Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/TYUMI6c_DG3QlU-5glGLfjI-gX0.mft
File:                     TYUMI6c_DG3QlU-5glGLfjI-gX0.mft (raw, json)
Hash identifier:          mXgqzNTL0/nCp4aQ4avi0kZUCcYPkeL02WXG+qNeLL0=
Subject key identifier:   BE:CB:DD:C5:86:CD:21:DC:45:CD:8B:BF:6D:27:71:65:F0:91:24:17
Authority key identifier: 4D:85:0C:23:A7:3F:0C:6D:D0:95:4F:B9:82:51:8B:7E:32:3E:81:7D
Certificate issuer:       /CN=4d850c23a73f0c6dd0954fb982518b7e323e817d
Certificate serial:       018AFA22F6C94E73E06B778E776AC356ED1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYUMI6c_DG3QlU-5glGLfjI-gX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/TYUMI6c_DG3QlU-5glGLfjI-gX0.mft
Manifest number:          0423
Signing time:             Wed 04 Oct 2023 10:01:49 +0000
Manifest this update:     Wed 04 Oct 2023 10:01:49 +0000
Manifest next update:     Thu 05 Oct 2023 10:01:49 +0000
Files and hashes:         1: S9fqf-awtQhiRIq3qXqJICPR2OQ.roa (hash: xvlhQdXWA+5Y0AroXusP6CRx5QjftQtMosjc3ZeW88I=)
                          2: TYUMI6c_DG3QlU-5glGLfjI-gX0.crl (hash: Bx6+b7OBMnh1riGD7Cn+NEz9kYk0JZZQ9YA6ODQl0SE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fa:22:f6:c9:4e:73:e0:6b:77:8e:77:6a:c3:56:ed:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d850c23a73f0c6dd0954fb982518b7e323e817d
        Validity
            Not Before: Oct  4 10:01:49 2023 GMT
            Not After : Oct  5 10:01:49 2023 GMT
        Subject: CN=becbddc586cd21dc45cd8bbf6d277165f0912417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:3c:f7:0c:c7:b7:f9:28:84:c3:d7:1e:a7:
                    bc:a4:f8:03:96:b7:5b:34:16:80:be:e2:fa:0d:82:
                    67:05:64:30:b2:9d:96:71:50:56:e0:d2:7b:a5:70:
                    83:4f:04:91:8f:dc:d4:eb:20:3c:03:2c:68:05:63:
                    f0:bb:6e:d5:d5:32:57:c0:b9:2d:80:2e:81:2f:a4:
                    90:75:09:41:17:c3:82:c1:2c:f1:9f:5e:59:75:91:
                    c4:94:64:05:d4:bd:11:3c:6d:8e:0d:3d:f4:d7:b6:
                    0c:e4:4b:2c:cc:e4:48:71:68:a9:62:60:73:9d:8c:
                    2e:f0:d5:84:da:e4:f1:92:1c:f7:21:11:6b:56:31:
                    8a:99:d1:64:5a:fd:7a:6f:08:2e:bd:8b:0e:bf:f1:
                    e5:4b:3f:83:a7:56:1b:56:30:3e:7b:01:e1:71:ee:
                    da:7c:5e:c9:aa:31:60:be:a7:ea:26:dc:3e:55:26:
                    06:1a:d2:4e:b9:e8:4b:a8:87:ea:b3:65:9d:13:01:
                    d8:d9:f8:5f:a4:7f:01:68:73:d1:fe:5b:61:e1:7f:
                    24:ad:c3:de:79:ac:9d:b6:e4:5c:70:10:1c:c5:d3:
                    04:e3:42:41:cb:ff:74:88:36:08:71:e1:3f:ee:93:
                    ea:98:fb:59:56:4d:95:83:4e:31:95:f8:10:03:13:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:DD:C5:86:CD:21:DC:45:CD:8B:BF:6D:27:71:65:F0:91:24:17
            X509v3 Authority Key Identifier:
                keyid:4D:85:0C:23:A7:3F:0C:6D:D0:95:4F:B9:82:51:8B:7E:32:3E:81:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYUMI6c_DG3QlU-5glGLfjI-gX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/TYUMI6c_DG3QlU-5glGLfjI-gX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/TYUMI6c_DG3QlU-5glGLfjI-gX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:93:5f:6e:3c:38:4e:f7:66:24:89:53:db:69:f0:63:e0:
         61:32:f1:13:9b:54:1c:ef:14:71:73:28:7a:02:ce:28:e4:7e:
         d8:64:6f:70:99:37:b3:26:16:29:6d:a3:60:39:f1:9a:50:cd:
         c7:ce:d9:c9:e0:a6:ee:c9:01:d5:6c:96:f9:fb:82:6a:9a:6f:
         53:a7:ff:fc:83:e4:ff:d4:60:ce:98:8e:a0:14:3f:0d:8e:73:
         38:de:6a:92:65:22:41:45:5f:0b:01:86:91:42:c3:8a:d6:76:
         35:0d:1e:99:cc:17:8a:4e:82:67:cd:b9:a1:b4:e9:9d:f8:a8:
         1d:03:0e:8a:27:76:70:c3:19:2b:3b:66:9b:22:b3:e4:56:6a:
         a8:d7:2d:79:ac:b7:1d:3c:8b:3f:00:77:44:5f:13:0a:63:11:
         15:56:0e:45:ba:fe:39:43:cd:3a:9b:13:19:d6:0e:fb:98:ea:
         64:ee:3c:fe:7f:b1:7b:f1:ea:83:3f:2b:2e:d0:d8:f8:ef:b9:
         43:e8:a0:75:39:2a:13:30:a2:9d:41:e9:49:8f:5f:9f:fa:4b:
         b7:5e:72:3e:04:d7:10:3a:b6:04:6d:3e:51:a0:d4:97:ce:fd:
         46:02:da:ce:7a:0c:9c:25:4a:00:69:76:00:95:35:27:48:a2:
         e4:75:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:28 2025 by rpki-client