Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
File:                     YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json)
Hash identifier:          JJ1SxwDLfdPZcw4ZeFjLJoZ0ckAzNW/XcDirj8aCWmI=
Subject key identifier:   7E:C4:5E:17:6E:47:70:45:62:B2:7D:69:74:1B:1A:E6:D0:F2:88:61
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Certificate issuer:       /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial:       0194BD4EC06F632C7EADBC097296FCC176AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
Manifest number:          03F8
Signing time:             Fri 31 Jan 2025 17:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:42 +0000
Files and hashes:         1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: xmw9TRuo73ZaV4oV6McQB27rv1aF3edxxEGqEH5np94=)
                          2: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (hash: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:c0:6f:63:2c:7e:ad:bc:09:72:96:fc:c1:76:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
        Validity
            Not Before: Jan 31 17:00:42 2025 GMT
            Not After : Feb  1 17:00:42 2025 GMT
        Subject: CN=7ec45e176e47704562b27d69741b1ae6d0f28861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:ec:c6:1d:15:bb:6a:8c:89:ac:ec:39:1b:
                    08:64:f6:66:6b:5e:a4:09:f8:a9:1a:41:ad:e0:73:
                    64:a6:b4:fa:dd:12:de:f7:d7:50:dd:bc:29:b1:6d:
                    ce:fa:07:8b:1e:a7:db:fc:d2:14:e9:63:ce:53:1e:
                    36:b1:e9:bd:48:62:cc:91:39:e1:8b:e4:66:b7:c5:
                    3e:2b:57:8b:30:dc:17:ce:2b:52:c5:1a:d8:c2:3c:
                    38:cd:a7:b1:fd:44:2e:21:a6:ab:a5:83:1d:15:08:
                    89:fb:50:3c:16:f3:b5:12:ab:49:0d:30:4a:91:b5:
                    ac:f6:9f:5b:00:83:18:72:96:77:ea:34:d5:18:1a:
                    f7:b0:4b:8e:4b:36:96:5a:50:f3:4c:d1:0d:9e:01:
                    47:a7:f2:88:07:fc:3c:78:1b:0b:04:79:a5:8d:50:
                    55:b1:e8:09:09:df:91:38:71:4b:21:05:69:74:41:
                    64:26:33:f3:0c:56:d3:c4:69:21:2b:94:4a:7b:dc:
                    24:a0:79:60:b7:4e:1c:19:ef:d2:64:47:76:90:7e:
                    55:10:8a:27:3b:77:df:64:eb:fe:86:cd:b4:70:60:
                    ce:94:09:b1:40:79:58:7b:e4:9f:50:08:12:f0:59:
                    b3:f2:08:b9:78:b0:3f:9a:e5:72:76:67:10:0b:f5:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:5E:17:6E:47:70:45:62:B2:7D:69:74:1B:1A:E6:D0:F2:88:61
            X509v3 Authority Key Identifier:
                keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:c3:63:c5:a0:8d:48:81:2a:f5:9b:9a:98:49:71:09:d0:
         b7:7d:ee:53:f9:72:c2:1e:8d:82:8f:71:d5:f3:1e:e7:20:88:
         14:2c:66:a8:d6:44:db:6a:20:74:b9:70:e4:96:9e:4e:61:d0:
         0c:d2:6c:e0:c2:0d:96:42:21:6b:ae:46:d9:0c:05:73:c4:af:
         ef:1c:63:ad:88:7d:5a:f0:f9:52:9b:f9:c7:f6:74:01:7c:90:
         09:97:ad:64:3c:b8:be:67:c2:95:ac:d8:3f:ef:f0:01:3a:aa:
         6b:e0:44:65:03:f0:63:37:ce:0a:63:4b:0d:fc:42:84:97:d6:
         c7:5a:53:74:da:44:ed:ce:ce:63:74:34:43:8a:94:df:ad:1b:
         0a:bf:ae:89:a7:21:86:9c:62:81:5f:1d:ed:7b:5d:1d:6f:57:
         07:84:00:20:d9:98:46:d0:28:14:39:c2:4d:5e:06:7c:26:9d:
         91:04:33:9d:0e:9a:f7:53:38:66:5b:d9:8f:6b:19:7a:a4:7b:
         5b:9c:f5:bd:ed:93:2f:9b:12:64:14:fd:ea:b4:2b:06:e7:75:
         8a:c8:e9:3f:cf:7f:28:3f:71:be:70:df:4f:ca:d7:46:b0:92:
         38:14:79:f3:8e:ab:98:69:b6:2b:6e:4a:10:c4:bd:cc:0b:31:
         65:75:cd:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsBvYyx+rbwJcpb8wXasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTg4ZmZlNmYwZGU1ZjJmMWZjOWQxNGVmNjJmMjU2NzBi
ZDViNGEwHhcNMjUwMTMxMTcwMDQyWhcNMjUwMjAxMTcwMDQyWjAzMTEwLwYDVQQD
Eyg3ZWM0NWUxNzZlNDc3MDQ1NjJiMjdkNjk3NDFiMWFlNmQwZjI4ODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDLsxh0Vu2qMiazsORsIZPZma16k
CfipGkGt4HNkprT63RLe99dQ3bwpsW3O+geLHqfb/NIU6WPOUx42sem9SGLMkTnh
i+Rmt8U+K1eLMNwXzitSxRrYwjw4zaex/UQuIaarpYMdFQiJ+1A8FvO1EqtJDTBK
kbWs9p9bAIMYcpZ36jTVGBr3sEuOSzaWWlDzTNENngFHp/KIB/w8eBsLBHmljVBV
segJCd+ROHFLIQVpdEFkJjPzDFbTxGkhK5RKe9wkoHlgt04cGe/SZEd2kH5VEIon
O3ffZOv+hs20cGDOlAmxQHlYe+SfUAgS8Fmz8gi5eLA/muVydmcQC/XZYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7EXhduR3BFYrJ9aXQbGubQ8ohhMB8GA1UdIwQY
MBaAFGDoj/5vDeXy8fydFO9i8lZwvVtKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEt
MDcyNWYwNjk3YjgzLzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEtMDcyNWYwNjk3Yjgz
LzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy3DY8Wg
jUiBKvWbmphJcQnQt33uU/lywh6Ngo9x1fMe5yCIFCxmqNZE22ogdLlw5JaeTmHQ
DNJs4MINlkIha65G2QwFc8Sv7xxjrYh9WvD5Upv5x/Z0AXyQCZetZDy4vmfClazY
P+/wATqqa+BEZQPwYzfOCmNLDfxChJfWx1pTdNpE7c7OY3Q0Q4qU360bCr+uiach
hpxigV8d7XtdHW9XB4QAINmYRtAoFDnCTV4GfCadkQQznQ6a91M4ZlvZj2sZeqR7
W5z1ve2TL5sSZBT96rQrBud1isjpP89/KD9xvnDfT8rXRrCSOBR5846rmGm2K25K
EMS9zAsxZXXN6A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:25 2025 by rpki-client