Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File:                     Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier:          1pIvWtYGQ3h4aM6zz1oK70XaJWjah6Or9RGhSezPBk0=
Subject key identifier:   D5:77:16:93:C5:FC:33:49:55:8B:3B:1A:05:BB:2B:39:64:2E:0F:95
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer:       /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial:       0194BD4E69FC07A15A582AF2BCF58064239D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number:          56
Signing time:             Fri 31 Jan 2025 17:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:20 +0000
Files and hashes:         1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: ZXVOS0XVXjIc2ZAxhF2RIFDlVxbTUqSgeguwm0sF2LA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:69:fc:07:a1:5a:58:2a:f2:bc:f5:80:64:23:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
        Validity
            Not Before: Jan 31 17:00:20 2025 GMT
            Not After : Feb  1 17:00:20 2025 GMT
        Subject: CN=d5771693c5fc3349558b3b1a05bb2b39642e0f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:d8:c0:68:f3:d7:6d:2c:f1:e5:13:fa:f1:
                    f0:7e:b5:3b:55:ee:9f:5f:24:4b:71:58:ec:cc:bb:
                    26:0f:49:2a:5d:d8:8d:89:a1:70:99:fb:e7:8b:6a:
                    4e:dd:a6:07:b0:ee:fe:77:7f:83:5d:a7:67:4b:5e:
                    76:8e:88:e7:51:02:a4:b8:c4:11:bd:0f:11:57:e8:
                    1d:5a:3f:39:f2:b6:a5:7e:8f:58:c6:d1:f8:22:44:
                    c5:d1:df:1c:e3:bd:3b:eb:91:7d:15:2b:63:d5:90:
                    97:68:42:0a:26:d8:94:ec:2a:9d:02:c4:15:ad:52:
                    9c:4f:16:1d:de:e2:8c:e1:eb:24:bf:4e:2f:3a:30:
                    64:68:12:e3:01:1a:b7:82:f0:de:2a:a3:ed:32:e9:
                    08:1e:d7:7e:4a:fb:ca:db:aa:b8:b7:81:f7:17:b0:
                    a4:58:af:55:e0:a7:a5:5d:41:21:a8:9f:8c:e4:db:
                    20:62:ad:fe:58:c5:eb:0b:9f:fe:6c:bb:8d:41:04:
                    da:31:2f:fd:8f:3e:63:57:d2:82:50:6a:5a:13:b4:
                    97:89:71:3a:f0:88:52:91:3c:c1:bc:c1:93:e9:75:
                    a9:aa:06:af:0c:07:ff:2a:06:8e:26:b9:07:21:ee:
                    c2:e0:3e:69:e7:b7:0e:ac:51:08:68:1c:f0:da:fe:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:16:93:C5:FC:33:49:55:8B:3B:1A:05:BB:2B:39:64:2E:0F:95
            X509v3 Authority Key Identifier:
                keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:76:55:e8:4a:3b:f0:6f:49:87:9b:33:7b:39:2c:aa:7a:29:
         d5:b4:75:b3:91:aa:cd:1c:de:74:40:50:ff:cd:88:c6:28:61:
         e7:dc:8f:ba:1d:3b:37:7b:ce:da:c1:62:73:6b:aa:f1:36:38:
         01:96:ac:61:9c:67:a2:66:09:89:60:9a:6b:53:51:e4:d1:fe:
         87:93:67:e8:27:f8:18:5d:ee:d1:69:9b:9b:40:31:67:44:07:
         b5:c7:a6:cd:ab:0a:5e:7a:ea:22:42:9f:8b:cc:1a:75:60:89:
         0a:12:40:d3:ba:38:3a:94:2d:ee:d4:f3:43:e9:7c:b8:b9:d3:
         0a:37:07:e4:3e:07:d4:76:f5:cd:47:ed:65:e3:be:ce:58:83:
         d7:ca:b5:4e:c3:02:b9:34:65:4d:76:cd:e3:69:39:0a:82:e1:
         ac:e2:58:fb:9e:15:8c:86:73:44:5c:12:8e:34:61:4e:53:2a:
         b5:1b:53:3c:0d:a3:f9:3f:75:ff:3a:fe:ae:b6:5c:9f:b1:43:
         eb:59:47:21:b6:ee:ca:ec:d8:4d:db:d8:e7:13:0c:1c:b4:88:
         94:d1:85:a2:d2:97:1c:43:e2:78:c6:2c:67:3c:02:a9:02:2f:
         b6:47:28:92:25:e9:da:80:7e:e4:42:cb:70:f8:f3:bb:4a:05:
         34:12:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client