Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
File:                     eYkeljG7xuiuXaSyGb5Nj2H--1o.mft (raw, json)
Hash identifier:          Ot6UDvz/XMAgwZiASf4rYRsRQzSw6OcQ2YkJ1As7TvE=
Subject key identifier:   63:40:F7:37:76:83:71:62:99:5B:67:F9:AB:80:37:99:92:7B:6E:D9
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Certificate issuer:       /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial:       0194BC052ADEE489BAAF068998F2C1455487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
Manifest number:          01CA
Signing time:             Fri 31 Jan 2025 11:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:42 +0000
Files and hashes:         1: 14Kld9FlTNpIEyy4ZZSIDPLCHyk.roa (hash: 34XSzdoN0Twcs64CD2UYU1J4NUP6HurtAkddMACEjC4=)
                          2: eYkeljG7xuiuXaSyGb5Nj2H--1o.crl (hash: Hx/5xA6wsYYq0pwiZWuKETEPjMCCQT4K5OYZt34mWlE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:2a:de:e4:89:ba:af:06:89:98:f2:c1:45:54:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
        Validity
            Not Before: Jan 31 11:00:42 2025 GMT
            Not After : Feb  1 11:00:42 2025 GMT
        Subject: CN=6340f73776837162995b67f9ab803799927b6ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:15:20:3b:07:b6:d7:ad:36:33:2d:46:b7:
                    bb:52:9b:e9:d6:24:40:2f:b2:b0:a0:22:10:9c:d3:
                    cc:2c:cf:79:35:b9:d4:af:8d:4d:87:f1:8c:7e:bd:
                    18:3f:45:79:6f:5e:69:a5:d5:b2:51:45:a1:45:08:
                    54:9b:a0:4e:de:c2:a5:1d:5c:f2:e2:e2:bd:4e:56:
                    5d:d9:5b:3f:51:78:68:a5:0c:e7:39:fe:0d:92:d3:
                    61:ab:4a:ac:b9:ce:9c:0f:53:a0:52:d0:bf:c5:06:
                    91:4c:cc:b1:5c:5d:70:dc:88:a1:5e:f2:06:a5:fe:
                    dd:14:57:20:11:fd:6a:98:de:a8:46:7b:82:55:3c:
                    03:77:df:7f:45:51:a6:ac:2b:d8:2c:cf:25:4e:1d:
                    1f:56:0b:10:19:64:4b:96:cf:0f:7b:3f:22:51:9f:
                    99:40:44:90:36:38:03:c9:86:c7:8b:81:e9:3e:36:
                    b1:b3:8f:09:05:7e:89:c9:67:01:f3:c7:33:32:a6:
                    99:cf:95:c0:00:78:01:65:3e:d4:7c:30:87:ae:4f:
                    bf:6a:51:72:31:0a:81:32:96:11:aa:c4:16:56:34:
                    44:ad:a8:dc:f2:23:06:37:8e:a6:e7:4e:f0:00:ec:
                    85:0a:6c:42:b5:d7:9d:c2:e4:d3:28:b2:13:40:56:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:40:F7:37:76:83:71:62:99:5B:67:F9:AB:80:37:99:92:7B:6E:D9
            X509v3 Authority Key Identifier:
                keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5e:d4:e9:ad:79:48:83:64:28:1f:02:dc:15:95:3e:02:56:
         89:45:35:97:03:06:23:eb:ff:4e:05:67:bb:02:a3:1a:4e:1f:
         36:f5:45:fb:76:2e:95:35:e9:0f:fb:7e:91:d5:2b:33:6f:e7:
         aa:eb:f1:47:d1:a1:9c:61:50:ab:0f:3b:e0:b9:ac:5c:da:96:
         ec:28:1b:21:e0:35:b9:ba:7e:d4:e4:50:0d:7f:ef:46:27:3d:
         4c:d5:80:b9:85:33:da:ba:f9:d6:49:18:bc:9e:58:0d:f1:05:
         55:0d:0e:a9:cd:82:96:3f:51:f3:48:d3:de:d8:5d:23:97:cf:
         eb:af:0f:2a:2a:0a:ea:26:01:fe:07:84:38:e1:00:e6:e1:34:
         fe:a2:c0:ae:6a:d3:e5:0f:6a:19:fa:d3:47:f9:b9:f9:c3:a6:
         6c:b8:23:05:eb:b4:4f:aa:fd:eb:67:61:30:a9:be:84:97:86:
         8c:ca:90:a4:87:9e:04:08:ca:3e:b8:8d:d5:c1:9b:05:53:da:
         ed:d3:98:e2:b5:aa:f4:a2:fb:35:80:79:40:43:11:3e:41:00:
         39:ce:a3:4d:c4:9b:57:99:15:ca:c2:94:0e:14:d1:27:6b:27:
         7a:41:75:35:31:20:6d:67:2e:e1:8d:93:a4:f2:c9:c3:da:b9:
         57:3a:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:43 2025 by rpki-client