Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.mft
File:                     YA4hJVBpTniBGT7RL6pS3Eaybbw.mft (raw, json)
Hash identifier:          yv2xY8MThS5LXryduqwPG4WD9uHPakld6xe3QoLSqGQ=
Subject key identifier:   9B:64:80:A6:CB:08:BC:14:7B:91:67:36:42:78:75:32:05:FD:CC:85
Authority key identifier: 60:0E:21:25:50:69:4E:78:81:19:3E:D1:2F:AA:52:DC:46:B2:6D:BC
Certificate issuer:       /CN=600e212550694e7881193ed12faa52dc46b26dbc
Certificate serial:       01956DE7D13064EDD0D328DC0F0BE3946632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YA4hJVBpTniBGT7RL6pS3Eaybbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.mft
Manifest number:          07ED
Signing time:             Fri 07 Mar 2025 00:01:03 +0000
Manifest this update:     Fri 07 Mar 2025 00:01:03 +0000
Manifest next update:     Sat 08 Mar 2025 00:01:03 +0000
Files and hashes:         1: YA4hJVBpTniBGT7RL6pS3Eaybbw.crl (hash: x0ifnZuVoOzPtaXLtjZFOZ5eRkAFgpx4I4wJl57eg90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6d:e7:d1:30:64:ed:d0:d3:28:dc:0f:0b:e3:94:66:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600e212550694e7881193ed12faa52dc46b26dbc
        Validity
            Not Before: Mar  7 00:01:03 2025 GMT
            Not After : Mar  8 00:01:03 2025 GMT
        Subject: CN=9b6480a6cb08bc147b9167364278753205fdcc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:a1:6f:e5:ae:f6:d6:ea:7e:f1:6a:ea:ad:
                    c9:8e:26:f0:05:eb:90:3f:df:0e:0d:95:24:1d:5b:
                    34:9f:49:d7:1c:e9:09:b2:47:82:7b:c6:99:ae:c7:
                    4f:54:12:44:6a:79:81:1c:37:49:6e:74:7f:dc:75:
                    49:6a:da:50:b2:14:91:11:24:09:db:55:4c:e6:f9:
                    15:6a:83:fb:f9:1a:bc:4e:01:e7:c8:6a:f2:ec:cc:
                    9a:ed:f9:b2:a8:4a:57:d7:b1:fa:02:2c:e7:f5:ce:
                    cf:ce:8c:7b:ed:a6:60:5d:88:51:d4:60:a7:31:13:
                    83:e3:4a:1d:fe:31:9f:6b:7b:94:56:f9:6f:b1:bc:
                    10:c8:4a:4a:9a:24:0d:df:0f:ea:11:08:f7:9f:46:
                    fa:fa:45:b0:f7:d7:a2:60:bc:4a:78:21:5d:ea:86:
                    cb:f0:bd:b4:ed:67:f7:3b:41:00:89:58:28:bd:b2:
                    62:9b:45:35:dc:04:8a:f3:bd:d3:d9:bc:8c:1c:49:
                    69:27:ea:63:c6:78:40:8c:c6:eb:ae:bd:fa:89:6f:
                    b0:be:11:6d:52:ec:4d:47:59:27:79:bc:8e:16:09:
                    b7:62:07:41:35:96:70:2f:5d:2b:57:8f:de:20:6b:
                    e5:bf:5b:2a:b3:dd:89:e1:dd:fd:74:af:a5:e2:fd:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:64:80:A6:CB:08:BC:14:7B:91:67:36:42:78:75:32:05:FD:CC:85
            X509v3 Authority Key Identifier:
                keyid:60:0E:21:25:50:69:4E:78:81:19:3E:D1:2F:AA:52:DC:46:B2:6D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA4hJVBpTniBGT7RL6pS3Eaybbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3cf1a2-eac6-4769-b5c8-a7465edbefcd/1/YA4hJVBpTniBGT7RL6pS3Eaybbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e4:2e:39:9f:3d:96:b6:b2:4e:b9:47:97:96:63:92:20:31:
         d4:94:38:5a:74:67:7b:07:3d:e8:54:7d:d9:1d:5a:ad:13:50:
         3f:9b:56:6f:15:28:c5:53:ed:53:b3:b5:f3:27:66:84:9c:9f:
         cf:30:de:ef:51:8d:bd:35:37:13:a1:38:1e:b4:26:e9:4a:35:
         0a:6c:20:49:d5:fa:b7:6d:1c:a3:53:88:b2:b1:94:f3:4b:c4:
         d1:cd:dc:11:c9:c2:8e:c7:17:70:14:2e:af:ee:0a:0c:1b:e2:
         94:fe:29:e4:9b:97:0b:82:f7:a3:71:b7:87:78:bb:21:6d:29:
         a4:6f:f6:dd:c0:6c:01:f8:8c:d5:3c:7c:da:bb:94:24:b1:de:
         03:6a:a9:70:07:b7:93:db:4d:14:9c:7b:c9:7f:d0:f1:ea:0c:
         79:b2:02:3a:d3:21:8a:33:4c:83:fb:1c:8b:2b:7f:93:99:9b:
         79:a5:13:71:9f:5f:7b:bb:ca:b8:60:9a:16:4d:54:6b:54:c4:
         df:a1:94:7c:c5:42:a5:77:c0:69:1d:4d:4d:38:71:fc:96:24:
         44:a0:c0:d9:6a:8b:90:f1:7e:43:94:c0:03:a0:14:6c:2e:1d:
         3a:ca:95:d7:8f:d9:de:f7:6a:29:45:27:c2:ed:2d:f5:fe:6a:
         b9:3d:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:52:40 2025 by rpki-client