Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
File:                     uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft (raw, json)
Hash identifier:          2PB9DGB4GRcnvCbrwNT31Tw6tNaNa21PeFLN8Evo/uI=
Subject key identifier:   C4:2E:E0:A2:36:62:67:59:3A:18:8B:23:34:04:0B:D9:A0:C2:EF:14
Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E
Certificate issuer:       /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
Certificate serial:       0194BC051383F234E1D4408D42298D9CF121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 11:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:36 +0000
Files and hashes:         1: lcVRgFmTlCcww53NFkFkK4iGqbM.roa (hash: VtMzZFJ3NTiMK6oaatZagMMBJQTfT5IjLjDY1x6iB7w=)
                          2: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl (hash: 1oP9kC1Ki2xIo7B+yb7w6v8vQP0XErDgTpjOdWv67QE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:13:83:f2:34:e1:d4:40:8d:42:29:8d:9c:f1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e
        Validity
            Not Before: Jan 31 11:00:36 2025 GMT
            Not After : Feb  1 11:00:36 2025 GMT
        Subject: CN=c42ee0a2366267593a188b2334040bd9a0c2ef14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:82:25:a1:09:f7:57:8a:6d:2f:30:0b:3b:
                    e2:d1:08:90:c0:8d:3a:b6:7b:49:fa:e1:70:5b:3f:
                    a7:3c:3b:45:a0:7c:7b:90:75:70:85:7c:d6:11:60:
                    82:25:2f:f9:20:a0:f3:91:96:64:8d:41:1f:68:72:
                    c5:af:00:09:b7:62:e7:5b:9d:27:6e:d3:86:d4:10:
                    71:ee:a5:dc:c1:4a:7e:06:2d:1f:c2:b9:67:14:52:
                    00:7b:0a:05:76:4e:9e:4d:2b:70:51:60:40:31:21:
                    e1:e4:d3:ad:96:2a:2f:09:85:80:68:ca:b1:5b:6d:
                    e8:a2:0e:77:14:54:e6:b3:1a:2b:f9:53:e1:1a:9e:
                    ef:66:1b:24:df:6e:03:4d:c1:11:f2:1b:04:f6:78:
                    b3:b1:d2:0d:d4:01:c7:e8:cc:be:94:a1:52:e8:73:
                    60:a2:f7:84:da:3a:a8:91:ef:5a:43:21:8c:64:53:
                    33:23:d6:87:50:a2:99:9f:78:0f:22:bf:62:9a:f7:
                    27:ae:a5:60:ed:06:ca:57:ba:be:73:de:c3:db:13:
                    87:bd:30:4e:9a:d8:f9:96:3c:de:83:c5:80:78:8e:
                    81:21:4f:9a:b7:2c:45:48:45:fb:9b:ac:79:d5:06:
                    25:64:92:f9:4a:24:85:34:06:83:f1:dc:73:a0:e8:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2E:E0:A2:36:62:67:59:3A:18:8B:23:34:04:0B:D9:A0:C2:EF:14
            X509v3 Authority Key Identifier:
                keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:1b:dd:5e:ca:e4:5e:de:c8:cb:4b:51:cd:5e:b7:dc:3b:
         80:cd:10:b7:72:c2:63:d0:f8:13:eb:8c:f1:38:18:fd:35:4c:
         99:b5:83:12:96:91:79:ea:6e:18:49:7a:49:3f:fe:4e:f9:4a:
         98:91:07:c4:97:b9:6f:95:f5:a6:f1:f9:cb:35:91:c2:3b:58:
         2d:39:5e:c9:1d:70:44:84:b9:d5:79:71:4a:36:bf:1f:cb:4d:
         df:f7:9a:7e:3e:23:80:dc:83:d4:7f:a7:14:05:9e:0d:9d:27:
         94:cc:d8:a1:07:af:60:50:2c:a0:c3:0e:0f:cb:9f:da:e4:28:
         8c:69:ba:ef:a7:91:df:dc:4c:f2:82:68:c2:74:f9:b0:25:7d:
         6b:b3:4b:13:63:12:c3:ea:7e:38:1e:a0:c9:a8:2b:47:6e:91:
         d9:19:9e:33:be:a7:6d:d9:3d:87:74:8b:8c:2c:82:ba:7d:d2:
         2b:67:b6:3c:35:c8:27:79:84:c4:5c:59:f1:e6:ab:20:00:e7:
         fd:29:45:fc:ff:f0:69:bc:c0:e8:ab:4c:22:ce:e9:60:3f:ac:
         d6:3b:01:5e:eb:60:67:8d:30:21:5e:73:5f:89:bd:59:4d:77:
         93:06:22:10:81:57:15:bd:92:a1:d2:a0:e4:ff:b5:92:e9:2a:
         6f:63:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:24 2025 by rpki-client