Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
File:                     UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json)
Hash identifier:          dPkpeV9sYX6ecZUUiw1YTdLrAjfJde7eOedNTGCxF20=
Subject key identifier:   5D:69:4A:DB:E8:43:6D:BE:92:03:46:8E:8E:34:A2:30:3B:B6:10:0E
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Certificate issuer:       /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial:       0194BC04D1B6CD1B5F9E3B541D422B588043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 11:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:19 +0000
Files and hashes:         1: 1-PxoxI0pjeoIhSSKerY6tOEWuoI.roa (hash: lBboLe7L0MERYDzzwiB1Vs/DVbFyBwYxqUhr24nvp7g=)
                          2: Q6c7o6uPHQhvoxwmQLzyhtDVMdE.roa (hash: zg0a7LCWPIx/36rTK801mypOCjtsncvR5b3j9h5SrdE=)
                          3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: NxxpccYyy8GNrcnz7o7eoALpzNdhG6qR7hOnPXgDyf8=)
                          4: VWWtRqJbkAsb8dHkWnC7U1OCvf4.roa (hash: AKl6rPAajDxxJI7lqm70ylWzJOjVOPio/I4CI3XKjZk=)
                          5: najBQqT2olWE08kevELmXwGT57k.roa (hash: jNHLSsFQzYHW7iCGieIcoIMgADSGMSuS0qYYEJ2UrZ0=)
                          6: qaBXI4wwGXreuW0Ec50OaM6eig8.roa (hash: QyvTL1zDVNiNDlo1UO2uwprzV09ftV1cWpvfl0kl1WY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d1:b6:cd:1b:5f:9e:3b:54:1d:42:2b:58:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
        Validity
            Not Before: Jan 31 11:00:19 2025 GMT
            Not After : Feb  1 11:00:19 2025 GMT
        Subject: CN=5d694adbe8436dbe9203468e8e34a2303bb6100e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:da:f2:42:45:3d:f1:0a:d2:d2:34:fc:f1:
                    47:ac:db:8c:43:fb:56:13:48:03:1d:60:e4:23:82:
                    06:12:b1:d6:a5:4c:f3:7a:f9:1d:dc:86:17:12:57:
                    90:7d:ad:98:44:e8:bb:b7:ed:d6:d0:8c:67:e5:f2:
                    ca:23:bb:46:22:9e:dc:f7:f3:c0:15:29:dd:6e:c8:
                    8a:fd:2a:79:f8:af:2a:72:fd:63:6f:96:49:05:54:
                    b5:f8:19:69:6c:ee:2b:fc:af:ef:45:65:4b:5d:11:
                    de:d7:9e:59:1c:82:57:32:a1:9c:75:f0:80:ec:ff:
                    11:f6:da:ca:f3:44:03:2f:72:69:0b:47:54:35:a9:
                    bf:6a:84:e5:3a:c6:9b:24:7f:fe:45:2a:79:35:15:
                    30:d8:c6:2d:e0:2a:74:15:f9:0f:82:7b:2e:64:9d:
                    f1:64:dd:40:1f:2e:23:41:34:d5:65:26:61:d8:df:
                    8f:f6:25:87:41:0b:f0:7c:09:63:02:ce:91:91:dc:
                    77:5c:d2:cb:a2:28:53:28:c0:a2:80:c0:f4:23:4b:
                    b1:23:5d:34:13:92:f5:da:21:b3:27:9a:55:e5:7f:
                    6f:d0:dd:f4:2a:06:7a:de:2f:f3:a6:59:63:05:e5:
                    b2:c6:8c:44:4b:aa:9d:9f:be:e1:fa:a0:a1:39:cd:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:4A:DB:E8:43:6D:BE:92:03:46:8E:8E:34:A2:30:3B:B6:10:0E
            X509v3 Authority Key Identifier:
                keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:8d:68:4c:c2:d9:30:c5:8c:f1:17:2a:d7:d6:80:34:05:
         96:44:cf:b0:c6:ba:db:72:d1:a8:c4:bb:90:06:41:13:5d:91:
         9f:17:8d:43:2c:61:f4:16:60:89:9d:df:fe:ad:bb:1a:9e:91:
         db:95:d0:6c:3a:86:a3:d5:ff:a1:3b:de:88:c7:d2:3f:6e:c0:
         c2:42:89:aa:2f:bc:55:f0:c8:18:78:41:16:6e:0d:fa:56:2c:
         44:52:e5:bb:08:8e:d1:f5:8d:9f:31:21:e7:35:2e:f8:b6:22:
         2c:c2:4b:ff:1d:be:cf:38:93:26:81:3e:38:26:9f:3e:fa:8a:
         05:9b:e4:bc:6a:61:9e:c4:61:69:ab:75:df:88:34:af:a9:11:
         a2:85:36:b8:4f:a4:55:53:24:ab:71:a2:58:d4:9e:65:14:f9:
         f2:b0:a8:27:a8:7d:3e:a8:c8:b3:41:58:82:b6:d8:85:6c:ee:
         cd:f9:9c:05:19:51:9d:39:48:ad:17:02:fd:bc:f7:31:d8:dc:
         ec:e3:85:20:c6:2a:12:45:aa:6c:9a:29:5e:e5:9b:a6:1f:71:
         c9:35:85:95:f7:37:18:bd:b9:88:08:97:a9:9e:9e:65:62:36:
         93:6f:23:c3:3c:25:79:d1:9d:5f:ac:29:14:23:17:1e:1a:13:
         b9:98:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:28:01 2025 by rpki-client