Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File:                     mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier:          2NNe92wuHclWXEnuI6fKUsLmKPeeOQPNLgTn4vvukz4=
Subject key identifier:   8F:2E:7C:16:01:03:63:B1:BD:69:70:9F:E2:5D:03:7A:48:B3:BA:63
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer:       /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial:       0194BCE0DB8D2E694798FC4A5D73348F5442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number:          0B0C
Signing time:             Fri 31 Jan 2025 15:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:40 +0000
Files and hashes:         1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=)
                          2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: Jbi3z2HMUiH+cFysucnt/ejCiGZmhxNrK6yCLtEHLEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:db:8d:2e:69:47:98:fc:4a:5d:73:34:8f:54:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
        Validity
            Not Before: Jan 31 15:00:40 2025 GMT
            Not After : Feb  1 15:00:40 2025 GMT
        Subject: CN=8f2e7c16010363b1bd69709fe25d037a48b3ba63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:3e:13:47:12:c5:69:c6:75:0c:b9:80:08:
                    ea:4b:41:b1:3a:c4:ba:8f:c2:9c:16:e9:e9:40:3d:
                    5d:07:ff:13:59:38:8c:44:0a:bf:9b:64:7f:35:16:
                    28:13:2f:c0:1a:2b:e2:41:81:3c:d9:69:2f:2d:b8:
                    96:c1:25:3c:9a:97:ad:5b:3b:0c:45:71:ec:36:ea:
                    91:eb:d6:5b:b2:86:02:b6:51:4b:e6:e5:48:76:68:
                    3f:9f:30:90:9a:b0:b4:84:98:75:76:81:97:3f:31:
                    f1:b2:c6:3c:82:c9:be:72:7d:96:46:c4:cb:cf:8f:
                    f5:e3:6a:69:59:62:f6:bd:94:25:37:43:79:12:96:
                    c0:96:07:c1:39:7f:c8:e4:5c:10:43:94:43:59:ad:
                    a5:db:ba:8d:4a:f3:dd:b6:3b:5d:d4:17:61:f8:76:
                    9a:fb:aa:ec:ff:f2:b8:45:9e:5b:8b:5a:73:47:cd:
                    1f:02:77:d7:5e:f4:87:f9:c4:58:45:33:21:62:4e:
                    bd:4d:d2:ca:38:d5:cf:92:4e:56:90:a6:5a:9f:a4:
                    b5:59:fb:a5:52:4d:ed:10:38:f8:45:22:0a:ff:b2:
                    91:2d:15:70:39:58:9b:25:60:19:aa:27:d8:3f:62:
                    cf:af:5d:e9:bd:fa:c2:5d:cf:34:03:fa:6e:3a:a2:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2E:7C:16:01:03:63:B1:BD:69:70:9F:E2:5D:03:7A:48:B3:BA:63
            X509v3 Authority Key Identifier:
                keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:ce:df:f8:5a:5b:4b:58:8b:fb:a2:fe:a6:5e:9e:83:ba:
         47:e5:da:ed:bd:ee:ff:d0:d8:2e:c5:b9:ad:9d:0f:c5:af:cd:
         75:f1:b6:91:94:4d:90:95:f8:cc:bd:d7:5f:61:64:86:93:cf:
         51:e2:f6:c8:f1:65:92:0e:b9:9a:73:0f:d6:ec:34:03:7b:b4:
         7a:a3:44:6a:8e:a9:e2:ab:a1:ea:a7:fa:ce:66:f6:32:8c:f4:
         d2:c6:6c:83:a8:10:5d:7e:3c:1d:15:e9:71:ba:ca:be:b3:b9:
         ae:ac:46:a1:04:9e:4b:cf:e2:72:d2:a6:32:77:c2:e2:51:33:
         c7:a0:7f:e9:73:5a:f5:53:7a:7b:28:2a:46:87:ac:67:74:5e:
         c7:d6:32:cc:88:3e:79:f0:15:58:ec:13:67:99:1b:ea:66:f5:
         e8:2d:c0:fc:30:c5:e9:10:6c:50:30:85:a9:f3:84:b2:3b:f3:
         00:c6:2d:c8:37:ad:12:ea:a3:e2:ec:28:3a:5b:9a:7c:f7:da:
         45:25:ba:28:75:de:d6:35:f2:88:15:b6:34:43:21:b3:53:42:
         8d:ea:03:25:df:4a:5e:15:d1:35:b8:af:74:67:c8:b7:9d:26:
         8b:d3:56:e3:7a:7c:f4:13:15:f8:0d:04:6b:70:86:da:ac:f5:
         69:d5:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:23 2025 by rpki-client