Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File:                     Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier:          MvIXeWHgPF9zELBnRJob0tjJrAlk3sZZ5OPgEGSNZzk=
Subject key identifier:   F5:D0:BA:53:64:BD:1F:7D:FE:11:F6:26:A4:CB:B6:0C:79:38:7F:A4
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer:       /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial:       0194BCA98D5A44622B643644536C7BF65BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number:          0CEE
Signing time:             Fri 31 Jan 2025 14:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:15 +0000
Files and hashes:         1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=)
                          2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: edJZ1MfKp+5kAWCsoswtyJWyDXQEe19egrTeGjqYKaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:8d:5a:44:62:2b:64:36:44:53:6c:7b:f6:5b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
        Validity
            Not Before: Jan 31 14:00:15 2025 GMT
            Not After : Feb  1 14:00:15 2025 GMT
        Subject: CN=f5d0ba5364bd1f7dfe11f626a4cbb60c79387fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:6e:0b:b7:31:7a:6a:fc:57:53:ee:e5:94:
                    c2:c9:74:71:0b:cd:84:12:ca:5a:4d:d6:b3:08:e2:
                    25:78:48:4f:21:1e:fd:87:32:56:b5:b4:40:26:a8:
                    29:72:1a:18:97:a7:b2:cc:09:fc:12:2d:57:92:2f:
                    3c:f3:e3:71:6d:b3:fe:62:83:ab:b0:f7:08:9f:d7:
                    9d:bd:77:f0:17:64:a1:2a:78:8f:4b:65:e3:66:ef:
                    ee:48:a1:21:9b:95:69:55:dd:9a:0d:f9:73:45:4a:
                    4a:84:69:76:db:8e:32:e0:07:7d:86:4f:f5:ad:c5:
                    b3:64:9e:7b:f8:67:38:5b:0c:6c:c7:20:69:c8:5f:
                    e6:8b:45:d7:23:21:b9:18:f9:d6:1d:22:50:31:2e:
                    10:a1:71:a9:e8:20:3f:10:59:62:4e:04:e2:1f:16:
                    18:19:e0:61:ed:4a:cc:68:f3:ee:b1:f1:51:cf:92:
                    b9:3f:2e:c8:48:8d:79:fc:f8:d2:a0:eb:95:f0:2f:
                    9a:20:11:bd:a7:22:4a:18:aa:05:f3:af:50:62:b5:
                    99:43:38:b7:82:d1:ad:d9:47:e8:6d:68:df:ba:d9:
                    06:b3:d0:54:13:14:e6:03:89:69:86:1b:b1:e8:8b:
                    7f:27:c3:bf:dc:c8:ef:92:72:18:dd:7c:dc:50:66:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D0:BA:53:64:BD:1F:7D:FE:11:F6:26:A4:CB:B6:0C:79:38:7F:A4
            X509v3 Authority Key Identifier:
                keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:69:39:23:6d:59:20:00:fa:77:92:7a:c1:66:eb:6e:e8:
         9e:5c:55:b8:94:dd:97:96:d5:05:d7:f0:17:0e:6a:54:5a:fc:
         38:60:3e:d8:76:d1:38:56:9d:62:5d:39:b1:c0:2e:ea:03:c2:
         52:47:5b:96:7f:3b:e0:06:d6:f6:98:a7:6f:7d:8f:02:58:ac:
         37:de:29:2d:af:6c:62:25:54:e3:7c:9c:5a:46:30:8c:e5:76:
         94:87:9b:90:bd:a4:10:cd:ba:95:de:d6:4a:db:53:56:67:ae:
         de:4f:16:3f:60:d9:74:3e:ff:3c:83:d3:ce:d5:25:08:46:b5:
         7c:ed:06:5e:ff:73:2d:14:a8:a3:4f:c2:41:49:6d:07:cf:73:
         52:e8:a5:40:36:8a:a0:89:f3:11:be:7e:08:72:b2:66:f5:55:
         85:4b:ca:f2:15:13:b1:2c:61:be:8f:1d:e2:66:6e:55:97:7d:
         72:b3:30:08:e2:62:c6:b2:0b:ea:42:d3:e8:86:8c:ed:93:ac:
         92:95:44:f7:c7:60:50:46:20:2a:77:bc:43:71:9c:d6:a6:91:
         00:66:43:b7:c3:d3:ce:95:df:12:06:d2:cf:9e:cf:d7:9b:96:
         a4:8d:69:26:04:9c:82:90:19:83:4f:72:a7:78:ab:91:71:f9:
         13:1c:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:47:59 2025 by rpki-client