Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File:                     yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier:          ZUiIFw3Qt6sp7VIdCfRNpNFKSR6hhZLzdEPi/w/BNlg=
Subject key identifier:   BC:61:3F:60:1B:32:16:9F:66:0E:AF:67:C2:B5:DD:00:EE:3D:FC:15
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer:       /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial:       0194BCA9E1B2DC2F8D6CC048BC9A3F9760F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number:          7B
Signing time:             Fri 31 Jan 2025 14:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:37 +0000
Files and hashes:         1: Zja22H7huKyd4DPgiFnlD1La7Es.roa (hash: AXLErsCzJc/qr3Tna9lN0B3Ap4Vz9K2Svk3Dy2hJER8=)
                          2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: ZgT3r2+xRVLnsSM4J6HaKQ5shuYpxne+s0qfc6Rjal0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e1:b2:dc:2f:8d:6c:c0:48:bc:9a:3f:97:60:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
        Validity
            Not Before: Jan 31 14:00:37 2025 GMT
            Not After : Feb  1 14:00:37 2025 GMT
        Subject: CN=bc613f601b32169f660eaf67c2b5dd00ee3dfc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:74:09:ae:76:62:1d:52:45:8a:8c:36:8d:
                    df:ff:df:5e:b0:f6:c4:42:c0:2d:c0:a2:bd:e5:00:
                    5e:b1:0f:b3:9e:09:26:ed:33:9e:38:d1:71:77:1b:
                    7f:f5:9a:60:19:7f:6e:42:ea:16:31:7e:ef:08:35:
                    dd:da:3c:3b:3d:3e:ee:17:d7:6e:f6:f7:7d:3e:15:
                    e1:5d:6b:9a:48:6c:ad:8a:37:fb:50:b2:e8:eb:d2:
                    ae:68:0c:70:5d:d3:f1:09:66:fc:af:bf:44:2d:e9:
                    d1:5b:d5:35:db:a9:6b:9e:43:0b:74:cd:b3:bf:da:
                    d9:bc:b8:c3:dc:a8:8d:0d:26:1f:67:7c:61:8e:b3:
                    cc:96:cf:6a:17:cc:be:42:cc:eb:f9:bc:1b:fd:95:
                    5e:51:b5:56:61:39:ed:5a:20:c0:4d:aa:84:d5:75:
                    dc:46:08:c3:fb:f3:d2:23:fc:06:b1:e9:30:ec:84:
                    20:3d:5e:e2:46:57:24:88:ec:f3:10:3c:fb:a3:16:
                    63:7d:ff:2a:d0:31:b4:3d:f4:f6:ea:c8:65:18:79:
                    66:b6:88:33:c7:92:aa:ec:b4:7d:c4:45:26:c2:1f:
                    fe:d3:de:22:47:38:ce:9e:7d:d9:48:80:53:24:49:
                    2f:56:5e:c4:99:78:d2:e2:9b:15:af:17:62:a4:b0:
                    63:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:3F:60:1B:32:16:9F:66:0E:AF:67:C2:B5:DD:00:EE:3D:FC:15
            X509v3 Authority Key Identifier:
                keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:66:00:68:e3:a1:71:65:95:53:b6:a4:be:3b:aa:5e:63:f0:
         57:00:e5:98:ca:27:c8:6e:cf:b7:f3:16:b2:17:c0:80:a7:7a:
         da:03:b2:b0:9d:08:d1:fb:67:e7:00:f5:ce:ff:1c:7d:6b:01:
         5e:86:94:fe:1a:1e:b6:1d:ee:2d:00:f9:34:28:3f:f2:8e:01:
         ce:f0:52:71:5f:f3:60:83:5f:92:d8:32:24:70:2a:2a:5b:aa:
         fe:94:68:12:8d:bc:74:c3:24:3a:22:e1:36:91:86:58:02:13:
         41:96:c2:1d:83:33:9e:1f:17:22:86:34:10:da:4e:01:43:ec:
         55:82:24:0c:74:64:57:a3:58:0d:60:32:7c:0f:fc:fd:65:25:
         c2:af:a7:8b:71:a9:ee:5e:10:45:b6:17:8b:48:9d:5a:02:f2:
         4b:82:cb:4d:d2:58:ae:97:99:78:21:cf:b2:48:bf:10:cb:25:
         bb:f1:14:b2:5c:9c:8a:0c:03:30:2b:2a:ac:fc:6f:73:40:34:
         8d:48:00:ae:68:f7:09:db:df:3b:62:d8:68:77:5c:88:2a:43:
         4e:04:43:e1:38:58:2b:8e:0b:c7:d7:b6:cf:43:32:1a:1e:b0:
         cb:89:cd:b3:ad:72:b0:fd:e5:8f:28:b4:64:9e:58:36:99:bb:
         ac:3f:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:36 2025 by rpki-client