Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File:                     uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier:          WZbKQPfWh8YUp5UoY1MH0K36SQN3mtrVWv8IruM+4S0=
Subject key identifier:   E8:5E:53:E9:97:C6:68:5C:C6:BA:E0:BD:4B:1F:8C:97:86:6D:3A:89
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer:       /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial:       0194BC3C3CE0700D900725199EF3FD694BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number:          0AF2
Signing time:             Fri 31 Jan 2025 12:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:51 +0000
Files and hashes:         1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: 2jspsArMiTFVCN5meB/UG5TwgUeUkpVXegk0RZgwqQs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:3c:e0:70:0d:90:07:25:19:9e:f3:fd:69:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
        Validity
            Not Before: Jan 31 12:00:51 2025 GMT
            Not After : Feb  1 12:00:51 2025 GMT
        Subject: CN=e85e53e997c6685cc6bae0bd4b1f8c97866d3a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:68:36:cc:d0:7a:38:44:1a:10:e8:c2:5a:
                    5d:f5:6d:ae:84:a9:d4:66:23:a9:2b:f1:2e:a7:c3:
                    f5:d5:79:0c:04:e0:6f:63:b4:09:28:b9:d5:5a:f3:
                    22:13:08:d5:60:2a:d1:b1:af:ca:0e:5c:53:81:d0:
                    65:5f:bb:be:33:3d:8f:43:57:22:97:f5:0e:1c:69:
                    b5:5b:2a:cd:31:60:98:be:22:12:56:1c:17:17:74:
                    45:66:2c:0a:03:4d:73:c3:29:62:cc:53:f8:1f:5b:
                    44:35:d4:5c:5f:50:e6:e3:0f:44:99:a9:5e:81:10:
                    6a:ba:e1:ea:de:5d:60:5e:2b:f6:73:f2:6b:08:19:
                    f5:85:93:5f:b1:19:98:13:26:d4:7c:83:6e:97:aa:
                    86:4f:4e:b5:b6:67:27:ad:12:a6:52:22:7b:2c:d3:
                    72:a2:62:10:ef:7c:16:98:ba:15:52:89:4a:76:70:
                    db:07:a1:d3:2f:1e:a5:69:07:bb:59:b1:d7:e3:ac:
                    0c:2a:8a:18:2b:0e:c3:d4:f4:64:e6:90:85:6a:62:
                    fe:3c:f4:99:5d:5c:24:2f:24:02:4b:51:8e:ee:3f:
                    9c:33:b3:f6:34:d3:85:8a:e3:42:d2:f9:59:de:50:
                    04:01:70:ab:22:3d:5e:f1:a0:b9:20:e1:d3:a2:9b:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:53:E9:97:C6:68:5C:C6:BA:E0:BD:4B:1F:8C:97:86:6D:3A:89
            X509v3 Authority Key Identifier:
                keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d2:6b:b9:d5:f0:26:15:40:1a:4b:d1:b6:7c:02:1c:da:42:
         a3:b2:aa:a0:50:90:4c:7b:e3:52:0e:fd:2b:d6:e8:c8:5e:48:
         71:f3:d0:84:12:f0:ec:ac:59:c4:71:54:58:c1:7b:9f:80:21:
         a4:20:61:54:08:ac:cb:c3:0d:08:f8:fd:6e:67:e4:e7:e0:ca:
         32:7d:9b:07:fb:c0:16:81:46:32:f7:cb:e6:17:6e:9d:7c:52:
         63:95:2f:3d:d6:20:2a:89:3a:48:77:55:fe:ed:d9:e3:15:c8:
         f0:8b:85:4a:50:82:96:85:33:83:ba:a9:6d:f8:fb:34:8e:39:
         d0:28:94:d3:b5:ae:cd:5e:02:63:68:c5:94:1e:a2:cd:86:46:
         b3:dd:e1:1a:6d:3f:bd:46:da:35:2a:e9:10:54:21:7a:7e:d7:
         68:d0:98:8f:e4:7e:1b:43:3f:a1:31:68:0f:be:db:01:9f:00:
         99:99:97:67:24:7b:c5:24:37:3a:df:35:95:92:d8:44:e3:70:
         43:fe:46:87:62:ed:f8:34:b2:62:50:da:c8:e5:5d:01:d5:20:
         ad:85:d5:60:46:3f:a1:14:a1:d1:5a:43:bd:bc:d1:29:50:df:
         dd:9d:92:42:ce:61:fc:8f:e8:f0:25:8e:cf:22:55:3f:dd:12:
         cf:09:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:34 2025 by rpki-client