Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
File:                     YoNhOQ7U4GYi62soNtdn918Ic2g.mft (raw, json)
Hash identifier:          benbOVE5J5ggwQ1VNOe9f97DMVvrq6lWXmpJIE+kDlM=
Subject key identifier:   03:31:0B:66:94:3E:91:8F:67:E7:AE:0D:0E:7F:BA:BC:13:32:73:39
Authority key identifier: 62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68
Certificate issuer:       /CN=628361390ed4e06622eb6b2836d767f75f087368
Certificate serial:       0195FA745B3E5237DF624364CC930B81C523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
Manifest number:          096E
Signing time:             Thu 03 Apr 2025 07:01:24 +0000
Manifest this update:     Thu 03 Apr 2025 07:01:24 +0000
Manifest next update:     Fri 04 Apr 2025 07:01:24 +0000
Files and hashes:         1: YoNhOQ7U4GYi62soNtdn918Ic2g.crl (hash: ZR0OpChvMwTZdYYmCGD+lotZhffpjYuCLe+yT9O0+0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fa:74:5b:3e:52:37:df:62:43:64:cc:93:0b:81:c5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628361390ed4e06622eb6b2836d767f75f087368
        Validity
            Not Before: Apr  3 07:01:24 2025 GMT
            Not After : Apr  4 07:01:24 2025 GMT
        Subject: CN=03310b66943e918f67e7ae0d0e7fbabc13327339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:0f:a8:70:63:56:36:3c:c5:f6:0c:13:e0:
                    41:0f:28:bc:27:df:0e:b4:98:e2:d3:0c:3d:19:67:
                    9f:8b:9d:0f:66:54:bc:6a:0e:24:58:14:bf:e3:8a:
                    67:32:5f:bb:e8:36:56:35:43:ab:7a:26:35:00:be:
                    7e:6c:96:f0:de:a7:58:a9:4d:e9:87:36:79:ad:1b:
                    15:f3:43:d5:63:92:44:89:19:ff:90:03:a8:cc:01:
                    6e:f0:32:8c:f2:4f:0b:ac:40:a7:6d:c1:b2:41:3e:
                    e5:b9:0e:79:4d:c3:4b:9a:2f:15:34:2f:fe:3e:85:
                    fc:0f:cb:50:ff:0e:e2:69:2a:7e:21:26:b4:f1:d4:
                    51:e9:11:33:93:5e:d9:55:0a:b7:e1:25:74:37:45:
                    f3:7f:58:ba:45:3c:65:c3:ea:a3:80:95:e2:5a:3c:
                    32:ce:fa:72:5b:61:21:94:a0:7e:a7:b1:d7:84:2f:
                    a3:22:a0:cf:d4:d4:2f:73:94:a2:a7:d2:20:de:6c:
                    00:39:a0:20:b2:2e:37:6f:84:ca:b9:c3:61:0d:2d:
                    f1:e7:aa:24:9c:24:24:2f:37:5b:77:05:ab:08:e7:
                    8a:8b:e9:49:96:bc:f0:32:29:05:c6:2e:90:65:b8:
                    24:f2:f5:24:ca:a8:8a:ba:1c:8f:2e:ae:96:02:73:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:31:0B:66:94:3E:91:8F:67:E7:AE:0D:0E:7F:BA:BC:13:32:73:39
            X509v3 Authority Key Identifier:
                keyid:62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:32:38:a3:df:78:56:03:04:2e:51:f3:b7:e0:5b:98:97:2e:
         76:d2:5c:bf:a2:71:53:95:9f:ef:fa:b2:fa:71:f0:ff:12:20:
         08:40:79:ab:e0:8e:d3:2b:69:ac:01:64:0d:f5:a0:f2:b0:92:
         94:da:19:c1:6b:6a:60:03:4e:74:7f:96:af:eb:fe:77:97:97:
         07:e8:38:53:56:eb:55:02:1f:07:13:6a:5d:ea:af:c6:9b:1b:
         f6:0b:16:e5:5f:8a:d7:42:73:2e:9e:f5:c2:9e:ee:96:9a:18:
         cc:09:fa:9c:48:b0:84:6a:8a:2e:98:64:36:ab:26:ed:b2:f5:
         34:d1:71:c4:07:8a:81:f5:60:76:84:45:e0:48:99:55:99:01:
         93:48:8c:4c:cc:9e:5f:93:38:c2:39:24:4e:ba:83:c8:fc:7d:
         22:8d:c5:3e:78:af:17:b0:e7:16:45:60:51:c1:d1:44:4e:5b:
         2c:53:af:94:5d:f4:a0:54:11:c5:70:63:31:c4:03:52:a0:9c:
         6a:f7:32:2c:51:4b:9e:5d:d6:3d:8c:8c:fe:4f:52:af:b3:a1:
         be:c0:07:ee:00:10:ce:ee:e4:2e:e1:4d:77:43:6b:ef:05:3f:
         58:d5:2d:4c:26:0b:60:27:61:56:f3:4d:5a:86:08:0d:b0:79:
         e7:d6:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:55:41 2025 by rpki-client