Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File:                     Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier:          L0NViheSwEqK3X/citsMNO0JYag3OqDxa5slxYO2ubE=
Subject key identifier:   D8:3F:BA:CF:EE:80:31:6C:4A:BC:FA:5D:0A:83:D3:DB:3B:BC:8E:E7
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer:       /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial:       0194BC04E14148BF104E7B70F5F61FA72065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 11:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:23 +0000
Files and hashes:         1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
                          2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
                          3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: KvM+aEndxkVPLxVmroetbkW39o0SifSVz/kQ4fNkgQw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e1:41:48:bf:10:4e:7b:70:f5:f6:1f:a7:20:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
        Validity
            Not Before: Jan 31 11:00:23 2025 GMT
            Not After : Feb  1 11:00:23 2025 GMT
        Subject: CN=d83fbacfee80316c4abcfa5d0a83d3db3bbc8ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:0b:29:a8:f4:1c:d2:1a:4a:e6:76:16:1f:
                    70:12:b3:ca:6f:29:4d:83:35:73:d0:c0:23:ad:13:
                    b6:37:2c:9e:12:ab:47:c8:04:b9:3c:eb:37:fb:b3:
                    af:58:b3:29:b2:5c:87:e6:1b:6e:3c:6d:e0:84:bc:
                    39:ec:c0:be:bc:33:a0:3e:f9:a8:8c:1f:41:f7:fc:
                    79:1a:e7:f0:83:52:1b:89:01:da:22:b2:d3:e2:74:
                    74:a9:d5:e5:13:bb:bf:fa:b6:a6:f8:4c:9b:90:b6:
                    e6:0a:08:b7:8f:65:d0:43:42:8b:4b:43:69:88:19:
                    e5:71:d1:b3:b6:25:7e:fe:4a:34:17:fd:c2:00:d4:
                    06:c6:96:b2:11:60:df:d6:fa:89:c1:1a:da:f4:c2:
                    02:5b:36:7e:a8:49:c6:6d:69:f9:c3:f7:24:a4:85:
                    7b:4d:89:b9:22:45:9f:79:0f:f8:65:cd:ee:e6:47:
                    02:24:31:17:ce:db:80:4d:03:db:05:fb:16:e7:26:
                    9e:41:b6:ed:db:1f:b4:da:dd:1b:98:1c:f1:a1:54:
                    8b:fc:d2:a1:90:ac:03:e4:ad:8b:b6:95:0a:e4:db:
                    f4:36:fe:5f:75:d1:e6:9b:1f:4c:69:5e:c0:17:42:
                    3b:c0:89:bc:b9:11:d3:e9:4a:a4:e1:56:29:7a:93:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3F:BA:CF:EE:80:31:6C:4A:BC:FA:5D:0A:83:D3:DB:3B:BC:8E:E7
            X509v3 Authority Key Identifier:
                keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:dc:d2:ea:d2:7b:f4:c3:d0:a5:11:04:c7:30:8e:39:e6:14:
         37:3e:e5:a9:c2:06:e9:d2:46:42:cd:39:7e:95:f0:7e:5d:a6:
         3e:81:f3:f9:11:7f:d3:c0:f6:7f:2f:c9:3c:b9:05:a1:92:ac:
         75:ea:d2:d0:75:ed:9a:f4:ea:bd:da:a4:63:21:d4:87:66:71:
         ad:df:20:f3:c0:1c:dd:94:cd:b7:b1:72:07:18:3a:30:e7:43:
         4b:f6:04:36:87:77:29:7c:bc:4c:92:61:fc:65:6b:5d:9d:6a:
         48:42:11:be:30:7e:9a:fe:d8:54:8e:cc:4c:21:0c:2c:0a:a2:
         9a:72:b2:20:b7:d4:37:47:44:59:22:c4:37:d5:cf:e3:4d:b5:
         d7:ec:f7:7f:97:21:26:87:5a:64:3a:ac:ef:4d:f0:64:81:91:
         50:7f:13:30:96:d7:b3:79:a6:9f:24:1b:9d:3d:b9:57:c9:e9:
         a5:07:96:06:09:29:49:0b:80:02:13:07:d1:ed:be:a6:70:53:
         43:d2:ee:00:f1:42:36:aa:d7:5f:47:9e:28:7d:98:16:f6:7b:
         94:70:4c:6a:94:de:02:3f:c9:8a:7a:2a:8e:23:6d:cb:08:fd:
         20:b2:fc:32:5c:e1:62:3a:2d:2b:1b:a5:2b:97:ca:4d:d6:8f:
         4b:7a:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:16 2025 by rpki-client