Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File:                     YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier:          q9CmbvujuTW3lIlI/Ds0PCAldO5k0Zh+iNc4Z1dXcBs=
Subject key identifier:   27:C4:6C:8F:C5:4B:95:92:15:82:72:59:3F:42:D3:3A:0C:F6:31:BA
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer:       /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial:       0194BC04BC44D8078A704FD629D71AF3061B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 11:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:14 +0000
Files and hashes:         1: B254PCc3PRUmXT9tMIpAl8XNBm8.roa (hash: DpvsWvC8Sgiw0PT2yPQOf/12fRPoJTcquOU/HLYaUhc=)
                          2: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: FyI1V6jTl7a4soE3r1wjqFdh7Tch/KgbaVGbPcK26q8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:bc:44:d8:07:8a:70:4f:d6:29:d7:1a:f3:06:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
        Validity
            Not Before: Jan 31 11:00:14 2025 GMT
            Not After : Feb  1 11:00:14 2025 GMT
        Subject: CN=27c46c8fc54b9592158272593f42d33a0cf631ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:80:42:92:23:65:68:2d:ef:6a:c5:ec:90:
                    82:32:60:67:41:50:43:e5:62:a3:41:15:04:75:ca:
                    54:82:0c:80:94:77:88:ee:1e:5d:bc:9c:b0:64:4a:
                    8e:11:89:b7:06:b8:bd:9e:8f:17:a6:a9:c7:bf:07:
                    4d:d6:1f:16:d9:99:ea:70:11:cd:8b:ad:0a:a2:15:
                    34:ca:8c:df:f6:d7:3e:2e:2e:4f:21:6d:74:e6:0d:
                    d3:cd:6b:cb:d9:89:1a:bd:93:2b:d8:1b:b6:9d:5f:
                    fa:58:83:bf:ba:8f:79:24:17:69:0c:15:62:61:b2:
                    c7:9f:38:7f:db:5c:d1:2b:93:f2:5d:31:6a:53:3e:
                    0e:39:72:1e:1b:c5:ab:00:88:05:26:eb:4e:9b:6b:
                    cc:72:77:66:fa:a1:43:dd:b5:42:d3:c9:cb:2a:2f:
                    0b:f4:44:b3:a5:65:8e:e7:39:90:14:9c:b9:4d:72:
                    28:45:c8:67:f0:0e:07:d8:d2:d5:d7:f9:e5:48:10:
                    4b:9e:e8:67:d8:2f:6b:f1:3c:93:cc:97:71:72:e4:
                    ab:86:74:04:31:d4:87:1a:02:ac:11:45:bb:66:c1:
                    68:e0:73:8c:2f:d9:d4:8d:12:fc:ff:00:00:86:c8:
                    51:71:31:41:ba:89:2a:1b:1e:5c:d0:4e:7f:bd:da:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C4:6C:8F:C5:4B:95:92:15:82:72:59:3F:42:D3:3A:0C:F6:31:BA
            X509v3 Authority Key Identifier:
                keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:00:00:05:4d:f1:8e:a7:f1:0a:7c:f3:41:6e:a5:92:6b:
         ad:a9:b3:e6:6d:10:99:f1:aa:23:34:c0:cd:7c:33:ac:6e:37:
         d8:63:48:f0:65:83:2b:c4:d8:a6:9d:02:48:30:71:9b:03:4e:
         1e:73:7c:e6:5c:8f:86:e6:9a:1c:b7:bb:96:8d:03:de:6f:dd:
         fd:23:af:54:64:26:63:d5:4e:2c:03:db:d9:82:0d:63:46:84:
         5c:d1:3f:b8:97:4d:ca:4e:32:4f:c9:be:0a:82:17:8b:72:c1:
         a7:19:fd:2c:19:66:4d:c2:3e:d4:a7:de:c4:91:77:86:5e:14:
         c8:f1:68:cb:6a:e3:3f:b8:7a:9c:4b:99:27:51:11:8f:cd:e6:
         ca:df:b5:80:a5:16:5a:74:d9:79:5c:91:ed:75:0e:18:67:fe:
         1e:f3:77:86:1f:d2:51:21:47:c5:a1:2c:a7:a9:43:09:3b:ab:
         de:f9:39:c8:76:43:79:50:a1:a9:49:83:7b:43:14:12:4f:e8:
         f9:8e:0c:fc:4a:45:95:55:81:b6:47:f4:2a:a4:12:a6:a5:73:
         9e:80:10:90:d0:42:6e:db:21:38:8a:16:f6:a0:ba:49:53:f3:
         70:0a:82:09:37:e3:52:15:04:cc:ef:67:2f:d0:48:ad:31:ae:
         6d:93:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:59 2025 by rpki-client