Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          l8YLZdnXmOltxnI2L2JaDou0Z0c9Nf83rHcDkOZ5CVk=
Subject key identifier:   CA:38:92:31:D9:EF:06:69:E7:78:14:A7:4A:04:51:41:6A:BE:B4:33
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       0194BC3C294FF3F181D8DBF655E8F325E00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0869
Signing time:             Fri 31 Jan 2025 12:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:46 +0000
Files and hashes:         1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: zIJcvvtdSGwuRfjWQKLzXj4uFLebt1SHn09BGIiHED4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:29:4f:f3:f1:81:d8:db:f6:55:e8:f3:25:e0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Jan 31 12:00:46 2025 GMT
            Not After : Feb  1 12:00:46 2025 GMT
        Subject: CN=ca389231d9ef0669e77814a74a0451416abeb433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:29:5a:9c:a5:21:86:6c:0d:13:b5:9b:64:
                    64:0f:44:7e:cf:b4:9a:26:d6:67:7d:a1:5a:5d:d8:
                    b5:9f:e6:56:d8:7c:99:8a:93:ee:c9:98:ac:ff:a2:
                    85:23:9a:58:26:b6:e6:bc:55:69:5b:01:79:cd:27:
                    5d:3b:a7:a7:46:1e:e1:d8:41:f9:46:0f:5c:66:da:
                    7c:0c:9f:68:6e:bd:3e:bd:1c:97:24:89:21:c6:03:
                    2d:d7:d0:c3:34:71:2f:1e:97:c3:b1:6b:ad:b1:7f:
                    ea:71:c6:3a:82:bf:0d:f1:6e:99:7d:b9:2d:dd:15:
                    77:ef:3b:a7:aa:1e:8e:8d:e1:a9:6b:d2:0f:a4:63:
                    1f:d8:d1:29:22:f5:07:55:0b:da:be:31:a9:1d:57:
                    e8:50:c3:c2:bd:39:40:e5:86:18:19:f9:f7:47:be:
                    b4:01:c4:cd:4a:ef:0f:0a:1b:fa:d5:3d:8c:46:d3:
                    46:0e:73:16:2b:e0:61:e7:69:fd:ef:12:b8:97:62:
                    e6:41:91:6f:42:65:85:b8:52:9e:8c:38:b0:f3:8f:
                    dc:d8:6f:4f:8a:c4:8d:c4:84:0e:db:c0:b0:0b:d1:
                    04:95:df:16:28:4f:52:d2:40:02:b9:70:c4:cc:02:
                    d6:f9:e7:08:8e:57:c8:72:fc:ed:50:60:8e:d5:da:
                    52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:38:92:31:D9:EF:06:69:E7:78:14:A7:4A:04:51:41:6A:BE:B4:33
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0a:e8:ae:d8:94:be:20:e2:ce:85:b7:c8:0f:27:5e:56:8f:
         29:d1:56:b9:3c:1a:43:a9:b5:2f:b3:d7:6c:5a:bd:0a:93:1e:
         56:3a:b2:d8:fd:e4:fd:45:d8:3a:14:6e:15:08:9f:36:40:8f:
         99:d2:a7:f7:ac:cb:6f:43:ac:b3:e1:e9:32:6c:e8:1a:b3:9b:
         fb:70:00:1d:7e:f4:a3:f5:8d:45:58:53:9d:04:f4:4a:62:cf:
         07:a9:89:a7:8c:c8:ed:c1:4e:c6:3e:e2:7f:f3:ff:89:b1:02:
         63:bd:42:8c:dd:8b:8d:9d:12:e3:50:ff:23:fb:be:5d:1a:a8:
         8e:d9:65:44:f4:61:14:cf:26:be:3d:1e:12:1d:a7:4b:cf:5f:
         8a:f0:2d:7e:9e:8b:86:06:cf:80:67:f2:c6:df:66:e3:1a:ec:
         a7:ca:06:81:3f:40:37:88:5b:78:60:bb:7c:e5:59:c8:70:f3:
         df:15:ec:7d:97:90:48:98:0d:ff:7d:04:a1:25:73:24:d4:f2:
         45:62:61:6a:b0:66:2d:6e:d5:51:e4:2a:4e:99:1f:4f:5a:33:
         d4:e2:80:4e:b0:66:fe:ff:e1:95:27:b4:e1:6a:8d:95:a4:08:
         b6:84:e8:14:5b:15:db:68:b9:f6:f6:9d:07:12:ce:2f:8e:0c:
         02:4c:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:41 2025 by rpki-client