Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
File:                     yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft (raw, json)
Hash identifier:          dbHGiabFd4HDrNknKiRkx9FOGq/HWBlGi/T7pSWCxI0=
Subject key identifier:   F8:EC:61:BD:D3:AA:5D:23:76:3E:BF:67:70:62:D6:D5:4F:AC:A2:E2
Authority key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
Certificate issuer:       /CN=c95998989fdb5a5f932147ad7162c63004e067a4
Certificate serial:       0194BC72B2CED73EA15D468169EAB12E3807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
Manifest number:          090D
Signing time:             Fri 31 Jan 2025 13:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:20 +0000
Files and hashes:         1: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl (hash: P1g1TNuRhrqSJjNhdFiOJqOoPU5UjciWpec/+nekbkQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:b2:ce:d7:3e:a1:5d:46:81:69:ea:b1:2e:38:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c95998989fdb5a5f932147ad7162c63004e067a4
        Validity
            Not Before: Jan 31 13:00:20 2025 GMT
            Not After : Feb  1 13:00:20 2025 GMT
        Subject: CN=f8ec61bdd3aa5d23763ebf677062d6d54faca2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:17:cd:fd:4a:12:bd:4a:f2:6e:3a:e4:f4:
                    1d:95:48:72:fe:c9:5a:f5:d8:51:e2:a6:b9:37:07:
                    95:a2:23:f6:b2:08:83:31:8b:8e:95:9e:ca:89:ce:
                    35:49:53:1a:cd:2f:44:2f:25:9a:9f:71:f5:7a:40:
                    13:51:bf:30:1b:56:25:99:10:5f:56:2f:aa:f3:cc:
                    af:33:c3:aa:59:f5:6f:e8:36:06:7d:f2:1f:08:53:
                    52:bb:3b:9c:bf:e9:04:76:0f:74:f0:33:30:f5:36:
                    67:57:81:40:5b:2d:92:12:7b:bd:5e:38:3e:5b:87:
                    d6:d8:d6:21:74:bc:2d:3d:ac:47:34:fd:3a:89:0e:
                    fe:d6:9f:95:2a:39:d6:29:32:73:b9:e3:12:e6:f3:
                    c2:b5:26:dd:cf:91:20:cc:24:47:c5:a4:6c:46:bd:
                    92:7c:22:71:77:fa:56:55:25:51:fb:e4:d5:cc:26:
                    d3:55:c5:96:38:a7:1d:ae:a2:6c:24:d3:b9:f8:45:
                    d4:20:ea:32:24:e2:a8:72:55:62:d7:bf:52:93:e4:
                    75:4f:a5:86:e8:02:ca:d2:d1:3d:c5:1a:f7:99:4b:
                    ac:ee:e1:67:69:93:50:6d:bb:93:8d:f2:9d:2a:f2:
                    55:6b:a2:88:c9:26:46:18:4e:3c:ca:6d:ef:c4:2c:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EC:61:BD:D3:AA:5D:23:76:3E:BF:67:70:62:D6:D5:4F:AC:A2:E2
            X509v3 Authority Key Identifier:
                keyid:C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a2:d3:21:49:ca:af:bc:6e:86:77:ad:48:76:86:3f:dc:20:
         c2:21:9a:c7:87:c7:ec:67:6a:ff:6f:6f:29:dc:6a:9e:de:9e:
         23:3f:46:d7:4b:1c:7f:8e:b3:2b:9c:a6:f0:d5:89:b0:f4:15:
         2f:ac:9d:ec:c9:bb:18:7b:a5:99:24:73:5f:75:6d:78:04:62:
         7a:7c:9e:58:29:29:ee:14:2a:45:25:c8:71:a5:e1:e9:7b:f8:
         92:c9:a4:1c:28:c9:75:95:41:f0:25:24:37:ed:88:5e:95:39:
         d7:a9:4f:7c:39:94:e6:8d:73:95:54:f4:b2:60:9a:83:89:c2:
         13:36:7a:c3:05:e5:5d:46:45:c8:9f:bb:07:c9:e9:b3:ff:56:
         22:63:0c:7c:97:28:c7:22:87:e4:58:64:e0:fb:c8:93:84:d1:
         c0:d3:7e:7e:63:7d:9b:9d:af:ef:17:58:15:fe:24:14:04:7a:
         19:44:b6:b0:ec:38:c4:f1:5f:0f:cb:54:b5:09:2f:2b:a4:54:
         fe:28:a6:b1:11:0d:d1:7c:02:0e:49:98:d4:13:7e:74:6a:9e:
         77:0a:e1:fb:09:43:01:98:b3:07:91:9e:52:39:d1:08:de:df:
         a0:04:13:4c:69:a7:93:a4:d1:2d:bf:2d:25:a8:bb:6e:fc:53:
         4b:3c:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:54 2025 by rpki-client