Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          GNM5F30Vdvnv4a50ICYEyX8FKUDTFJb+vSfaFdAq4Eg=
Subject key identifier:   C5:FC:F3:26:C2:F0:6E:80:4D:3A:32:BC:15:C9:86:D3:CA:14:E2:F3
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       0194BD4E9DA5B6D7999888B3CE66E4DA7419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          05B3
Signing time:             Fri 31 Jan 2025 17:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:33 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: PVhmlJqGxMgQF11he5+fsn5cXYdBXhYeEYDCE7f8wW4=)
                          2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
                          3: 4SOfXtsUKcFlXa9Q9yEW4D3DIqA.roa (hash: S0ISeClce5TxDsWjgivJh0Ti1wUrqurbMyCPE36tiVY=)
                          4: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
                          5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
                          6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
                          7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:9d:a5:b6:d7:99:98:88:b3:ce:66:e4:da:74:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Jan 31 17:00:33 2025 GMT
            Not After : Feb  1 17:00:33 2025 GMT
        Subject: CN=c5fcf326c2f06e804d3a32bc15c986d3ca14e2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:28:38:1a:d8:b0:bb:56:04:24:bc:3a:4c:
                    e4:1c:1c:2f:8a:8f:9e:05:c9:ac:91:7c:e8:02:61:
                    6e:7a:90:3b:14:1c:89:79:dc:e5:c5:64:c6:40:42:
                    73:24:c9:4b:8d:36:db:5e:2e:4c:c5:9e:d2:90:a2:
                    40:e9:b0:38:e9:7e:57:dc:62:6c:ff:d4:b5:52:22:
                    3f:8e:a9:26:8b:e0:c2:c7:04:9b:05:73:74:4e:63:
                    ec:02:29:42:b2:68:08:df:89:88:d9:65:fa:bc:af:
                    9a:97:47:90:a2:3f:ef:fa:96:07:5d:91:a9:8e:a2:
                    44:b7:de:c8:ef:da:33:85:05:53:43:35:f4:b6:04:
                    9f:98:dd:cc:98:b6:95:b7:23:f3:4d:03:a9:62:55:
                    8e:d4:34:90:1f:56:d8:b3:4a:75:e8:e8:8c:bb:98:
                    5b:2c:fc:63:6e:b9:b3:85:a8:19:14:0e:9a:4e:0d:
                    d5:d1:5e:69:58:86:8b:55:74:e5:e5:15:a7:23:17:
                    68:45:cd:ae:a6:ac:84:36:09:ad:59:a5:4c:6a:18:
                    60:fb:fe:9e:67:7d:b7:b1:ae:47:92:00:c8:ac:09:
                    34:9c:08:67:50:a1:e5:c0:a9:ae:42:2e:a5:c1:74:
                    28:e1:62:06:23:2d:5a:c5:59:76:43:0b:77:8a:32:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FC:F3:26:C2:F0:6E:80:4D:3A:32:BC:15:C9:86:D3:CA:14:E2:F3
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:a2:1f:e7:69:67:22:41:63:73:f2:c5:99:d8:b5:ee:5a:
         8c:94:a1:5d:1e:4a:23:f0:43:0f:81:ad:4f:eb:5f:43:dd:cb:
         33:c8:90:1d:94:95:97:24:81:5e:12:85:89:aa:f6:2a:2f:15:
         8c:21:48:85:c2:7d:4f:2e:c4:3b:ef:21:26:88:25:a3:0c:09:
         79:ac:62:6c:a1:b2:de:60:c8:ea:9d:95:88:c1:fe:13:b5:fe:
         40:c1:25:55:01:69:2b:ff:fa:21:ca:f5:43:13:e3:44:23:77:
         50:a5:8e:fb:1f:2e:08:c7:80:78:64:f8:95:07:e7:40:33:3c:
         ad:c7:2b:c1:3f:72:c9:08:59:87:de:cd:78:b5:10:24:28:20:
         40:9d:b3:d0:e1:16:b7:f1:46:29:f9:77:9c:d2:c2:e4:c9:98:
         d0:12:05:84:6f:94:14:58:1f:be:e9:f7:da:7b:2a:39:5d:55:
         59:4f:c0:ed:aa:c2:d5:3d:b9:a8:c8:c0:5e:9a:c7:9e:a3:5f:
         5e:e2:3f:d3:87:f4:a4:bb:f9:fd:97:26:d3:4b:0e:03:b0:95:
         57:da:24:d9:17:c5:1a:a8:2f:3e:06:3e:81:69:88:e1:42:0b:
         49:13:1a:b1:7c:db:a6:bf:c7:c2:6c:e0:dd:b2:9d:b6:f2:8e:
         84:11:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:54 2025 by rpki-client