Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.mft
File:                     TykazyCa9D3Yg9Sgofa8ibuGo7U.mft (raw, json)
Hash identifier:          SAJ8nHy0lOkaZ6L+5MAsBApQcjQoYEKcYji5In2poEI=
Subject key identifier:   F5:4C:7D:8C:A1:5F:DA:12:F8:ED:E7:56:1B:86:2C:DF:A7:A6:40:AC
Authority key identifier: 4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
Certificate issuer:       /CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Certificate serial:       0188E388ADAEC8939BD10224482BABD16C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.mft
Manifest number:          070D
Signing time:             Thu 22 Jun 2023 14:36:05 +0000
Manifest this update:     Thu 22 Jun 2023 14:36:05 +0000
Manifest next update:     Fri 23 Jun 2023 14:36:05 +0000
Files and hashes:         1: FH0Gnqj2_e3HwqcRRxse7HwdUbI.roa (hash: LQSBRnFQ+zI72hl59RrqNIlWumNwjW4AlvE1AKeE5Sc=)
                          2: N4HlmtfUx4kZ-dVDTPzU17klXJw.roa (hash: 1jZp4NPxWELR4Wye3qbnWXGj+k2zjR8tKdIrOzD4lDE=)
                          3: TykazyCa9D3Yg9Sgofa8ibuGo7U.crl (hash: kpIXbtP0BFGjlpxToDKdhCHR7NwMNyl4+0SG/bnWFAs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:88:ad:ae:c8:93:9b:d1:02:24:48:2b:ab:d1:6c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
        Validity
            Not Before: Jun 22 14:36:05 2023 GMT
            Not After : Jun 23 14:36:05 2023 GMT
        Subject: CN=f54c7d8ca15fda12f8ede7561b862cdfa7a640ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:74:bb:fe:7f:8b:25:8e:af:a3:85:33:cb:e1:
                    2e:c6:62:d2:86:f4:bb:9e:4a:44:3e:7c:65:3f:f8:
                    da:06:eb:d0:e3:83:3f:57:ce:92:fa:de:02:b7:4e:
                    47:40:fc:4b:6c:a3:7f:3e:ac:b6:34:07:52:28:99:
                    2d:d8:80:dd:69:3e:5d:97:1b:53:b9:55:93:ec:51:
                    3a:98:a9:4b:c5:6e:1d:0a:e2:03:ae:4c:4e:b0:ee:
                    bd:8f:e8:f4:83:cf:65:22:82:5e:62:b6:e0:82:ab:
                    4b:d0:1c:d5:b5:cf:74:13:19:c4:53:f0:66:79:54:
                    81:19:51:1e:de:47:a5:88:3e:ec:ea:f0:54:c1:0c:
                    94:49:7d:56:7e:b9:6c:a5:43:4d:de:71:32:b4:82:
                    ec:77:62:32:da:77:9a:2b:a4:d4:6c:00:21:d3:c8:
                    6d:51:44:27:93:ff:11:5b:0f:20:0a:8d:73:2d:39:
                    44:64:75:40:74:30:e9:89:d1:b6:63:1a:66:c1:0f:
                    37:a8:0e:a1:99:79:93:b0:21:d1:db:0f:9f:27:ee:
                    0d:f1:a8:cc:58:a0:ae:71:4d:f9:79:65:a0:33:10:
                    d5:68:cf:f8:3b:a8:58:3d:c4:f5:d0:90:b2:e6:aa:
                    04:0c:14:06:25:ba:af:c2:52:0f:05:4c:7a:07:78:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4C:7D:8C:A1:5F:DA:12:F8:ED:E7:56:1B:86:2C:DF:A7:A6:40:AC
            X509v3 Authority Key Identifier:
                keyid:4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:02:23:ef:b7:88:46:44:a6:76:d4:ee:e9:92:bc:45:b0:59:
         63:76:77:ad:bc:5a:b4:b6:e5:96:e3:d0:2a:2f:f5:80:d3:14:
         d9:1c:26:f7:d7:03:b5:15:69:4f:40:42:1b:bd:9b:50:e9:99:
         2e:67:96:86:1d:62:be:6a:ef:d9:62:33:a3:ec:84:ca:8b:88:
         8a:cf:52:0e:0b:4f:e5:2e:5f:12:20:d0:1c:d0:0f:82:bd:16:
         21:af:0f:7b:5d:53:c7:ff:87:79:33:81:6e:2a:af:83:a6:56:
         f2:92:31:fd:1e:be:d1:15:94:f9:40:71:52:56:ec:9d:4d:16:
         c7:bc:54:ac:c5:43:8d:85:e9:55:b5:84:1b:4c:76:38:c5:84:
         7a:70:db:af:bc:77:10:b3:6b:8e:a1:c4:2b:04:aa:c9:a5:6a:
         fb:3e:02:87:68:1b:3e:32:70:a2:84:b7:93:87:92:29:c5:57:
         39:66:ac:fa:1d:cb:63:d9:39:c6:56:0a:29:5e:4a:f4:5d:08:
         5d:2b:01:68:15:5e:19:de:e0:34:af:84:bf:95:8a:eb:3e:a9:
         00:1e:0d:12:84:96:dc:95:2a:89:50:e8:1f:04:1c:ff:37:03:
         51:3a:c8:25:ac:22:d9:03:8d:0a:a4:81:99:36:1c:56:4a:d1:
         c1:f7:27:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:11 2025 by rpki-client