:d9:7d:22:
         dc:54:c0:d4:e5:8a:d1:c4:0f:23:32:cc:88:5b:86:d6:4f:f7:
         c9:02:8e:aa:13:74:1f:a4:22:c9:cb:3b:14:1f:f5:96:8f:c7:
         6c:2c:ae:e7:c0:08:58:22:44:65:1b:8d:8d:51:a2:cb:f7:97:
         05:08:eb:23:bb:e1:ec:99:ca:15:46:4d:08:5e:c1:be:67:3f:
         43:47:35:a6:23:b1:ef:17:f3:3e:71:29:8f:4b:a6:36:2a:7a:
         be:3b:e4:ce:9b:fc:50:6d:a6:e6:e3:b6:38:15:79:96:4b:03:
         b4:e0:15:f9:34:3d:88:1c:09:d4:e9:73:41:6d:12:e8:6e:de:
         04:01:52:be:84:d0:a5:b0:1f:ff:36:e1:5a:48:dd:00:27:f8:
         ec:39:20:bc:72:26:2b:5f:9e:e0:1b:0a:a2:42:53:a9:88:db:
         c4:b8:6d:8f:92:d3:a6:5d:ec:e5:bd:b1:e0:95:36:21:8d:7f:
         14:82:14:3f:a2:b6:7d:8a:0b:f9:24:4e:8f:f6:d9:33:fa:97:
         ac:11:94:5e:28:1f:fa:96:48:63:8b:68:a5:4a:50:6b:5b:85:
         f6:11:7a:da:a7:b2:d1:5c:c1:b6:69:ed:98:99:56:55:d1:c7:
         e7:0d:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:31 2025 by rpki-client