Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File:                     yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier:          4ithNwbKzgCDofHH/M4VcDdll/2Yk1MbczULk5S34EY=
Subject key identifier:   39:46:91:87:EC:4A:A6:32:03:50:11:0F:AF:1C:C8:95:C4:92:E2:45
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer:       /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial:       0194BBCE72D9FBBBB13D8704A1102DC32948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number:          1082
Signing time:             Fri 31 Jan 2025 10:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:56 +0000
Files and hashes:         1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: 00xBfwAjfasfl4Q7OYpwxhIP6AsV/SEwU08pXUANBes=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:72:d9:fb:bb:b1:3d:87:04:a1:10:2d:c3:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
        Validity
            Not Before: Jan 31 10:00:56 2025 GMT
            Not After : Feb  1 10:00:56 2025 GMT
        Subject: CN=39469187ec4aa6320350110faf1cc895c492e245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:64:f7:5f:24:13:a9:8c:7c:ab:c4:1c:e6:
                    32:35:0c:40:bf:32:fd:76:c9:fe:d1:48:42:f2:74:
                    58:44:16:9f:88:82:8a:91:88:46:c0:22:c3:b3:ff:
                    1b:04:1b:ff:40:4b:02:d5:a7:a6:02:6a:4a:e5:c0:
                    42:41:7c:eb:86:9b:b9:37:d6:e2:a6:88:5b:13:49:
                    07:27:3f:ee:2e:1a:e0:8a:59:75:a0:11:ae:03:9e:
                    3a:c2:71:51:f0:d9:08:cf:2c:d7:62:e7:b3:e6:95:
                    08:c0:ad:0b:3e:a5:b5:51:66:03:2e:29:c0:a4:c0:
                    40:ee:fb:f4:dc:ed:80:53:bc:ce:67:a5:97:88:a1:
                    1f:db:bc:a1:a4:15:5c:e4:1b:f5:5a:a4:f3:0e:fd:
                    fe:01:d3:e0:f0:80:ab:d3:5c:ca:dd:de:0b:95:c7:
                    54:9f:45:94:45:af:17:d1:5c:f3:27:7a:65:be:1e:
                    78:0c:be:26:3e:dd:43:03:a4:dd:d5:17:f9:5a:4b:
                    e0:0f:6b:27:88:42:d5:6d:be:82:20:c3:72:65:9b:
                    5b:f5:7c:67:02:48:91:f9:a8:54:db:87:d0:1d:c5:
                    25:86:db:f3:c1:33:e0:9d:71:8c:dd:79:40:91:0e:
                    dd:77:d1:cc:e7:3e:4c:f7:34:55:fd:b6:ad:4e:73:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:46:91:87:EC:4A:A6:32:03:50:11:0F:AF:1C:C8:95:C4:92:E2:45
            X509v3 Authority Key Identifier:
                keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:ee:52:a7:ca:11:5a:04:8e:c3:cc:41:dd:d0:5a:ac:9b:
         e8:80:0a:65:98:72:87:a0:bd:09:30:10:7d:91:e1:e5:92:3f:
         cb:a7:97:1c:5f:dc:f6:20:fb:41:62:b9:76:f4:09:34:68:63:
         f7:40:5e:5b:73:d2:fd:e5:73:cf:75:73:34:00:92:bb:cf:f0:
         34:11:53:bf:39:0e:c3:f9:5c:fe:c3:53:15:8f:0a:a8:d7:8e:
         8f:a2:e1:c6:24:80:c3:85:ca:b1:eb:89:00:3e:ab:2f:43:4c:
         d7:f6:30:d7:43:c4:fc:85:f5:73:75:aa:de:b6:11:87:3f:d4:
         51:a5:3d:04:c2:9a:fc:87:fd:89:14:f2:60:02:21:5f:61:43:
         c1:0b:af:f3:63:d6:56:01:59:c3:cd:9b:4a:de:a2:cd:bc:66:
         f6:d9:5a:c1:50:53:f5:50:35:82:bd:68:82:03:4f:e0:68:01:
         0b:93:62:7e:73:f5:d7:d8:54:05:f9:f9:f1:5a:50:3a:6d:c5:
         70:c6:06:fc:2f:37:78:fe:7c:e2:ff:77:f2:0d:43:bd:79:e6:
         98:be:3f:f1:01:b8:fa:c9:55:73:9b:f3:3f:9e:80:99:41:0c:
         9b:41:fc:b6:c9:17:6e:16:12:42:72:0c:49:5a:c5:02:e5:04:
         6d:ad:86:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znLZ+7uxPYcEoRAtwylIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5
ZjhiMTEwHhcNMjUwMTMxMTAwMDU2WhcNMjUwMjAxMTAwMDU2WjAzMTEwLwYDVQQD
EygzOTQ2OTE4N2VjNGFhNjMyMDM1MDExMGZhZjFjYzg5NWM0OTJlMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xdk918kE6mMfKvEHOYyNQxAvzL9
dsn+0UhC8nRYRBafiIKKkYhGwCLDs/8bBBv/QEsC1aemAmpK5cBCQXzrhpu5N9bi
pohbE0kHJz/uLhrgill1oBGuA546wnFR8NkIzyzXYuez5pUIwK0LPqW1UWYDLinA
pMBA7vv03O2AU7zOZ6WXiKEf27yhpBVc5Bv1WqTzDv3+AdPg8ICr01zK3d4LlcdU
n0WURa8X0VzzJ3plvh54DL4mPt1DA6Td1Rf5WkvgD2sniELVbb6CIMNyZZtb9Xxn
AkiR+ahU24fQHcUlhtvzwTPgnXGM3XlAkQ7dd9HM5z5M9zRV/batTnMSfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlGkYfsSqYyA1ARD68cyJXEkuJFMB8GA1UdIwQY
MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt
MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4
LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLLuUqfK
EVoEjsPMQd3QWqyb6IAKZZhyh6C9CTAQfZHh5ZI/y6eXHF/c9iD7QWK5dvQJNGhj
90BeW3PS/eVzz3VzNACSu8/wNBFTvzkOw/lc/sNTFY8KqNeOj6LhxiSAw4XKseuJ
AD6rL0NM1/Yw10PE/IX1c3Wq3rYRhz/UUaU9BMKa/If9iRTyYAIhX2FDwQuv82PW
VgFZw82bSt6izbxm9tlawVBT9VA1gr1oggNP4GgBC5NifnP119hUBfn58VpQOm3F
cMYG/C83eP584v938g1DvXnmmL4/8QG4+slVc5vzP56AmUEMm0H8tskXbhYSQnIM
SVrFAuUEba2GLQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:25 2025 by rpki-client