Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File:                     UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier:          E6kocCvPyl7tNZ99TnGFhbCgjIFkEsy5N3V1gNhHVKw=
Subject key identifier:   5A:F8:50:BF:03:F8:54:C7:A2:95:78:0B:A4:9A:C4:07:AE:84:FB:2E
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer:       /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial:       0194BBCDD95C640FF056CD36EECA96F71B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number:          07AF
Signing time:             Fri 31 Jan 2025 10:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:17 +0000
Files and hashes:         1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: KBEmR7y5fLNaZhNMTIbatQkpGH6N2WxNUk0NDy8Ypk8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:d9:5c:64:0f:f0:56:cd:36:ee:ca:96:f7:1b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
        Validity
            Not Before: Jan 31 10:00:17 2025 GMT
            Not After : Feb  1 10:00:17 2025 GMT
        Subject: CN=5af850bf03f854c7a295780ba49ac407ae84fb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:e2:b4:55:d3:e9:b6:a3:99:f6:6b:40:1b:
                    b2:98:8f:a5:43:32:49:f2:15:c3:be:a4:ea:1a:e8:
                    8a:9e:42:67:b3:87:b0:e9:97:dc:ce:b3:85:66:4a:
                    79:8f:47:aa:19:a2:be:b1:77:3e:69:08:32:91:3f:
                    9b:10:59:3a:50:02:fa:a5:d1:17:6c:79:48:db:80:
                    2d:73:de:b5:d5:4d:ca:13:0f:d2:32:50:b7:e8:6f:
                    6d:db:61:24:73:ec:e1:1e:19:eb:da:86:95:70:7f:
                    d5:a5:a2:0d:be:17:02:22:06:ee:47:cf:2b:65:90:
                    f8:0e:01:ec:7f:23:d6:9d:48:32:4c:11:7c:37:4e:
                    86:26:bb:02:31:2c:12:cf:61:c2:45:40:c4:8d:8d:
                    d4:0e:69:95:0c:b0:04:ee:40:88:65:3c:a1:19:ed:
                    37:0d:86:7a:f2:f9:7f:b7:11:2e:09:67:b9:e9:11:
                    0d:4b:87:3f:25:48:9e:c9:bb:7f:0f:b1:04:73:74:
                    87:ff:00:6f:c0:1b:9d:d1:d1:a2:ab:af:59:1a:27:
                    d4:0a:35:56:26:65:33:2c:35:c9:cb:ed:de:0d:69:
                    ec:e6:e7:07:44:09:55:de:90:23:f4:9f:10:78:25:
                    e4:6f:30:c1:c1:86:8e:5e:db:25:9c:ff:64:b6:56:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:50:BF:03:F8:54:C7:A2:95:78:0B:A4:9A:C4:07:AE:84:FB:2E
            X509v3 Authority Key Identifier:
                keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8a:d7:00:45:42:2a:48:de:13:9a:1b:33:fe:e4:08:cc:37:
         fc:5f:bb:83:00:ae:38:87:25:d6:67:ae:ee:16:ba:6b:77:78:
         66:34:38:7e:2f:cb:41:ed:77:c2:4a:a7:a7:66:cf:b1:33:6f:
         d4:10:e9:fd:34:07:71:ab:8e:9f:e6:2a:ec:67:be:9f:e6:ba:
         47:e0:34:a7:e0:bb:6b:88:2b:0a:d2:7a:cb:4d:ef:e3:90:68:
         50:4b:77:61:4c:02:bd:3f:ab:33:2a:68:ee:52:bb:6a:bc:16:
         eb:85:6b:22:99:ef:06:e1:2a:d6:7e:1f:23:ab:43:57:78:a5:
         6b:a1:ca:93:db:10:e3:2c:99:cf:e7:20:c6:95:25:5a:01:e2:
         8b:8f:5b:72:3c:47:5d:91:3b:05:d1:57:65:dd:51:ba:92:8d:
         ac:fc:d6:12:1a:3d:1f:c9:5b:82:0c:01:c4:3d:53:81:67:18:
         ad:ea:cb:65:9b:77:67:cf:2f:a1:79:8a:65:34:73:d6:bd:c8:
         a2:5f:b1:24:ca:04:09:ff:e9:b6:c8:98:79:8b:a5:e7:af:ac:
         88:69:28:2e:e4:17:68:a4:97:89:12:d8:0e:70:f7:59:26:e2:
         d1:a3:1b:e8:5f:e7:94:6c:1f:ac:7a:8b:b9:64:29:82:10:74:
         4e:a6:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:24:53 2025 by rpki-client