Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File:                     kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier:          GsV7a1ZbhG0GBLoFawmPVvegEFw++qBTuguse1Sa4EM=
Subject key identifier:   D0:2B:5F:21:74:C1:B1:06:47:6E:C3:4D:67:5E:49:99:71:F6:E5:73
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer:       /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial:       0194BC3CADA9D9ECAEC71BDBC300D375E519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number:          094C
Signing time:             Fri 31 Jan 2025 12:01:20 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:20 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:20 +0000
Files and hashes:         1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
                          2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: bi/Y/1c4RbARoRCKGs6lsKBk71wiugUV+nZP+Ba/Fcc=)
                          3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:ad:a9:d9:ec:ae:c7:1b:db:c3:00:d3:75:e5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
        Validity
            Not Before: Jan 31 12:01:20 2025 GMT
            Not After : Feb  1 12:01:20 2025 GMT
        Subject: CN=d02b5f2174c1b106476ec34d675e499971f6e573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:7a:d4:7c:3f:5f:0a:3f:e6:45:98:db:5a:
                    fd:fa:75:f6:e6:bf:fe:6c:dc:52:32:ce:29:f2:e6:
                    9d:d9:d6:f2:04:a1:53:2f:9a:50:81:a1:53:e0:35:
                    d7:ec:4f:98:94:ba:63:01:eb:2b:0e:32:76:54:14:
                    dc:d5:e3:c3:b8:32:22:9a:cb:31:5e:93:d9:ff:a6:
                    c9:29:97:dc:b6:f0:1a:3c:c6:b4:67:0e:2b:83:39:
                    27:64:ac:83:e8:8d:e5:2e:87:01:ab:5a:ed:57:d7:
                    52:42:57:ef:8f:71:1f:fc:0e:40:a9:af:a9:1e:78:
                    4e:ce:12:fa:56:e8:e3:b3:ad:3a:d2:16:ab:d9:71:
                    d2:f2:df:0a:9a:fb:0b:88:c4:fb:41:3c:bf:95:a8:
                    80:95:3c:f2:af:85:5e:28:07:a6:21:c3:59:47:52:
                    86:89:c6:f3:bc:cb:61:51:24:67:d1:37:b5:b4:4a:
                    18:a9:60:a3:7c:9a:c1:9b:14:22:dc:04:72:1d:67:
                    31:89:f5:2b:79:7f:cf:0f:f5:87:73:6e:77:f4:31:
                    dc:90:40:d9:6f:fb:5f:d8:fb:6f:36:98:7d:9d:7d:
                    86:db:2a:7f:23:ee:39:1c:74:70:38:64:c7:6c:a2:
                    33:a2:23:81:2f:ba:ae:b2:e0:f6:02:d0:05:17:7a:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:5F:21:74:C1:B1:06:47:6E:C3:4D:67:5E:49:99:71:F6:E5:73
            X509v3 Authority Key Identifier:
                keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b6:7b:b9:20:dd:41:67:c2:ae:52:3a:13:a1:3b:4d:eb:d5:
         74:7c:fb:e5:e7:25:3b:8c:d7:34:65:ed:5f:cc:36:bd:46:95:
         d0:61:53:96:c6:53:da:26:03:a3:46:b4:83:05:53:49:d5:bb:
         f1:1c:89:18:70:5b:5b:38:7b:00:1b:a9:a7:a0:fa:67:49:1b:
         9d:6e:60:7b:00:ea:42:e3:07:86:f2:10:f2:a0:88:bc:8e:0c:
         6a:67:a9:91:47:e3:43:15:9f:52:7f:fa:ed:67:90:70:4e:38:
         ef:03:2d:ba:f4:e6:e9:26:84:05:0e:da:1c:6d:1e:98:d1:0c:
         96:59:35:1e:5b:98:a9:3a:82:1b:74:a1:06:33:cf:c5:6d:93:
         84:39:af:bc:36:0f:2f:50:ef:33:64:16:cb:ab:0a:c5:bc:79:
         59:9b:f9:9b:d4:df:5f:35:28:74:a9:c0:f8:a9:2d:ec:c4:59:
         ef:ba:54:8d:cc:00:f7:75:fb:e5:a6:03:0c:52:01:ce:ef:bb:
         29:6d:01:50:0c:94:f3:40:be:fa:63:8c:fa:a2:57:bc:2f:b9:
         30:14:26:34:e0:3d:58:0b:00:24:84:51:67:77:ee:27:d4:4c:
         50:3b:24:d7:a4:49:27:97:18:ca:6c:8c:cf:02:58:7f:4e:9e:
         0d:1b:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:05 2025 by rpki-client