Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File:                     dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier:          s/O8W3TMCFwMajVcoCdP6ZN9oHZDh+9QGfNGKccJjTg=
Subject key identifier:   76:D7:F7:F7:09:B2:D1:2E:BB:EC:78:CE:5C:34:45:21:A7:37:79:2A
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer:       /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial:       0194BC3C5E50AECD1FCD111C0CA9753BF1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 12:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:00 +0000
Files and hashes:         1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: YEJVYFOyPA/aZ5ddHs2MUnemrUozUAdiUJj7hXOuzEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:5e:50:ae:cd:1f:cd:11:1c:0c:a9:75:3b:f1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
        Validity
            Not Before: Jan 31 12:01:00 2025 GMT
            Not After : Feb  1 12:01:00 2025 GMT
        Subject: CN=76d7f7f709b2d12ebbec78ce5c344521a737792a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2b:97:cb:d3:11:34:2f:f1:72:28:ba:86:e1:
                    26:3a:cd:6b:6e:10:6b:00:ae:66:bd:9a:9f:46:13:
                    c1:9e:22:42:f6:64:0f:5d:1a:b1:27:a3:c6:fe:c4:
                    e6:10:42:28:1b:67:dc:4a:cc:9b:d8:4c:7c:d6:56:
                    fe:33:aa:3a:68:a2:be:fc:71:3f:d0:89:04:6c:50:
                    08:5d:ca:2e:39:97:6b:59:b4:26:d1:9a:a8:86:82:
                    fc:cf:f8:be:4e:81:78:11:19:62:92:01:49:40:5b:
                    15:52:12:f5:43:96:10:e2:98:a1:6e:41:77:6b:36:
                    26:4c:e4:eb:59:e3:46:ee:25:3b:cc:ce:97:af:95:
                    99:10:0f:07:19:84:60:b0:82:2d:27:8e:49:73:ce:
                    5f:4d:a5:c1:ff:66:11:da:44:b5:d5:63:23:f2:73:
                    d0:49:54:a0:a0:87:f2:e7:3a:91:6a:cd:1c:25:b6:
                    2f:52:4c:0d:f5:d6:db:7b:68:a3:83:50:0d:85:57:
                    10:e5:3d:c7:2c:cb:e3:a5:58:49:7e:06:9e:4b:83:
                    24:de:66:59:99:da:55:2b:1b:a6:55:b6:3e:65:a6:
                    c6:6d:4c:a0:9d:5f:99:68:fd:a5:63:a8:77:6c:f4:
                    8a:29:5c:3f:01:45:6a:80:ff:84:19:5e:b7:d4:be:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:F7:F7:09:B2:D1:2E:BB:EC:78:CE:5C:34:45:21:A7:37:79:2A
            X509v3 Authority Key Identifier:
                keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:0b:21:7b:f4:e8:ab:e8:07:82:2f:de:66:f1:1a:2f:4c:
         94:b5:44:c3:67:b2:bd:66:68:6e:8c:b2:24:1f:33:77:d9:0f:
         63:2a:fc:04:9c:d5:66:23:df:92:73:d7:d2:3e:d9:fb:ad:27:
         17:89:98:53:ad:5c:f4:27:b8:4b:23:0b:33:df:67:90:7a:18:
         df:5c:39:1a:d9:98:70:b1:2a:b7:fe:42:dd:99:1b:07:dc:f6:
         52:27:23:1d:77:13:d0:03:70:58:27:b5:fc:d9:e8:1f:f2:89:
         8b:71:b0:61:b3:76:1e:74:65:1c:37:2f:a1:64:03:c8:52:3f:
         f4:a3:29:b6:e6:a2:02:ad:ae:7f:a6:fe:f9:a2:29:05:06:3b:
         6c:a2:0c:a9:21:7e:ba:39:84:80:11:b9:30:4c:74:b6:79:a6:
         d4:b1:02:29:2e:e7:9f:54:2e:73:55:2a:47:1c:f3:ab:51:0c:
         99:cf:52:35:fd:a3:a0:a4:22:92:5a:36:53:69:60:e9:bc:a8:
         a3:40:1c:24:d1:0c:c5:07:df:59:6b:5c:f7:06:01:00:2f:be:
         45:1a:3d:7b:6e:74:af:8f:5b:7e:15:cc:62:84:4c:4a:85:e9:
         cd:16:19:ff:f4:d3:8a:6d:36:ca:69:75:2f:f1:5c:c4:3a:1b:
         97:ed:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:01 2025 by rpki-client