Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File:                     YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier:          CGOIwJNy3ZZ0NOsoV89+H9Un0hhasG7m55PniZxdaSU=
Subject key identifier:   D6:8C:53:91:92:CA:54:DF:9A:B4:DB:3B:89:FC:A3:1A:86:E7:91:5A
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer:       /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial:       0194BCA9D070D9A2C10672928F65D839D427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 14:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:32 +0000
Files and hashes:         1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
                          2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: H2MEi26k2XizI+caAbAE2SgebnhGa0ANGVW8b8T+C3Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d0:70:d9:a2:c1:06:72:92:8f:65:d8:39:d4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
        Validity
            Not Before: Jan 31 14:00:32 2025 GMT
            Not After : Feb  1 14:00:32 2025 GMT
        Subject: CN=d68c539192ca54df9ab4db3b89fca31a86e7915a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:88:3f:9a:8e:b1:3a:87:a8:4b:60:ee:b9:
                    f6:af:67:f0:3d:2c:af:2c:d7:6c:98:ce:24:46:07:
                    1c:5a:f2:d4:d5:1d:fc:5a:84:01:0f:b8:19:cd:af:
                    b5:cb:60:da:01:02:8a:ee:1d:0d:7b:d4:8d:a8:0a:
                    cf:c6:c0:45:4e:ca:d1:46:1f:b5:52:59:5e:97:ae:
                    21:46:6a:ab:e8:33:22:08:db:a5:c9:2f:19:3a:7a:
                    96:be:42:bb:0a:0d:67:4a:d5:c8:06:dc:87:97:15:
                    c1:6f:1e:80:a6:9d:e1:4d:50:9a:22:c5:4d:13:b6:
                    d3:16:79:9d:da:0e:d8:7b:97:0c:59:54:d8:3b:ac:
                    a4:6e:ef:a8:5a:53:ce:f9:5c:79:08:5a:d6:6b:13:
                    fd:ae:71:a4:c1:5f:54:71:f9:1b:67:fc:47:e0:6e:
                    45:41:60:5e:2c:80:41:eb:9c:b8:a3:76:9e:f0:4f:
                    56:4c:c6:bd:fe:29:30:16:56:8e:77:45:2d:90:a8:
                    32:7b:8a:d7:bd:fa:22:02:21:e5:3c:d1:c2:3e:b2:
                    95:ad:ec:36:89:08:e2:f8:46:4b:2b:63:85:63:6d:
                    3a:6f:0f:7f:1a:9b:48:1d:a4:4c:4b:45:02:0f:cc:
                    0d:43:5f:1d:89:c7:76:d6:f4:10:ad:aa:af:3b:c5:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8C:53:91:92:CA:54:DF:9A:B4:DB:3B:89:FC:A3:1A:86:E7:91:5A
            X509v3 Authority Key Identifier:
                keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:03:38:0b:6a:98:f4:59:64:6c:12:c4:e8:c3:9e:1d:12:
         0c:90:b7:b9:3b:eb:5a:76:6e:72:28:e4:08:8e:42:ac:23:9e:
         6d:a2:64:43:00:db:f5:8b:5f:6e:2d:5d:f5:1e:9b:66:47:76:
         83:50:cc:53:22:41:37:3b:34:9f:13:5e:84:68:98:cb:00:8a:
         59:7a:e3:8b:ef:8b:22:09:a5:8a:65:67:0a:41:33:dd:94:bb:
         a7:98:92:97:23:4a:17:52:60:e7:7c:49:67:35:aa:dc:97:3e:
         14:dc:e4:1e:b4:8c:56:3f:6a:6d:4c:2a:13:ac:96:38:78:27:
         40:a9:6f:dd:ea:fc:0b:6f:0a:fe:c8:37:97:5d:f0:37:d0:66:
         ac:0e:42:98:dc:60:54:4a:39:d5:9d:fa:fa:08:ad:4b:6e:80:
         07:6a:29:15:da:69:29:bf:f4:b3:36:c9:2b:39:9f:ec:3b:17:
         49:f5:4e:67:40:46:fc:8e:95:e2:45:d3:af:8d:09:2d:25:e6:
         e7:7e:dd:d8:41:7b:f3:02:36:b0:2c:b9:69:0e:ff:24:7a:cd:
         7f:f4:27:d4:19:62:8f:25:57:7e:09:90:19:c4:b2:22:13:42:
         ef:08:aa:07:a5:a7:b4:de:21:3d:c8:a9:d9:e4:56:bd:0b:5f:
         8e:2f:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:56 2025 by rpki-client