Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          Y4CaLcqD2ib7bNPvepTm0Qi6iOwYqwLLrEJZlp8o5iU=
Subject key identifier:   33:94:38:00:10:5F:91:74:35:1D:07:0A:5B:9B:68:54:A5:9E:7B:B3
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       0194BC3C83B7D31FE358F7AE65876153DDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          08B5
Signing time:             Fri 31 Jan 2025 12:01:09 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:09 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:09 +0000
Files and hashes:         1: 2yuHeP9Kzi2-iDsOvnhCDYlo6Uw.roa (hash: IHxChvWb85sgNgotrA/BnsV06YpBeOkmN/tTfoFuUvc=)
                          2: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (hash: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=)
                          3: GKSQanExligYvTlhCHXIb80j450.roa (hash: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=)
                          4: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (hash: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=)
                          5: ekkDxJqu-ZlE3YVqxLbl94UD6sQ.roa (hash: +gZe1v06dqZXZbhN48Df/j5IB56FQCKk5ahi88pFN9Q=)
                          6: kNcVhQpRqGRKtRoApGjZuA5ACHo.roa (hash: EghVSyPoJOgbCHk/V4h5/7YBe1j1EcoGI/60cjBIYNw=)
                          7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: VO8turfO68LDKa/s4g31/F649+upd7oiSzYEdaCzInQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:83:b7:d3:1f:e3:58:f7:ae:65:87:61:53:dd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: Jan 31 12:01:09 2025 GMT
            Not After : Feb  1 12:01:09 2025 GMT
        Subject: CN=33943800105f9174351d070a5b9b6854a59e7bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:e6:97:83:7c:b3:75:d2:06:c4:c9:1b:ad:
                    cb:88:5e:d2:1f:bb:17:40:ab:78:c9:df:12:13:d6:
                    1f:e2:5a:ab:c0:1a:69:10:e6:4c:61:9e:66:6a:f2:
                    90:9c:45:12:42:95:e4:36:5f:34:f4:2a:73:04:ee:
                    3b:7a:e4:10:2a:0f:39:80:a0:90:ac:93:e9:96:6d:
                    50:66:ce:2d:e2:bd:18:e1:e0:be:69:39:12:07:26:
                    e3:ec:4c:09:9b:d1:3f:02:d4:de:4d:1e:9c:c3:e0:
                    60:2d:f5:88:9c:7d:e3:e4:1e:e9:06:2c:49:38:6b:
                    db:98:8d:88:c5:ca:a1:65:7a:f2:68:5e:e9:08:d3:
                    18:6a:62:dc:5a:ae:19:bc:99:e9:2e:8c:f0:66:65:
                    7a:82:7a:46:b4:a6:62:86:7a:4a:f1:07:b7:1f:63:
                    04:df:16:c5:06:b0:72:71:82:86:79:65:f7:3f:18:
                    16:2e:3b:39:63:a4:b5:85:46:3c:74:b8:16:89:a0:
                    27:66:d0:51:2d:60:7b:60:98:5e:a2:d9:97:05:a4:
                    cd:c0:ca:26:27:3a:d9:98:39:de:af:8b:45:fc:20:
                    f7:42:0e:63:3c:6b:fa:d1:ae:5a:a9:94:ce:3a:2f:
                    6a:56:73:2a:6c:9d:13:0f:f1:d7:5d:41:2b:2a:1c:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:94:38:00:10:5F:91:74:35:1D:07:0A:5B:9B:68:54:A5:9E:7B:B3
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:db:91:04:37:b8:cf:88:7f:47:0e:d3:b0:e9:77:f1:59:d0:
         db:19:79:f8:4c:9f:8c:6b:21:84:00:7e:93:23:b4:24:a3:4a:
         23:2d:b9:4f:8c:66:a4:b7:6a:96:4d:7d:98:2e:d0:c5:b4:cc:
         ec:49:95:b2:17:59:1a:43:67:b9:b9:1b:e7:f9:4c:0b:f1:c0:
         9b:a1:9e:4a:5a:e4:47:72:83:53:a7:3d:52:38:51:a4:91:99:
         ef:1f:85:40:ca:8d:3e:32:08:8a:6f:c7:db:c4:af:e8:93:34:
         a6:61:79:76:47:6d:11:2c:bc:0f:2e:4d:3b:9c:84:ab:be:29:
         5b:8b:ca:00:76:92:cd:72:4b:69:64:9e:10:40:a8:f3:6f:2a:
         7d:0f:be:80:a5:61:9e:04:9b:6e:89:82:2a:fe:83:f5:00:ed:
         2c:d5:d6:e5:d0:c7:11:e3:ff:10:f1:46:a1:3b:e0:0e:f8:21:
         81:e3:37:0c:77:6e:d0:a4:21:09:85:4c:7e:73:e5:ee:a5:6e:
         66:a7:76:46:8e:a4:71:4a:da:71:33:8f:ef:57:60:3d:ca:e3:
         c6:f1:62:c8:3e:30:1c:bd:df:d8:1f:54:89:53:41:3e:5f:5b:
         17:a7:b1:4e:2f:3f:90:f1:ad:1f:9e:86:e8:97:b4:52:f6:f5:
         d0:73:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:44 2025 by rpki-client