Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File:                     YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier:          ishFH5yvTSEuDL9jvwwF6hojOlUK2WTKacTdqWOAwpE=
Subject key identifier:   E5:E1:5C:9A:07:8D:BE:61:F7:01:0C:6B:43:0E:6A:0D:88:1A:08:A1
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer:       /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial:       0195E0EB52E444A4CADF8655FD397E72501B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number:          06D0
Signing time:             Sat 29 Mar 2025 08:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:13 +0000
Files and hashes:         1: R4scpsswEHtZHUE-nwU3HaURKXg.roa (hash: og9/o35XSt8h5Pisf2/20OBVwfKzhDJ2QToFc39vgzg=)
                          2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: XdLd3sz95jJhuQY9UxRmCZ5B+4RqbJi8plCAuGkznGI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:52:e4:44:a4:ca:df:86:55:fd:39:7e:72:50:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
        Validity
            Not Before: Mar 29 08:01:13 2025 GMT
            Not After : Mar 30 08:01:13 2025 GMT
        Subject: CN=e5e15c9a078dbe61f7010c6b430e6a0d881a08a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:2f:82:80:37:55:39:3d:bc:8c:4d:2d:41:
                    93:d7:0b:10:38:b1:e9:e7:1f:6b:b8:b8:c7:9d:b4:
                    4d:54:ce:8f:f3:64:8b:e8:3e:9a:3b:18:65:28:4d:
                    f5:8e:55:91:d8:b5:fe:08:21:81:89:5c:fa:cd:67:
                    db:fb:ef:d7:48:4f:5a:04:c0:8b:97:0a:95:75:0f:
                    6d:65:ce:6f:b9:51:d9:68:b9:63:3a:59:60:94:39:
                    58:ff:95:1c:19:3c:ab:37:d6:46:b6:55:59:31:8f:
                    22:fd:98:0d:c1:f0:f9:0f:1a:e6:78:d6:86:5f:ee:
                    b5:db:6c:7c:a8:be:0a:b7:a2:1a:f0:60:9a:46:9c:
                    27:13:da:df:1a:f0:b8:31:38:5a:d5:91:e6:e3:df:
                    e7:96:6f:2d:3b:df:1a:54:dc:c3:c1:0b:b0:ea:db:
                    d0:8e:c4:3f:37:5d:31:00:28:cc:f6:67:4f:d0:7f:
                    77:25:3f:70:7a:dc:52:09:c0:7f:4d:24:52:ca:70:
                    89:2b:cf:51:70:2e:6b:1d:5c:68:d1:4c:8f:c7:5e:
                    23:af:c6:44:0b:1a:16:fb:83:c9:22:9a:17:a5:df:
                    23:8e:0b:28:8f:3f:58:c6:41:be:14:b8:3a:15:67:
                    2e:65:5a:e7:ea:35:f1:f7:15:d8:51:04:2c:f1:45:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E1:5C:9A:07:8D:BE:61:F7:01:0C:6B:43:0E:6A:0D:88:1A:08:A1
            X509v3 Authority Key Identifier:
                keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:07:ce:e3:89:1a:11:6e:31:6c:62:6d:cb:be:26:5b:ff:
         3d:1b:cc:b4:4b:0d:d3:8e:80:c2:de:97:9d:3f:7a:81:09:63:
         06:f8:e8:3b:88:3b:30:2a:14:8a:d3:9d:1e:64:ce:88:6b:fc:
         af:c6:9e:86:1c:17:8f:cf:1d:a1:ee:69:eb:d9:b1:bd:a2:d7:
         27:4b:a2:f7:55:d8:29:14:5b:45:0c:1f:3e:8e:ef:e9:f6:5b:
         ee:27:72:16:3f:cf:bf:22:d0:23:7e:e4:53:85:46:41:ec:a7:
         ca:27:f3:01:2d:6c:6c:b2:49:7a:f1:87:fd:ed:ef:a4:ae:ab:
         f6:ad:cd:4c:27:b3:31:1e:19:04:1a:38:ee:31:e5:44:64:10:
         0a:df:9b:e8:f3:52:ba:9d:5e:1a:74:d2:c2:e5:05:9f:8e:b2:
         bd:b7:e8:cf:50:f5:73:c2:a0:b9:ad:48:c3:2e:25:41:4d:d0:
         5c:35:bb:af:85:d3:11:b9:5f:d6:53:57:35:7b:8d:38:81:8c:
         d3:a0:4d:8f:c0:04:d0:e7:13:5a:ef:30:29:18:42:d1:62:3d:
         f6:59:88:f9:88:50:8c:9f:09:34:36:b8:70:4d:e6:ac:8d:26:
         78:24:c3:d8:a6:b3:15:6e:2c:0a:c7:60:00:54:80:51:10:c8:
         b5:30:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:02 2025 by rpki-client