Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File:                     YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier:          zkKd3CnWTLL1a9FUpiWXXgOhHBWiqDNMk0zVVDZx+Vc=
Subject key identifier:   D2:87:7C:9A:51:69:57:1A:EE:82:1A:72:88:60:F9:11:30:38:56:45
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0194BC731412E0516D75C094713770CBF91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number:          0832
Signing time:             Fri 31 Jan 2025 13:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:45 +0000
Files and hashes:         1: 4xpkugJm5O-bLkz-lOvDnuYcKWM.roa (hash: B9E95wF6v4Ywf48WupY+Ytw5Hk7wJ0SBxO0n9tZoJA0=)
                          2: 5oupLNM62GHiVX5PYESj19r91Ks.roa (hash: yuBvzT48iFbjDnHGtRPDeZ40C0r4KGDQdxGXQfHcACU=)
                          3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=)
                          4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=)
                          5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=)
                          6: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=)
                          7: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=)
                          8: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=)
                          9: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: 9rmSDup+2mWPZnhf715uS26M075Sx7AslweiJTdKnAQ=)
                          10: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=)
                          11: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=)
                          12: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=)
                          13: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=)
                          14: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=)
                          15: ufiNJ7oH6OnNQOp5WCbDZcS6fFs.roa (hash: ft+2DADbVaLgXn5IbVGPEM2UTUtfzZPECsxi5dLpDrA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:14:12:e0:51:6d:75:c0:94:71:37:70:cb:f9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jan 31 13:00:45 2025 GMT
            Not After : Feb  1 13:00:45 2025 GMT
        Subject: CN=d2877c9a5169571aee821a728860f91130385645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:ad:d6:f3:3d:fb:cb:31:86:4b:51:14:82:
                    b4:4f:ea:69:c3:67:d1:dd:f7:0c:77:fb:22:4f:2b:
                    c8:84:62:6d:94:9d:25:e7:52:e7:7e:20:77:73:2e:
                    cb:b8:62:66:4f:35:dc:d6:2a:02:83:7c:4e:b3:1f:
                    99:66:e4:61:1c:c3:7f:8f:b7:a8:45:4c:1c:8d:b0:
                    95:f7:ee:23:fe:1b:f0:00:2c:97:6a:f3:16:5e:0e:
                    a2:39:02:3c:68:e8:82:3d:88:f7:73:f1:4f:18:ba:
                    a4:21:7b:e8:84:ef:ea:e9:96:1b:d0:94:24:55:4f:
                    90:6a:ac:20:f5:1d:4a:f8:99:6a:98:e0:7e:bc:a6:
                    28:a7:f6:22:27:74:34:04:34:92:94:78:97:be:42:
                    34:cd:f9:73:eb:61:f7:3b:11:e8:60:6c:a2:c3:fe:
                    7b:5a:55:39:99:11:bf:a7:ab:ca:07:a6:53:7a:bf:
                    35:e9:ac:8f:83:6b:5b:03:ec:9f:ef:ef:6a:f3:85:
                    c3:92:fd:1a:64:a3:3c:85:2d:9e:02:2f:63:14:c6:
                    fc:a4:11:06:a9:26:c6:d5:5d:43:27:2f:c1:05:07:
                    a4:2f:66:4f:10:2d:b8:cc:b7:b3:33:d9:32:a2:23:
                    61:c6:62:b7:d6:ba:82:09:cf:fd:1c:b5:0f:4b:51:
                    6e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:87:7C:9A:51:69:57:1A:EE:82:1A:72:88:60:F9:11:30:38:56:45
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7b:18:2d:67:af:c2:01:10:fc:f8:93:1f:44:c8:31:87:59:
         37:c7:a1:65:4b:34:2e:52:f8:1b:42:1f:85:54:bf:df:db:30:
         f2:f7:ce:24:b7:58:a2:00:50:4a:f1:3e:64:0b:0d:e9:90:79:
         d8:d4:57:de:b5:82:ab:ac:b9:2e:97:ee:3e:89:65:5b:a3:0e:
         5f:b6:da:2c:9c:ca:fc:76:a6:c7:e6:cd:93:6c:33:d1:61:97:
         4e:c3:61:6c:1b:db:0e:f4:4e:74:89:bf:5f:f6:4a:c8:8e:b6:
         8f:3a:73:95:9d:0f:ca:d4:f1:eb:28:a5:73:b4:b1:2d:a7:34:
         ad:14:f4:a4:fb:5f:01:33:41:72:38:d2:86:fd:17:71:77:db:
         f3:77:ff:c7:05:b1:36:b3:b4:cd:a7:5b:f6:af:d3:c5:21:91:
         b5:85:c1:1c:9c:69:b4:a3:1a:83:b9:1e:f6:4d:94:27:7c:c1:
         cd:d3:84:b3:90:1b:2f:14:da:8b:56:d2:5b:4a:e2:86:75:ae:
         fa:e1:a5:77:09:ef:56:26:db:24:42:46:c4:8b:2d:70:dd:00:
         0b:e6:e3:7f:fa:97:81:2e:19:40:fb:f6:18:51:49:d9:92:a3:
         eb:bb:97:6e:bc:97:91:95:27:a8:c6:5e:a0:06:73:8f:db:04:
         83:97:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:36:47 2025 by rpki-client