Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          IEDLArfGdE7RsDow0w5g1KoxYK3NiA+qHEDZ4YelBqc=
Subject key identifier:   76:C9:71:3D:D8:BB:7E:7E:A6:A2:3B:E3:A2:9F:94:F6:0F:E4:F6:AB
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       0194BCE0D03BD331CF3FC8A2EED54F2C4426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          03AE
Signing time:             Fri 31 Jan 2025 15:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:37 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: PEtoGiAo5YsvUreRKxoe0VnCCdB2lLzTgTlhBTlUeWk=)
                          2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:d0:3b:d3:31:cf:3f:c8:a2:ee:d5:4f:2c:44:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Jan 31 15:00:37 2025 GMT
            Not After : Feb  1 15:00:37 2025 GMT
        Subject: CN=76c9713dd8bb7e7ea6a23be3a29f94f60fe4f6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:f3:3a:c6:7e:ba:0e:84:69:ce:71:65:2b:
                    f6:5d:3d:6f:fd:60:38:d3:42:35:19:8b:a9:24:e7:
                    98:45:fa:90:9a:fc:c9:f9:9a:e4:61:8e:c2:58:37:
                    57:f3:0b:73:19:eb:09:5f:35:20:0a:d2:30:a9:8b:
                    b1:d5:87:9d:ba:57:37:75:78:8a:91:b8:c8:8a:04:
                    77:0b:44:0e:d3:8b:e2:b0:d7:4d:34:18:10:c0:0d:
                    f1:84:7b:4f:f7:af:c4:52:8a:9e:f8:18:8e:13:2c:
                    91:0d:c3:9f:8e:60:2b:44:df:ac:97:5c:3a:9d:ad:
                    7b:13:c6:6e:c1:3b:70:61:35:25:f8:23:5d:0f:42:
                    01:8b:7b:d1:e5:a7:36:de:fa:07:66:42:c5:ef:19:
                    a2:db:0a:61:13:b1:e7:71:75:73:e4:3f:3f:16:3f:
                    3c:70:ce:d9:04:f7:68:18:0b:56:5b:66:15:e8:3b:
                    cb:0d:3e:db:f3:db:77:31:df:17:1e:e3:40:1f:63:
                    51:10:88:c3:f3:f3:dc:c8:52:76:0e:1f:f6:7f:53:
                    04:3e:58:e1:5f:96:3e:7e:21:35:72:97:a1:f6:ed:
                    ff:6a:7d:dc:11:26:22:8b:00:01:ee:bb:62:4c:94:
                    7e:93:94:a4:03:e1:b0:08:87:4f:87:e3:ca:89:92:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C9:71:3D:D8:BB:7E:7E:A6:A2:3B:E3:A2:9F:94:F6:0F:E4:F6:AB
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:e1:93:ca:59:5b:70:27:6f:f8:b0:2f:b3:a3:20:7e:cd:
         f6:b5:cf:57:bf:9e:0c:ef:ce:56:28:4d:ce:d9:15:e0:5b:1e:
         5e:ef:9e:bd:7e:40:7d:a1:53:23:f3:35:14:4f:75:ca:3e:54:
         72:2c:4e:09:53:b1:ca:5b:34:e6:aa:86:d6:05:f5:db:05:7f:
         86:59:2d:53:ba:e8:4c:4c:be:42:ff:a6:7c:3b:c3:6e:1c:79:
         17:9b:d2:c1:ff:5c:2e:61:d7:4a:a3:82:2d:ce:12:38:81:3a:
         21:d0:ba:b1:5e:af:c3:7e:22:05:bd:1f:4a:99:15:60:a5:86:
         57:63:7d:6b:a9:4f:2e:a6:ff:f1:65:98:4a:e1:72:fa:a9:e1:
         e1:c1:57:f6:9a:bc:9d:fd:ad:fa:81:74:ef:dd:a3:a6:b1:48:
         1c:e6:15:42:08:18:20:e4:b9:b6:f9:f7:37:3d:2d:a6:44:d2:
         40:14:c8:9c:c7:ec:86:38:b8:d7:3c:af:2f:67:a2:cd:54:b2:
         4e:e9:90:69:e4:59:0c:72:63:79:7e:a4:12:06:74:a5:18:60:
         c3:99:c1:91:d3:ea:45:47:1d:1a:cb:69:4d:fc:c0:ff:3d:7d:
         9c:f3:31:85:a4:36:d0:95:33:25:ac:eb:35:e4:cd:e4:08:19:
         42:cd:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:08 2025 by rpki-client