Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File:                     YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier:          JwQjZaBj1PKXIJ8JiVTPV/L/wsPdH27njkOjPf0JVys=
Subject key identifier:   D1:F9:AF:3D:19:DE:F5:8F:BF:E9:E3:6D:0F:38:D6:AE:9D:FB:71:31
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer:       /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial:       0194BD4E4FB7CEEDF5CCD0005D45E6800945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number:          08D4
Signing time:             Fri 31 Jan 2025 17:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:13 +0000
Files and hashes:         1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: GupoFpoP82Db/t7lDAZmttNOBW4jN9h5KcM5poekb5o=)
                          2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:4f:b7:ce:ed:f5:cc:d0:00:5d:45:e6:80:09:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
        Validity
            Not Before: Jan 31 17:00:13 2025 GMT
            Not After : Feb  1 17:00:13 2025 GMT
        Subject: CN=d1f9af3d19def58fbfe9e36d0f38d6ae9dfb7131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:57:3f:fb:0f:0b:74:75:de:96:31:43:77:
                    4b:b1:44:ec:11:de:be:1a:90:24:55:92:f6:48:13:
                    18:e9:94:57:d7:31:3e:55:24:76:9e:33:cd:69:1f:
                    d9:83:18:d2:a8:5d:8e:f3:fb:ab:34:cd:e4:d9:ff:
                    27:14:52:01:cc:37:44:54:6c:02:7c:46:cd:9c:72:
                    72:54:db:92:53:57:01:72:90:46:02:32:03:3b:0d:
                    68:1f:1b:84:be:33:3e:1e:47:e7:4f:76:7d:f9:20:
                    6f:56:63:c8:9a:4e:e2:a9:c6:b4:26:e5:47:c5:90:
                    15:81:49:cf:ba:0f:cb:a7:08:50:58:f2:b2:82:de:
                    7c:71:09:bb:2a:f3:cc:05:dc:c6:d3:2d:d0:28:d2:
                    d5:f0:95:f2:be:a5:48:16:95:18:59:3c:d5:e0:84:
                    1f:0d:47:5e:7b:2e:52:fd:7b:1a:ae:a7:d6:4a:78:
                    55:55:b2:f3:24:e7:27:98:9d:19:14:cd:73:77:38:
                    80:bd:e3:b2:dd:68:6b:57:7c:a6:84:c0:b0:f0:0f:
                    c6:7f:ec:d9:73:44:de:b8:11:e4:a9:15:fe:73:fe:
                    bc:f8:a1:93:61:17:ff:30:ae:a2:a0:85:73:fb:82:
                    7a:bc:ba:63:8e:71:6a:4d:a8:64:59:59:ec:2f:6d:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F9:AF:3D:19:DE:F5:8F:BF:E9:E3:6D:0F:38:D6:AE:9D:FB:71:31
            X509v3 Authority Key Identifier:
                keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0a:a0:ab:d3:8b:8e:17:a2:01:4a:a8:75:84:05:dc:71:cf:
         8b:c6:f8:5b:1a:07:d0:e9:e3:e0:c5:77:db:0c:f9:58:cc:2b:
         16:09:44:ec:15:fa:7b:79:a3:77:f4:00:9e:b8:71:90:09:07:
         94:5a:1e:87:36:7f:f9:41:69:ac:03:97:6f:88:9a:12:51:e0:
         82:eb:8b:0a:d1:ba:c3:71:df:a3:ba:68:67:00:73:e7:2a:94:
         08:d6:19:38:33:e9:5a:a0:0d:b3:ed:d7:15:14:0b:47:e4:be:
         2a:68:9e:ab:cc:ef:f2:d8:a9:28:d5:73:77:e0:07:4b:b6:b8:
         cb:bb:06:b1:92:9b:50:51:e2:64:e0:0b:e5:5a:9e:fc:d5:8b:
         68:12:b5:98:08:90:c1:80:a7:82:44:3e:95:a0:62:b4:e5:c2:
         c3:0c:37:04:2f:b3:50:09:c2:ba:19:73:27:11:cb:2e:89:62:
         38:3b:d0:79:7a:c5:50:f6:d0:d1:37:e8:67:3f:c8:56:22:92:
         b2:9c:ca:01:c2:dc:07:26:38:20:d9:de:e8:b8:4d:65:8a:b3:
         39:c5:3f:2c:6a:01:b3:27:b8:3c:8d:85:1e:37:0e:36:d6:67:
         54:6b:e0:93:51:8c:01:05:8a:21:61:a3:8f:3d:3f:ab:b9:b4:
         ef:88:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:05 2025 by rpki-client