Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
File:                     Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json)
Hash identifier:          +dSD9hDyUPxWZU9eXAGxVaiwoSPnMED+yEbLmghFqfQ=
Subject key identifier:   21:5D:EF:57:C7:CD:EB:4D:39:33:82:04:D6:01:61:7D:D0:9D:C1:AE
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Certificate issuer:       /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial:       0194BBCE9048CCEB9B59BAB30A7B30069C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:04 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:04 +0000
Files and hashes:         1: INqFD0SeOva_N0mDabBvhXvH4vM.roa (hash: KbPWp3TtuAL2F9RTHf55y2zxM43B8AT5l9geZLgdP6A=)
                          2: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: WxHNRVIGXG2Lfp8toA4XEHOfxJxm76xlBCTJjxdAVnA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:90:48:cc:eb:9b:59:ba:b3:0a:7b:30:06:9c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
        Validity
            Not Before: Jan 31 10:01:04 2025 GMT
            Not After : Feb  1 10:01:04 2025 GMT
        Subject: CN=215def57c7cdeb4d39338204d601617dd09dc1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:fb:37:8d:34:3c:ad:38:bf:91:48:fa:44:
                    e9:d5:14:24:eb:3a:eb:19:7a:ef:8f:55:7e:72:a0:
                    36:94:f8:85:21:e6:f3:ef:8c:34:be:7b:d9:a9:1e:
                    62:56:6b:f1:39:21:ce:91:e9:f6:ab:0d:71:a1:0f:
                    c0:39:59:da:e3:9b:5b:3d:d6:34:00:ed:8a:33:b3:
                    a5:0d:cd:53:6a:d4:b3:e2:4f:99:34:99:a4:d1:fc:
                    16:81:01:5e:ba:5a:ea:dd:ea:11:9f:bb:6a:fc:ce:
                    67:24:dd:6f:99:ef:07:e7:58:25:99:b0:98:34:9b:
                    a2:a9:26:17:0d:a7:df:57:e9:66:a0:73:5b:e0:84:
                    72:4a:7e:0d:f0:a1:19:a7:7f:36:1c:ab:61:8d:73:
                    cb:db:c9:79:11:ae:f3:12:1a:3d:12:34:ad:74:07:
                    13:a7:4f:4f:01:d1:8c:a7:16:05:b5:b8:b9:74:0d:
                    f5:6f:09:62:42:dd:81:e4:dd:e4:da:61:59:b5:f9:
                    85:c3:5a:5f:36:ba:a5:cd:6e:82:09:00:ef:1b:81:
                    6c:a8:fa:2a:f7:46:22:60:00:52:0e:c6:17:c4:45:
                    90:c1:f5:86:f0:f0:83:3d:ab:c8:58:87:5c:24:40:
                    2b:7f:ce:5f:ce:7d:29:c8:77:c0:72:91:23:c4:f3:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5D:EF:57:C7:CD:EB:4D:39:33:82:04:D6:01:61:7D:D0:9D:C1:AE
            X509v3 Authority Key Identifier:
                keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:35:dd:b8:f7:6a:69:90:09:0b:1f:17:d0:85:b6:76:5f:f7:
         ff:9c:97:aa:1b:3a:89:d6:fb:e0:2f:f4:67:80:be:47:f9:2b:
         98:4c:34:44:d8:7a:ed:2d:8d:9c:30:65:14:fb:55:b7:92:88:
         06:b2:02:db:00:da:38:2a:16:0e:f9:57:f6:43:67:90:46:63:
         58:e9:b4:2c:b4:a1:51:ed:21:5f:c0:45:72:29:2d:4a:c9:03:
         33:47:7b:fc:d1:e5:8c:0c:3e:d4:2c:50:d5:15:65:29:a9:6a:
         76:63:55:dd:19:69:c5:2f:68:8f:79:cc:04:7f:dd:c6:04:0c:
         1b:6f:ef:68:a8:b8:1d:4a:08:27:5c:3c:72:f4:0f:36:fd:f9:
         fc:4f:26:de:8b:c0:74:bb:d7:08:99:77:34:f6:e5:ed:8c:b8:
         85:63:ec:b5:1e:d3:10:7b:d6:75:64:19:c8:4c:e7:43:2d:65:
         39:e2:c0:05:74:4a:c5:c2:64:0b:6c:e0:ad:f5:f0:db:c8:4d:
         d0:5c:b1:dd:db:0e:ca:f2:16:ae:ac:4c:7f:33:a7:d2:1a:12:
         26:f3:cd:0a:48:5e:77:da:d7:71:a1:a3:dc:ff:54:32:ea:d8:
         a9:ab:72:1a:ee:2f:f5:4f:ea:53:8e:84:e2:d7:79:1e:4a:cd:
         30:78:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:42 2025 by rpki-client