Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File:                     NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier:          KHHiXD8A1zDztKJU9cAxUTDLqLbsdyUdkE7AqcaB0WI=
Subject key identifier:   E7:25:59:9D:5D:59:95:07:A9:CC:CD:42:5D:5E:4A:EB:D6:F6:BB:D7
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer:       /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial:       0194BBCE9D13B44D751002275DB7978B147E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 10:01:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:07 +0000
Files and hashes:         1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
                          2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: ViE1uS6Z6qFdD4MqI6oM699klRw2K2tt5u4BunTS70s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9d:13:b4:4d:75:10:02:27:5d:b7:97:8b:14:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
        Validity
            Not Before: Jan 31 10:01:07 2025 GMT
            Not After : Feb  1 10:01:07 2025 GMT
        Subject: CN=e725599d5d599507a9cccd425d5e4aebd6f6bbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:f8:2f:9d:ef:94:c7:1c:23:f2:ad:1c:69:
                    8c:82:bc:d7:e4:e1:bd:da:9d:fb:3a:9c:ea:7a:b0:
                    89:a1:15:fa:e6:e6:b3:96:c3:a4:1e:71:49:b4:de:
                    91:e8:8e:d5:82:1d:bd:7a:af:c2:e2:a9:a0:f2:e0:
                    17:43:1c:49:f0:a6:5e:fe:b0:39:d8:63:ee:2d:d4:
                    af:28:17:4f:aa:73:df:16:b0:f7:27:c2:6c:e7:f8:
                    e6:88:01:f1:4c:d8:f2:f9:0f:04:d3:ea:72:a0:27:
                    b4:21:4b:9a:dd:dd:17:9c:86:74:91:0f:c9:70:24:
                    18:79:f5:69:fb:4e:d8:6c:63:30:df:94:63:8e:6f:
                    33:d9:b6:11:cd:86:cc:64:db:69:0e:fe:6b:9b:b3:
                    9c:7c:5e:11:d5:cb:ee:e1:1b:75:27:ac:35:5c:5a:
                    ae:0f:50:7a:25:86:77:fa:4b:5a:c0:b3:3a:a8:72:
                    16:4d:24:58:df:b8:ee:0c:73:28:41:51:bc:c8:d6:
                    4f:6a:b3:fa:22:03:b1:6d:c1:5a:00:2c:21:71:3b:
                    53:cd:f6:db:71:83:4c:c5:ab:05:9e:7d:06:bc:25:
                    e9:9b:8a:f1:7c:5a:4c:63:46:49:10:ce:6a:ea:93:
                    cd:24:26:92:8a:ff:47:30:fd:af:e3:e5:03:64:15:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:25:59:9D:5D:59:95:07:A9:CC:CD:42:5D:5E:4A:EB:D6:F6:BB:D7
            X509v3 Authority Key Identifier:
                keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:d5:a4:54:2b:5f:f6:6a:e8:e8:53:d4:41:88:2a:e6:dd:
         f4:63:56:84:14:8c:46:aa:81:0b:95:65:da:f4:36:3a:ba:df:
         fe:77:e7:d5:f1:2e:48:ae:1f:3d:28:33:cc:05:11:e5:e6:71:
         41:92:38:ec:b5:5e:3f:2a:bc:fa:39:db:eb:fb:0a:63:d6:a6:
         3c:24:a3:c8:34:48:f1:f4:0b:c1:09:1f:95:61:11:81:ef:23:
         f4:0b:cd:f9:1b:40:fd:ac:0d:f3:0c:0f:70:3a:42:ce:c9:aa:
         bc:3b:25:0a:09:4e:bf:2c:d1:77:72:34:4f:7e:e8:1e:eb:ba:
         9a:19:f4:08:b3:64:d7:d3:eb:86:b5:38:94:a8:f5:a1:91:fa:
         96:4d:9a:fb:d4:54:6c:c7:44:24:02:d0:62:82:0f:9f:ed:07:
         12:33:b7:38:7e:19:57:e5:e2:df:9e:89:2c:ca:5a:11:54:3b:
         41:ca:5b:09:31:00:20:89:8a:f1:1d:22:02:c2:8e:c9:15:98:
         b2:75:7f:f1:2a:ac:7b:88:36:40:76:3f:b7:c5:7d:e1:25:29:
         d8:6a:8d:c2:f8:9c:e6:94:64:7c:61:ba:44:49:5c:b9:a9:c9:
         6e:67:b6:8b:3e:70:79:0f:bf:8d:af:82:9f:cc:67:2a:f6:bb:
         8d:26:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:48 2025 by rpki-client