Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File:                     DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier:          4dzZAngliZZVEmU8uaxUiv6DdLEgBGtBUiROKBwVlTU=
Subject key identifier:   47:0F:20:42:01:1F:79:11:D4:5B:EE:8B:19:01:6B:35:83:A5:E9:E8
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer:       /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial:       0194BD17A33633B7BF585FD8D65DA12C2FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number:          0787
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=)
                          2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: SBbWF5gzfXPlvYkihekuUbzhsv+hmnYWQRSxVk+WBsw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a3:36:33:b7:bf:58:5f:d8:d6:5d:a1:2c:2f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=470f2042011f7911d45bee8b19016b3583a5e9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:59:f4:ce:29:fd:13:04:1c:3e:8f:34:5d:
                    c6:42:f7:ef:6c:b4:ab:29:26:a2:f7:8f:0c:61:cb:
                    df:44:23:c0:95:7f:a8:18:2f:19:40:fd:01:49:86:
                    46:6b:5c:a7:3c:e3:2e:76:ea:8a:df:8b:55:a4:91:
                    d8:11:ad:a0:d6:55:f1:43:f6:46:2b:8d:07:6e:2f:
                    67:c9:1e:c5:8a:bb:37:43:fe:37:2b:3a:82:cb:2d:
                    ec:55:a5:de:a4:08:40:49:2e:bc:c1:fd:5a:ea:96:
                    b9:24:38:f9:64:5c:b0:d3:97:f6:88:87:87:2b:ed:
                    e7:68:92:37:75:ce:7b:bc:c7:9a:4c:d2:dc:2a:88:
                    da:15:0c:6d:ed:6e:ee:a4:7a:e3:22:3f:c5:4a:f3:
                    ea:fb:79:25:a9:37:f2:93:95:ec:94:66:12:e1:bd:
                    d7:3d:01:68:f2:c7:a4:bb:63:2b:01:7f:d6:01:52:
                    54:32:97:31:c0:f9:3f:59:7a:f3:6f:3c:02:43:76:
                    e4:2d:fb:51:02:38:db:9e:06:79:a3:3b:de:02:58:
                    34:e2:96:b5:cf:63:f5:91:dc:a8:40:8d:0e:ce:9a:
                    75:ca:ec:83:f8:87:a3:33:dd:ce:18:02:26:5a:5c:
                    e6:89:5f:ce:ab:05:e7:58:e0:90:1c:5e:27:8c:fe:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:20:42:01:1F:79:11:D4:5B:EE:8B:19:01:6B:35:83:A5:E9:E8
            X509v3 Authority Key Identifier:
                keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5d:a6:26:47:b2:fa:b1:a9:a8:82:3b:62:9a:1d:f0:bf:63:
         4a:34:51:c2:4d:57:d0:ba:5f:ba:2b:81:0b:44:e2:e9:49:a6:
         7e:8a:24:2d:d9:29:06:22:e9:6d:54:6b:b5:6c:fc:be:85:d9:
         c8:76:a4:63:c1:c1:9c:50:61:89:36:7b:cb:1d:5f:3a:8e:6e:
         77:be:e0:c3:da:65:49:68:e1:db:40:70:9a:fe:78:20:52:0c:
         6f:0e:74:2f:ff:a9:9d:c3:0c:c4:21:65:16:6c:38:76:17:eb:
         54:38:e9:b2:cc:62:26:38:89:71:4d:8b:d6:7a:c5:1e:b4:44:
         51:25:0b:58:0e:de:4c:ad:51:f2:32:38:7d:88:7d:19:a4:a1:
         c6:70:d8:f8:60:69:e0:78:d3:86:3d:c3:22:91:21:b6:3f:fe:
         e9:81:b9:dd:b3:69:ad:0e:56:c6:c2:80:5b:b9:58:5d:3e:59:
         9f:0f:9c:40:74:69:4c:69:a2:bb:15:9d:64:cc:4e:ff:99:23:
         87:56:e8:a6:b6:4c:76:f3:b0:5c:d1:4f:30:50:38:6d:c9:05:
         5a:d4:23:87:ae:c9:d5:22:38:3d:40:bb:29:a3:c0:91:af:3e:
         26:19:34:19:74:a1:30:8d:8e:61:11:5f:de:19:96:5e:92:50:
         7b:00:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:46 2025 by rpki-client