Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File:                     YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier:          e0it/KaB+QIHA5uJRiGYdJpSODL8aKXe2/gR2KIO1eQ=
Subject key identifier:   70:26:89:53:74:EB:08:A9:65:D4:46:1B:6B:2B:D0:16:60:01:2D:4F
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer:       /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial:       0194BC72E8394875C521FA9482661CFCAE25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 13:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:34 +0000
Files and hashes:         1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: a+JfmZfKvGkZ2x2uYsBTc3I4wKMZjkle6QR9J3vYaKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e8:39:48:75:c5:21:fa:94:82:66:1c:fc:ae:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
        Validity
            Not Before: Jan 31 13:00:34 2025 GMT
            Not After : Feb  1 13:00:34 2025 GMT
        Subject: CN=7026895374eb08a965d4461b6b2bd01660012d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:85:9f:a5:37:de:41:49:3a:9f:8d:e9:e0:
                    2d:17:f0:6d:14:c6:87:b6:22:ee:15:e9:8e:e6:d7:
                    44:e9:55:99:c2:30:43:61:52:96:98:ab:0a:97:be:
                    50:8f:8d:66:9d:b6:6d:04:f8:f9:71:79:f3:e7:bf:
                    ae:58:b1:81:47:b1:d3:b6:1f:87:fc:5b:05:48:34:
                    b5:38:38:ce:06:b1:1f:da:db:31:bc:68:56:10:8e:
                    95:07:50:75:ca:3c:79:5c:be:37:c2:48:c1:74:cb:
                    7c:a8:51:3a:ab:01:80:0c:11:a5:08:30:2b:fa:30:
                    02:6e:49:6d:b3:37:33:9e:72:d8:92:2d:56:51:d7:
                    7b:55:38:e7:80:62:39:52:47:e5:82:a9:c3:53:f7:
                    b2:47:5d:5b:b4:4d:cf:8d:16:ff:5c:9a:1a:36:cf:
                    49:ba:cd:d3:1e:64:2b:f9:14:be:cd:ce:2f:4e:b4:
                    b8:e9:f1:2e:a7:f1:44:6d:b0:30:67:7d:fe:f3:d2:
                    0e:64:00:a1:06:fc:6c:6c:d0:ea:d1:31:92:43:ae:
                    c7:ed:9f:95:05:4a:91:59:fc:2e:29:b5:a0:be:2f:
                    92:5c:1c:dc:a9:ee:d3:d2:ab:e2:92:6e:9b:4d:1b:
                    a0:01:f0:e6:ca:fe:d7:4c:1f:84:f6:3d:0a:4e:2f:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:26:89:53:74:EB:08:A9:65:D4:46:1B:6B:2B:D0:16:60:01:2D:4F
            X509v3 Authority Key Identifier:
                keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:04:b0:9c:49:e0:17:2a:b2:26:03:32:0d:11:56:77:c6:87:
         4e:43:a7:92:ac:d1:d7:69:82:58:d1:82:4c:da:15:be:ca:f6:
         24:a9:ea:56:67:3f:d0:a5:e6:c4:ee:8e:19:79:fe:23:e2:f6:
         2a:70:64:9c:50:17:9d:f8:70:d4:90:f0:2c:38:44:ae:f3:47:
         7d:68:d3:2d:96:94:ba:aa:c7:73:1d:97:a1:1a:20:2a:58:f7:
         df:96:73:85:e5:50:93:39:65:75:9f:c7:74:63:b0:76:35:5e:
         30:5f:07:53:78:31:0e:b7:f5:62:ec:ff:e3:3f:e6:b9:b2:11:
         4d:1f:b2:ea:27:f3:22:21:68:74:8c:e7:77:1d:a3:a8:e8:4b:
         9d:f8:b6:c6:df:02:af:db:70:23:61:1b:de:bb:79:76:f0:f5:
         ae:61:75:72:a0:11:5f:a4:d2:82:b7:32:dd:f2:d4:dc:a9:44:
         5e:2f:b5:c0:08:df:ac:c8:33:6d:f8:e6:82:ed:da:41:aa:11:
         8e:4b:56:93:9a:f0:d8:cd:f7:ed:5b:a7:a4:57:09:84:20:d2:
         38:44:f2:c8:fb:2d:3e:5f:7f:4c:35:3b:bf:37:35:f2:8e:f7:
         73:fa:9d:81:0e:73:48:a3:d3:aa:c2:fb:d2:84:b0:7b:35:cf:
         b6:d5:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:29 2025 by rpki-client