Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/YnuijDv0yVKrLNa0sn6RC8fCcik.mft
File:                     YnuijDv0yVKrLNa0sn6RC8fCcik.mft (raw, json)
Hash identifier:          1W+V8psSyACkmQj/vFUjQiPyMXPqmOgkZALJ1Uf2HTI=
Subject key identifier:   E8:B8:E7:22:AA:BE:3F:C8:0C:EA:6C:AF:95:9A:3B:FC:4E:2D:A0:F2
Authority key identifier: 62:7B:A2:8C:3B:F4:C9:52:AB:2C:D6:B4:B2:7E:91:0B:C7:C2:72:29
Certificate issuer:       /CN=627ba28c3bf4c952ab2cd6b4b27e910bc7c27229
Certificate serial:       01851B32B35432CBC404DA346534B357FF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnuijDv0yVKrLNa0sn6RC8fCcik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/YnuijDv0yVKrLNa0sn6RC8fCcik.mft
Manifest number:          08
Signing time:             Fri 16 Dec 2022 13:49:45 +0000
Manifest this update:     Fri 16 Dec 2022 13:49:45 +0000
Manifest next update:     Sat 17 Dec 2022 13:49:45 +0000
Files and hashes:         1: YnuijDv0yVKrLNa0sn6RC8fCcik.crl (hash: DgBl+NGKQX3pvHOJKkneGlN+llF9QI/PkSZ562dW6KI=)
                          2: yGK1oyOGwoY_i4hNhwTnvLs2Uyc.roa (hash: GGFUjTgRmZdFUkr39ostUFKYHu+s0glr07KlSd2HUBY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1b:32:b3:54:32:cb:c4:04:da:34:65:34:b3:57:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627ba28c3bf4c952ab2cd6b4b27e910bc7c27229
        Validity
            Not Before: Dec 16 13:49:45 2022 GMT
            Not After : Dec 17 13:49:45 2022 GMT
        Subject: CN=e8b8e722aabe3fc80cea6caf959a3bfc4e2da0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:1b:a7:fc:96:e9:41:3b:4b:94:7e:c1:f1:
                    3c:14:b5:f2:03:6e:68:b6:64:a8:a7:83:0d:79:1f:
                    4f:48:d3:c1:2f:6e:bd:62:dc:2b:af:b0:b4:53:99:
                    5d:57:b2:1b:9a:67:95:19:48:dd:af:53:8c:56:15:
                    64:59:f8:89:f1:bd:63:54:87:b0:26:33:1b:d7:de:
                    54:7b:96:9a:8b:09:f6:94:89:87:eb:8a:81:d6:74:
                    01:9d:62:d1:fa:16:ee:4c:07:50:dd:54:78:20:fa:
                    57:12:30:1d:25:47:09:3d:90:ed:6b:78:2b:b9:ff:
                    ae:6b:bf:d7:2f:70:e2:33:8f:90:ef:8f:2b:4a:21:
                    31:05:d2:63:ff:81:27:2f:5f:47:0c:66:18:e2:97:
                    b4:e8:36:f3:a4:cb:6d:70:9c:cd:db:a7:42:21:89:
                    65:c3:38:22:d8:40:6e:32:59:99:5b:7b:94:b0:84:
                    d4:9c:50:8f:79:da:10:18:c4:db:13:de:db:d6:c9:
                    6a:69:e6:ec:ef:e3:c8:c7:ff:e7:86:85:eb:92:b2:
                    df:27:4e:d7:43:e3:f8:39:e7:6f:15:42:cf:32:64:
                    76:e6:c6:e6:82:87:df:31:b0:df:19:a8:0c:05:a9:
                    d1:16:97:34:46:3e:bc:e5:c1:5b:d6:0f:fd:6e:72:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:E7:22:AA:BE:3F:C8:0C:EA:6C:AF:95:9A:3B:FC:4E:2D:A0:F2
            X509v3 Authority Key Identifier:
                keyid:62:7B:A2:8C:3B:F4:C9:52:AB:2C:D6:B4:B2:7E:91:0B:C7:C2:72:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnuijDv0yVKrLNa0sn6RC8fCcik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/YnuijDv0yVKrLNa0sn6RC8fCcik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b08da-052e-40e7-bef0-d10199d7faee/1/YnuijDv0yVKrLNa0sn6RC8fCcik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:95:c9:45:84:79:d4:a1:26:5c:cd:75:d3:74:00:13:6b:
         54:9d:0d:a4:4b:90:8d:e2:37:8b:87:d3:f9:ae:52:1d:19:db:
         4d:9e:d6:64:2e:36:8f:d8:e9:84:36:b4:fa:b0:0f:53:ea:c7:
         8a:17:1a:d1:11:da:41:d7:66:62:c4:aa:93:76:dd:f6:5e:d5:
         8f:5d:88:e8:2b:26:f2:af:c1:94:4a:9f:7b:2d:22:d1:30:c7:
         56:7f:3f:83:96:b6:e4:e8:17:06:51:1f:3f:b3:7f:d4:f8:85:
         12:21:ff:16:c2:9d:dc:5f:62:37:ec:43:da:ef:f3:be:d1:f8:
         54:c2:22:a4:a1:e3:45:ca:f1:b0:54:a3:33:40:8c:a6:72:58:
         19:5c:e6:eb:8d:ef:48:44:c9:92:62:3c:3b:ae:c1:21:cf:3c:
         a2:0a:a2:45:b5:47:98:4a:49:10:75:5e:5c:f9:56:53:01:32:
         7d:b8:4f:fa:3c:9a:d4:97:3f:14:bb:fd:84:ad:dc:57:ba:57:
         86:eb:d7:1f:be:38:5b:94:55:2f:60:a4:b9:91:33:e5:e9:b4:
         5a:9a:3c:ba:97:98:8c:a6:db:57:13:e3:3a:2b:43:08:14:a7:
         ab:27:ac:cb:78:5b:21:5c:de:c6:b1:08:40:89:af:ac:05:4d:
         11:81:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:10:25 2025 by rpki-client