Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File:                     ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier:          mmKpsg8sWSrlYqF6r5cRfX2IvfcZcp1z7AutfyL8z/o=
Subject key identifier:   74:96:25:92:1B:C2:9E:A3:58:43:47:A2:68:2C:54:A2:DF:F4:05:5F
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer:       /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial:       0194BC3C1152D21AA568C9D5B5E2ABF002BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 12:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:40 +0000
Files and hashes:         1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
                          2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: EjU9XPqk34KRXIyqy5aDL/SvGk2rjCDq7Fa5sFUV6LQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:11:52:d2:1a:a5:68:c9:d5:b5:e2:ab:f0:02:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
        Validity
            Not Before: Jan 31 12:00:40 2025 GMT
            Not After : Feb  1 12:00:40 2025 GMT
        Subject: CN=749625921bc29ea3584347a2682c54a2dff4055f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f6:63:fe:6b:1a:3f:b3:39:e7:3a:be:80:fa:
                    46:b6:e4:e0:ac:c9:8c:59:8c:2d:56:39:83:76:f8:
                    28:69:40:8e:45:a4:fb:5c:a5:5e:5c:2e:42:27:4b:
                    d3:9f:82:73:4d:96:41:5a:00:1a:9e:5a:a9:78:09:
                    35:24:fb:d0:cc:25:ff:ab:83:3e:35:60:1b:d3:c2:
                    d0:6e:b8:e7:ac:de:8f:17:37:53:2e:f8:a2:4e:c5:
                    29:08:1b:0d:45:96:12:66:cd:d9:73:75:30:1c:d7:
                    bc:75:21:9c:16:e1:a8:35:db:7f:ad:64:58:28:89:
                    2a:9a:f2:eb:d8:a6:3a:a8:85:bd:84:d4:50:06:b2:
                    c3:c7:d8:b3:ef:58:1c:c4:a8:75:21:5f:f1:30:53:
                    e7:e3:40:d6:65:fa:8e:2a:1e:a8:96:1d:d1:6b:bd:
                    f2:db:f5:c1:2d:ea:d0:6d:de:4a:c7:9c:2f:53:99:
                    a9:55:c6:51:a0:91:a5:2c:9a:eb:11:a4:59:95:66:
                    ff:15:d2:eb:30:9d:7a:d3:b9:18:84:63:d9:5e:98:
                    fa:0a:a6:d8:48:87:ae:ec:61:ce:97:81:e1:15:2e:
                    1b:07:f4:9b:07:fb:8e:83:04:7f:2a:5d:a3:d0:93:
                    37:ec:89:c4:e7:f9:c1:83:88:d3:08:ff:9c:de:52:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:96:25:92:1B:C2:9E:A3:58:43:47:A2:68:2C:54:A2:DF:F4:05:5F
            X509v3 Authority Key Identifier:
                keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:00:bb:0d:5c:21:a9:b1:71:fb:57:aa:03:9c:e8:88:be:46:
         ca:81:85:61:25:6b:54:02:48:84:6a:82:9f:37:b4:b0:2e:b4:
         3d:2b:65:5d:a9:3d:e6:41:69:3b:2b:18:fa:1a:90:69:e5:89:
         ec:1e:f8:d4:7c:1e:ff:40:72:0a:17:1c:46:8b:13:93:8c:7a:
         19:67:e2:31:35:4c:e0:e3:b7:b3:14:74:54:eb:0e:c7:6f:a0:
         a4:57:d2:81:aa:64:1d:8d:3c:66:7b:b8:2f:ee:d0:39:6f:5f:
         2d:e6:61:42:2f:67:87:14:4c:fc:06:cd:de:06:44:3d:97:fa:
         91:3e:c9:93:31:8f:ec:92:73:c4:b3:3e:64:23:fb:27:cd:17:
         66:57:5c:8a:9b:97:1a:e5:7a:96:ce:78:15:e5:53:43:1e:86:
         7d:a8:cb:d1:cf:51:f4:3d:b1:ca:9f:c9:19:a0:ce:77:c9:f9:
         0b:7f:1a:03:47:78:d3:3d:02:65:78:2b:66:13:60:5f:df:67:
         42:54:63:c6:1a:5e:c8:37:aa:d8:e2:cc:a2:5a:4a:a2:6d:84:
         51:be:78:0c:32:63:95:f8:56:55:68:72:d4:00:ed:48:a8:c0:
         b1:c9:3e:81:f0:3e:7a:8e:9d:71:5c:4c:4a:75:db:ef:fe:d6:
         cf:86:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:58 2025 by rpki-client