Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File:                     UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier:          drisUaBEdJJhC1SXL08nsuNN73gWhSGJ/DHfsE5towE=
Subject key identifier:   20:FF:0C:45:9C:7B:48:C0:8C:84:F8:30:03:CE:70:14:5B:C8:F2:16
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer:       /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial:       0194BBCEF9B6031202B61A131051360DADAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number:          0F15
Signing time:             Fri 31 Jan 2025 10:01:31 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:31 +0000
Files and hashes:         1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: twNZPTtPofnko2kiXDMltACtHzS5Q47QNZngzza0Fa8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f9:b6:03:12:02:b6:1a:13:10:51:36:0d:ad:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
        Validity
            Not Before: Jan 31 10:01:31 2025 GMT
            Not After : Feb  1 10:01:31 2025 GMT
        Subject: CN=20ff0c459c7b48c08c84f83003ce70145bc8f216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:90:91:bf:69:c9:4d:15:a2:28:d4:92:d7:
                    08:0e:9d:f6:6f:b2:99:5a:14:d3:8c:88:dd:b3:f5:
                    71:1a:ff:98:07:b0:8d:a3:5b:22:3c:24:8e:3a:2f:
                    b8:ee:5a:c6:c4:9a:ac:67:d6:cf:cd:0d:16:9d:08:
                    8d:5c:a3:63:97:9c:5a:aa:e8:0f:28:51:c7:87:e5:
                    b2:da:8b:68:8c:8b:8e:89:63:0a:8e:a4:b3:af:69:
                    48:d0:24:a8:87:ce:f6:00:4e:22:8f:7e:78:32:84:
                    b7:49:ea:91:75:4a:8f:72:b5:10:f9:3b:9a:d9:65:
                    c8:97:49:b0:35:98:3b:b9:06:ae:17:95:2e:73:23:
                    f7:0e:0a:b2:c2:d5:62:bb:b8:23:63:5f:61:40:8f:
                    e8:e2:89:e5:cf:3d:59:e1:a9:04:36:fe:47:5f:3f:
                    54:4f:e7:0d:5f:56:26:e2:0c:ed:24:fb:8d:96:58:
                    08:99:63:7d:5b:5f:89:e8:78:38:af:83:cd:40:e1:
                    f0:5c:bf:89:9f:c3:3b:37:42:c3:96:2d:3d:5b:92:
                    e8:61:5c:dc:d8:2a:c3:e1:99:12:df:be:46:b9:e5:
                    96:ab:69:64:4e:26:24:d5:f0:dc:67:db:21:e5:08:
                    f8:87:d5:44:21:3d:28:2c:ac:11:e9:59:dd:c8:fa:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FF:0C:45:9C:7B:48:C0:8C:84:F8:30:03:CE:70:14:5B:C8:F2:16
            X509v3 Authority Key Identifier:
                keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:2e:b9:f3:11:06:99:a6:e3:d7:d3:d4:68:a1:8e:25:cd:
         15:b9:75:bc:f6:7e:25:5d:89:b7:2f:61:6e:9c:b0:34:bd:6a:
         5a:cd:35:2c:02:ea:d2:1f:08:36:3a:e7:e5:96:91:ce:63:76:
         d1:c3:54:ab:a4:35:00:6a:0c:9f:7e:1b:0e:19:9b:fa:9d:47:
         9c:d9:aa:bb:68:c4:2f:73:c5:ff:7d:17:17:82:b5:41:25:d9:
         a3:67:a4:65:c8:5c:6a:56:cf:16:a1:59:4a:be:0b:91:af:a3:
         1e:90:c2:88:b6:64:a1:e1:7d:88:85:83:90:08:1b:42:8d:bb:
         79:60:4b:f1:8e:a5:9c:34:90:e5:7d:a4:b2:61:f2:64:5b:d7:
         ce:0c:e0:a2:4f:61:9c:cf:f3:87:62:53:84:7b:16:bc:af:a6:
         2f:ab:a7:bf:8d:83:d6:42:f8:3e:3e:53:ff:a7:98:d4:e7:cc:
         31:99:55:6d:e7:fb:f3:6e:07:66:15:07:38:48:ad:d7:3d:8a:
         50:64:69:a6:47:1c:2d:57:57:41:7b:76:92:ac:ba:0d:f4:39:
         6c:a4:24:4b:cc:f6:75:0f:5c:c1:6d:2a:d9:7e:05:58:e0:f5:
         e7:f3:a1:a4:2f:ed:1d:ca:b9:91:22:a7:08:9f:77:70:8c:96:
         d7:77:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:55 2025 by rpki-client