Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft
File:                     r-yzens6yw5U7eBjv1fXLMWdlN8.mft (raw, json)
Hash identifier:          Y7XxyEc/StP+FfiTfT9XqLn2HZMEIN+vfI888czXr0A=
Subject key identifier:   91:C3:27:FE:7E:54:49:6C:E7:61:D1:83:B6:34:CF:6F:B2:10:9B:34
Authority key identifier: AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
Certificate issuer:       /CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Certificate serial:       01894A33721B2FB1972AA4083CB766C25012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft
Manifest number:          0944
Signing time:             Wed 12 Jul 2023 13:03:52 +0000
Manifest this update:     Wed 12 Jul 2023 13:03:52 +0000
Manifest next update:     Thu 13 Jul 2023 13:03:52 +0000
Files and hashes:         1: VsyvCMRZJt9Gergcl8ycZDwatc8.roa (hash: cm4Z0hML2FpVC8VHJuGq0T0pnrVi5hMBiPEU4iAHb4Q=)
                          2: majt_X6yjx1v-iTmhGFHsGumBVM.roa (hash: Z52exw3EQudoTlGo/au/rDAFSyNUY8GubUo9XkSJ1S0=)
                          3: r-yzens6yw5U7eBjv1fXLMWdlN8.crl (hash: hcfUXY70X8Mx0AI0DJN8WaFFHBjaICBCzoaGIgBiIow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4a:33:72:1b:2f:b1:97:2a:a4:08:3c:b7:66:c2:50:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
        Validity
            Not Before: Jul 12 13:03:52 2023 GMT
            Not After : Jul 13 13:03:52 2023 GMT
        Subject: CN=91c327fe7e54496ce761d183b634cf6fb2109b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:52:fc:56:4a:03:0c:31:58:5a:d6:1a:2d:
                    bf:db:7e:84:5a:56:59:26:7e:1e:dc:fc:50:84:40:
                    d6:e9:fe:bc:49:88:7d:de:d3:f1:9b:fc:7b:29:4b:
                    ef:b9:55:2c:20:e7:06:55:9d:64:37:cf:4e:b8:2e:
                    c6:bf:7f:6b:90:59:92:4c:7a:b8:51:32:7f:8f:f7:
                    1c:59:ef:15:61:e7:64:9d:ff:36:9d:7d:b4:98:2e:
                    6c:fa:3d:9f:20:13:54:8f:d9:8f:1c:2c:c3:5f:1c:
                    27:6b:a4:e9:a8:07:f9:7d:66:f6:05:e0:1a:f4:92:
                    a8:36:44:43:2a:59:0f:26:c9:0e:14:50:8c:d6:7b:
                    18:4f:60:89:cf:34:95:ea:1a:79:78:05:bf:d3:79:
                    46:d0:bf:13:fa:24:00:a9:08:67:1a:a2:9c:8f:33:
                    cf:01:19:26:46:fa:ab:e4:bf:bf:50:db:39:7f:58:
                    ee:f2:c9:4e:6e:b3:7f:f7:1c:94:b1:e8:93:6e:8a:
                    03:1c:e1:99:b9:f7:cb:36:a9:23:c8:1d:19:c6:56:
                    5c:61:1b:2a:65:72:98:d2:e1:1e:0d:1a:fe:4c:81:
                    11:c4:aa:83:fa:79:ff:a1:0f:86:54:5d:9a:ce:33:
                    74:79:bb:45:99:0d:a6:06:96:c0:e6:40:45:91:11:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C3:27:FE:7E:54:49:6C:E7:61:D1:83:B6:34:CF:6F:B2:10:9B:34
            X509v3 Authority Key Identifier:
                keyid:AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0e:ae:87:e6:11:44:7a:21:0c:96:7b:b0:4d:36:e4:96:00:
         53:d6:c6:1a:f7:55:11:61:6f:10:88:1e:b6:0e:91:fa:fe:e9:
         21:da:02:1b:6f:a5:f2:7f:c4:3c:79:63:77:81:fc:d2:70:86:
         d9:3a:4d:f8:00:8e:67:29:54:ba:ae:d6:f2:67:a6:e2:ff:3e:
         e3:94:96:7a:8d:9f:f4:95:09:79:d0:ce:0d:53:6b:36:f2:df:
         83:12:75:c5:27:70:33:5e:5d:74:90:f5:83:ef:b0:65:d2:3e:
         20:64:59:8c:ae:d0:95:ff:14:ca:52:4a:05:82:62:7d:dc:ab:
         9c:94:af:f2:3a:9c:8f:cc:b5:47:6e:42:1a:bb:d8:d2:80:26:
         d7:34:cc:eb:73:63:c4:58:60:9f:bb:25:76:cc:bc:1e:6f:f7:
         dc:25:9e:4c:4c:be:de:7f:7f:7b:d3:88:23:56:ec:52:31:e8:
         12:e4:9b:6c:79:c4:f8:69:b7:fd:a1:f7:d4:e1:e6:f3:85:f9:
         ea:66:b2:cf:dd:e6:f2:b6:e7:55:40:cd:dc:85:88:6c:df:55:
         b2:5b:8e:ad:27:aa:45:d5:b8:0a:20:09:99:1d:84:de:c3:c2:
         6b:41:fe:7b:9b:6b:d6:11:ff:8d:df:a1:00:5c:1b:96:99:02:
         05:47:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:06 2025 by rpki-client