Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File:                     MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier:          1XkK3KUMpH6JmBF+sW5XJAQHMQ1j+m/yFoDBrqozzZw=
Subject key identifier:   7F:91:9F:02:27:13:BB:F7:1C:73:03:89:E4:4C:8B:0F:EF:00:CC:D5
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer:       /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial:       0194BD4E4C233C2293157C031D2A95F51122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number:          067F
Signing time:             Fri 31 Jan 2025 17:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:12 +0000
Files and hashes:         1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: E/KePPGxgUtKxiIRFN/P1TYlUWyg6IIV3DhuYKbA6AQ=)
                          2: mThuVq__AdJ8m0fUEig5mExB-MI.roa (hash: uwNlHWqFKBBy+qRVS5eJabxoyu+NHhSLJrsP7OWfbIo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:4c:23:3c:22:93:15:7c:03:1d:2a:95:f5:11:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
        Validity
            Not Before: Jan 31 17:00:12 2025 GMT
            Not After : Feb  1 17:00:12 2025 GMT
        Subject: CN=7f919f022713bbf71c730389e44c8b0fef00ccd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:86:c1:62:5e:17:7c:d5:2d:b0:bf:1e:39:
                    6b:67:6f:b1:3d:87:a4:1e:94:70:f4:6b:6e:5d:14:
                    66:ab:d4:c5:1b:d6:e6:dc:89:d4:db:29:1c:1b:b0:
                    90:2b:f5:4f:b2:41:88:91:d6:f5:0d:4a:69:28:2d:
                    fc:91:f6:06:f3:f4:75:e1:78:1b:9f:8a:96:40:c4:
                    85:d6:0c:de:ec:25:a4:08:1b:4c:78:11:87:26:f7:
                    8d:13:e7:92:ac:b3:13:9c:03:19:bc:f7:9b:b2:26:
                    2e:34:ea:a1:51:d9:1a:4c:de:64:44:23:be:52:e9:
                    8e:64:90:1b:9d:b8:a0:86:75:ff:f4:bc:d2:69:fd:
                    3f:a9:4d:07:73:00:ba:81:3d:9c:57:41:eb:af:96:
                    a2:7c:2d:03:46:ac:30:a0:39:dd:3e:c4:54:69:d3:
                    aa:bc:37:01:54:c4:c6:5b:3a:44:fc:3c:44:fd:e1:
                    29:5f:e3:7b:bc:3f:d6:68:76:ea:97:a8:89:d0:9a:
                    7e:d1:42:ab:71:68:a4:5c:6a:77:ab:c5:28:e2:58:
                    1d:2f:6f:38:23:0a:07:04:87:c5:1d:b3:06:fe:cd:
                    04:15:e9:f3:e7:40:93:aa:6e:05:fd:91:f1:56:6a:
                    cd:1f:ab:56:3d:f4:b2:11:40:1b:fc:42:78:d3:2a:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:91:9F:02:27:13:BB:F7:1C:73:03:89:E4:4C:8B:0F:EF:00:CC:D5
            X509v3 Authority Key Identifier:
                keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1d:7f:41:b7:7f:fb:ef:01:22:70:0d:31:da:c2:18:87:57:
         90:0d:1d:16:de:ba:4a:96:b2:98:27:6c:90:fe:47:20:a9:94:
         e6:f0:66:24:2a:6b:89:f4:28:25:44:3f:55:2b:ce:3b:4e:77:
         7e:21:0d:0f:6c:b6:bc:9d:ff:89:73:43:19:4d:51:ac:e5:e4:
         01:00:26:59:77:bc:16:3d:24:cc:8f:72:3b:7f:34:75:20:b2:
         ac:ef:da:0a:73:27:0d:8b:e9:88:43:66:f7:db:33:5f:6a:4c:
         96:45:4d:fc:64:07:2f:9a:e1:df:c7:f3:69:9d:19:20:a5:dd:
         43:f8:a0:c9:bf:43:f5:3c:78:72:b1:ae:90:62:ae:ef:2b:da:
         03:4d:de:ea:5e:d7:96:4f:e4:2f:e3:d1:bd:12:f9:98:0c:83:
         c6:e7:fc:9b:d2:31:3c:e7:c5:1c:38:bc:32:7a:94:71:d2:a6:
         af:f9:58:c5:55:35:87:34:48:24:f7:4f:9b:a0:88:82:c3:26:
         40:1b:2b:5a:b8:4b:6d:b5:af:a8:57:b4:78:a3:a1:33:27:d1:
         cf:fe:ad:89:63:13:2d:8b:26:e0:77:cf:b4:60:e1:01:39:b2:
         24:54:46:1b:33:77:f7:97:1a:58:88:b8:f5:10:bd:8b:05:54:
         0a:7f:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:43 2025 by rpki-client