Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File:                     jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier:          3Rzm0RJRClqZcJ176xqfvUCzH2m30BR3XBzz7uWwUHU=
Subject key identifier:   6F:0C:26:73:58:4A:B4:2A:AC:17:87:89:CF:18:EA:F2:83:8E:69:9F
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer:       /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial:       0194BC04F486E6BF6CE691941F1F33569AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number:          07C0
Signing time:             Fri 31 Jan 2025 11:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:28 +0000
Files and hashes:         1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
                          2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: 5LFbaKIY/BXEhK7ZPLLJI3zUiD2LgWxDt6oObmjMA04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f4:86:e6:bf:6c:e6:91:94:1f:1f:33:56:9a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
        Validity
            Not Before: Jan 31 11:00:28 2025 GMT
            Not After : Feb  1 11:00:28 2025 GMT
        Subject: CN=6f0c2673584ab42aac178789cf18eaf2838e699f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:12:4f:9c:38:f1:0d:fe:ff:38:ed:15:cb:
                    1a:3e:5e:e3:78:4d:e4:72:88:87:08:36:a8:3e:d2:
                    62:67:4a:eb:a7:e5:c1:e0:da:50:89:e1:db:1f:57:
                    9b:56:cb:8d:80:ad:a1:39:d0:de:92:c9:b2:39:f0:
                    b5:52:2a:f4:af:26:55:be:51:8a:56:53:fc:de:7d:
                    4c:95:a5:d6:b5:b4:56:e8:0a:1b:46:6d:a5:43:f1:
                    26:78:c7:16:73:c2:92:c7:fa:ac:36:47:b4:7f:ef:
                    66:fc:93:2a:e3:31:ad:2c:0f:de:27:0b:86:02:be:
                    66:7e:7d:dd:0d:b6:11:7e:72:d3:d7:55:53:ed:cf:
                    bc:9b:cc:f1:85:ac:47:18:0e:36:c5:18:52:47:0e:
                    54:a8:54:76:0a:2d:aa:86:54:dd:0b:91:b7:a2:c0:
                    89:90:64:85:f9:1e:07:28:bf:a5:60:f0:04:10:40:
                    2c:99:59:72:e0:27:c5:e6:43:f8:3d:53:50:d1:f1:
                    28:48:3f:0b:82:bd:3f:69:2d:ee:da:73:23:40:36:
                    0a:2e:16:7e:54:06:3c:27:50:3b:51:7f:64:c6:1e:
                    74:05:8e:e6:37:3d:14:0b:ab:d3:1f:94:bc:1f:a6:
                    2a:20:9b:2b:06:02:cd:14:ab:88:19:70:4e:3e:24:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0C:26:73:58:4A:B4:2A:AC:17:87:89:CF:18:EA:F2:83:8E:69:9F
            X509v3 Authority Key Identifier:
                keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:c5:27:99:72:4d:ff:14:02:35:d7:5f:e1:31:9b:7b:39:
         66:93:e1:29:7e:6e:22:ea:2e:83:bf:38:7c:44:ff:d8:dc:02:
         f4:c8:69:af:a8:b1:2f:c1:75:fe:b9:2c:39:ac:83:c7:46:de:
         38:6c:9c:47:78:c7:11:e6:69:22:fc:7b:b7:d2:ab:0a:22:67:
         e8:b1:1e:cd:54:4f:bd:3c:4b:49:da:16:fd:ea:58:28:dd:90:
         18:b1:e0:92:4e:7a:4a:46:9d:f9:f5:a3:d2:59:4f:45:72:f5:
         b3:71:ec:84:01:3b:68:c6:9b:38:a2:ba:18:75:9f:5e:41:ea:
         e8:93:94:c0:56:e5:8f:4f:29:cd:0a:1f:60:aa:13:2f:b6:69:
         e0:67:ae:4a:69:ec:79:55:19:9c:3b:d1:24:ad:29:96:4e:5f:
         8a:70:71:eb:32:3f:b4:72:e6:df:74:09:a4:56:d2:54:00:31:
         a0:82:3d:86:24:01:f6:cf:63:16:a2:57:d3:64:ed:d1:dd:af:
         15:0f:30:81:fc:b3:7f:bf:99:63:34:d3:b6:80:07:48:dd:de:
         cb:b5:2f:0b:9c:3d:27:c7:af:c9:f0:be:d4:95:29:a7:45:db:
         67:2f:25:a2:f0:a0:1a:ff:4a:17:1e:ac:07:a3:0c:6f:17:8a:
         bf:a1:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:30 2025 by rpki-client