Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4d95ba-99fc-493e-a5c4-6b9ff2cfa07f/1/tY6n73bYACz8pmxSD3ybYIo5XZU.mft
File:                     tY6n73bYACz8pmxSD3ybYIo5XZU.mft (raw, json)
Hash identifier:          TDW4diCogCtDT3yYR4gjayg8O969SllCHoYFDwBEoxY=
Subject key identifier:   6D:38:E7:02:60:40:39:02:76:0D:89:3C:E6:C8:5E:7F:B7:E3:FE:9A
Authority key identifier: B5:8E:A7:EF:76:D8:00:2C:FC:A6:6C:52:0F:7C:9B:60:8A:39:5D:95
Certificate issuer:       /CN=b58ea7ef76d8002cfca66c520f7c9b608a395d95
Certificate serial:       0194BD17FBE793E1762C8DF078A45634B8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tY6n73bYACz8pmxSD3ybYIo5XZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4d95ba-99fc-493e-a5c4-6b9ff2cfa07f/1/tY6n73bYACz8pmxSD3ybYIo5XZU.mft
Manifest number:          03BB
Signing time:             Fri 31 Jan 2025 16:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:53 +0000
Files and hashes:         1: tY6n73bYACz8pmxSD3ybYIo5XZU.crl (hash: Ft/8w7WWrPplGYsFMoJ3dEfW4hdV35KNmNlHhXGb/XA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:fb:e7:93:e1:76:2c:8d:f0:78:a4:56:34:b8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58ea7ef76d8002cfca66c520f7c9b608a395d95
        Validity
            Not Before: Jan 31 16:00:53 2025 GMT
            Not After : Feb  1 16:00:53 2025 GMT
        Subject: CN=6d38e70260403902760d893ce6c85e7fb7e3fe9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:55:52:86:5b:1c:79:4a:e9:1f:ae:5c:76:
                    6d:2d:6b:40:a3:53:a3:b7:7b:f8:2d:fd:73:99:43:
                    6d:28:d4:8b:87:ee:6a:61:11:d5:6b:af:9b:e9:d3:
                    84:d6:2c:9c:df:aa:f5:3e:96:84:c2:5c:3c:a3:fa:
                    0b:79:6e:66:a6:04:87:f6:67:30:c0:4d:79:d1:c8:
                    93:b8:40:10:62:7f:57:28:83:ae:97:d1:1c:13:76:
                    3b:90:eb:21:05:34:fa:6b:31:7b:ea:00:bc:f9:91:
                    48:5d:2e:81:d8:a2:d7:a6:07:53:ae:d1:51:a0:c9:
                    5a:d4:71:ce:cd:db:e8:ae:ee:33:a4:d2:97:5b:9b:
                    a0:a6:88:0f:7d:6a:68:7b:25:44:72:d0:cc:05:f9:
                    0d:36:27:16:f6:d5:5b:7d:d1:7b:23:5f:03:d8:63:
                    c0:23:67:3b:f0:11:cf:26:ae:ed:68:48:35:90:13:
                    63:ae:08:29:64:1b:fc:b6:58:5c:c2:68:71:2f:b4:
                    e5:7c:18:c2:3c:50:08:97:24:af:83:16:a6:f3:85:
                    31:3f:6d:dc:61:e7:e0:0b:a7:d6:2e:20:d8:4d:a5:
                    53:c0:9f:d9:c4:54:88:ca:bb:1d:2c:de:d3:1d:f3:
                    a0:be:94:ea:19:9a:91:2f:37:1b:fe:c7:db:1f:98:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:E7:02:60:40:39:02:76:0D:89:3C:E6:C8:5E:7F:B7:E3:FE:9A
            X509v3 Authority Key Identifier:
                keyid:B5:8E:A7:EF:76:D8:00:2C:FC:A6:6C:52:0F:7C:9B:60:8A:39:5D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tY6n73bYACz8pmxSD3ybYIo5XZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4d95ba-99fc-493e-a5c4-6b9ff2cfa07f/1/tY6n73bYACz8pmxSD3ybYIo5XZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4d95ba-99fc-493e-a5c4-6b9ff2cfa07f/1/tY6n73bYACz8pmxSD3ybYIo5XZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:82:e7:ed:3c:21:40:8c:d0:23:45:0b:c9:a0:ee:d3:a4:72:
         19:56:06:66:8a:f4:3e:6d:d2:0a:81:a2:20:b3:2c:2f:77:c6:
         31:70:86:a3:13:b5:e7:e8:dd:94:0c:48:29:fa:37:02:a9:07:
         92:d7:16:78:78:87:68:26:71:6b:9a:d7:85:db:19:8a:f8:0a:
         85:c6:83:71:53:bd:ad:94:64:3f:7b:bb:b4:97:4e:62:3a:c0:
         0d:6b:8e:ee:1e:3d:3f:60:05:01:62:4d:00:43:27:19:8e:21:
         e5:23:77:38:4f:ca:74:61:97:78:84:07:a1:65:31:9c:02:ee:
         69:88:27:1b:78:52:13:c6:07:f5:c9:3b:7b:a1:63:64:19:8b:
         8a:de:95:0c:7a:6b:31:1e:64:d4:c6:23:30:9f:83:30:b3:0a:
         08:b3:94:45:0e:e2:af:69:52:ec:99:db:bb:94:cd:e3:f4:78:
         fb:9b:3e:82:78:ce:ec:ef:42:80:8a:d1:8b:2b:31:dc:24:31:
         b8:44:72:c7:e1:2a:c6:5f:38:c9:ba:92:7b:57:de:e4:a2:0d:
         31:79:cd:c2:39:0c:85:6c:c4:a9:99:63:02:aa:33:a6:2b:23:
         45:bd:01:9e:78:95:98:4a:bf:69:56:7a:6a:1e:30:a9:ed:51:
         03:eb:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:11 2025 by rpki-client