Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File:                     YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier:          KWABUJJRld9mOpdeD6pfie/sTJmiNTr3MO9kxgLcq/8=
Subject key identifier:   D5:63:15:F5:5D:5D:1A:C7:52:95:85:1C:57:65:39:B2:2B:63:C3:5E
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer:       /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial:       0194BBCE6284581AEADAB758C0BAB210DA38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:52 +0000
Files and hashes:         1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
                          2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: Vu/pl2AZEes3ykyGF4CgMiRs8nr8Z/g1V6DJko93Qzw=)
                          3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:62:84:58:1a:ea:da:b7:58:c0:ba:b2:10:da:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
        Validity
            Not Before: Jan 31 10:00:52 2025 GMT
            Not After : Feb  1 10:00:52 2025 GMT
        Subject: CN=d56315f55d5d1ac75295851c576539b22b63c35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e7:b4:7c:4d:95:6f:59:73:14:bf:b0:5f:df:
                    f0:62:29:f8:c5:83:9c:47:2d:62:83:e6:62:78:42:
                    7c:68:04:15:37:17:51:22:1c:fc:fe:6a:99:5a:c3:
                    df:d6:f1:53:0f:9a:a0:8b:75:a1:dd:5c:6e:c6:84:
                    28:b9:9f:a6:7f:b2:e2:9b:51:11:91:ab:bd:bd:86:
                    52:72:00:b8:f4:95:ee:1c:2c:ad:af:27:af:34:34:
                    8b:68:1f:7d:2c:66:ea:90:36:ef:a3:22:82:a0:ad:
                    be:b8:28:b6:84:eb:ab:e5:12:bb:a8:f2:9c:87:6b:
                    5c:33:e4:5b:51:71:68:a3:31:37:6e:78:8d:31:c7:
                    ff:8c:03:a9:a2:59:22:48:b4:2d:36:71:0a:62:dc:
                    24:94:19:e9:37:8a:18:cd:02:aa:66:f3:16:c2:62:
                    b0:a9:46:01:6b:e8:1c:f2:a6:19:e4:59:cf:17:bb:
                    3e:4b:15:d3:0a:46:30:c3:d2:a2:d1:79:c8:7c:14:
                    bf:ea:94:cc:d2:8a:58:06:61:34:e5:7e:8f:af:d1:
                    c6:e1:4d:c2:aa:b0:de:08:9e:51:1d:48:1a:7f:4d:
                    ff:26:4b:21:e5:e5:86:d4:1d:29:22:96:3a:0c:79:
                    fb:1d:c1:63:71:6f:d8:3d:a7:48:be:69:23:46:61:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:15:F5:5D:5D:1A:C7:52:95:85:1C:57:65:39:B2:2B:63:C3:5E
            X509v3 Authority Key Identifier:
                keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:43:2e:b9:e7:4b:0e:15:c6:d7:5b:1f:39:35:e2:d5:f6:
         52:70:83:2a:49:f0:cc:3a:27:1f:b1:1a:28:66:78:1d:e9:b1:
         42:88:bb:0c:de:23:9c:06:a8:7f:7f:68:18:52:71:96:ae:19:
         aa:9f:2d:d3:a1:32:29:d7:40:4e:69:2c:8c:22:ef:6a:ab:cf:
         1c:0a:48:17:ad:8c:2b:a0:9c:90:4e:f8:8b:13:91:41:71:62:
         94:5e:28:3c:9b:bd:2b:24:ca:03:27:3a:23:a2:85:45:69:68:
         53:a2:d2:11:d5:4e:77:fc:09:a2:41:ef:d7:f0:65:80:27:11:
         9c:48:d0:cf:a6:81:7a:40:5f:5a:c4:5f:04:81:ea:d4:7c:e4:
         9e:17:ca:b1:67:3d:9e:59:4d:97:fc:9c:50:27:06:3d:33:3b:
         4e:55:c6:9f:cd:8a:0d:29:39:f2:e4:3d:73:0d:9e:5b:4a:41:
         b8:99:65:72:fc:56:c9:01:06:99:cb:39:07:4f:f8:d2:31:a0:
         4b:61:e4:df:5d:12:24:9e:8b:f2:27:7e:19:85:b1:2c:08:0b:
         b2:af:d7:f6:ef:0f:77:a1:61:71:a1:f9:58:fe:ce:79:f1:49:
         09:67:bf:68:f3:3e:20:d0:06:1f:1a:73:86:d5:0f:2b:dd:b1:
         a4:b0:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:12 2025 by rpki-client