Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File:                     UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier:          FDNnmU8zGh21z8CqBnWkbItV2JoGKoFKySVOeBMbP8w=
Subject key identifier:   18:F3:6B:95:AA:26:56:54:EC:1D:5F:86:91:F5:3F:59:F1:D5:38:BA
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer:       /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial:       0194BC3C75F19F7BE50A4D19FD02FB42A20B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 12:01:06 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:06 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:06 +0000
Files and hashes:         1: JL64IYR_TQ5Xa-d3oTnZf7vCvf0.roa (hash: c5BJIDGV82v4laDV3iiKoaLBLmXbJfkmjmJFVhYfRik=)
                          2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: sRxylOiYQnDbotp0rzBKSiAhRlO+xga1EMfCQUZX9hk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:75:f1:9f:7b:e5:0a:4d:19:fd:02:fb:42:a2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
        Validity
            Not Before: Jan 31 12:01:06 2025 GMT
            Not After : Feb  1 12:01:06 2025 GMT
        Subject: CN=18f36b95aa265654ec1d5f8691f53f59f1d538ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:72:1d:d8:62:4a:4b:3d:bf:7f:7b:14:eb:
                    b6:dd:ba:92:40:87:60:73:1b:6e:1c:2d:eb:bb:fa:
                    7c:67:38:17:02:71:5b:1e:0f:39:ca:46:82:84:dc:
                    26:37:c8:13:4b:82:f5:62:f2:68:39:d4:82:0d:f3:
                    ee:73:f0:cc:8e:69:4a:81:b6:84:44:64:3a:bc:08:
                    99:66:3c:ae:7c:48:a2:a4:80:dd:ee:2e:e4:2e:ac:
                    20:4c:8e:6c:36:55:62:38:79:83:10:5b:d8:81:33:
                    70:56:82:c2:1c:f6:05:cf:d0:52:f4:45:61:7e:62:
                    a3:f9:4d:39:95:49:bc:e9:3d:ff:57:a2:96:61:c6:
                    6a:2a:14:c2:de:2a:a8:aa:f3:e4:ea:72:a3:e7:2f:
                    25:a0:77:05:03:7a:31:db:3d:3f:dd:ff:13:39:b4:
                    ad:59:06:a9:e6:85:74:b3:40:f5:ab:87:06:2b:49:
                    97:23:7c:1c:b0:f7:b1:32:6d:7c:fe:d3:ef:8f:33:
                    af:45:55:b9:64:b3:3e:44:f6:73:00:89:3c:3d:af:
                    d1:59:84:18:4e:f9:6d:c7:1e:82:49:8e:89:28:a0:
                    e0:5f:3a:21:04:83:f1:d7:73:51:9e:f9:e1:e1:71:
                    19:52:8a:3f:a8:92:c7:e1:08:85:d0:43:33:e3:18:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:6B:95:AA:26:56:54:EC:1D:5F:86:91:F5:3F:59:F1:D5:38:BA
            X509v3 Authority Key Identifier:
                keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:f1:7b:8f:07:76:6b:a0:dd:bd:45:8c:47:16:d0:7a:e7:
         98:66:28:8a:67:90:2e:ae:f5:6f:0d:ad:6d:e4:62:94:3c:a5:
         1e:ed:0a:57:eb:d1:6b:a6:52:79:c0:70:f7:89:05:57:e4:11:
         c2:d6:fa:57:66:fa:fb:26:53:1d:be:e4:58:4b:d0:f3:09:b9:
         9f:85:c8:de:26:69:3a:10:d8:c2:99:72:fd:47:be:10:28:31:
         5c:f5:ea:c2:43:14:3f:b2:74:d6:b1:9c:3d:fb:da:a1:e2:0c:
         9a:03:fd:19:21:4c:db:d3:95:6a:1a:7f:05:90:71:59:74:72:
         9b:e0:c4:b2:ab:c9:9b:56:ac:be:f6:b2:7e:31:1d:d6:8b:e3:
         cc:16:e3:3c:b5:66:ab:d2:7b:15:3e:05:72:64:0c:46:5b:eb:
         f9:98:4b:c5:9a:d1:7b:48:2e:e3:04:69:4c:c4:35:b0:67:97:
         d4:cc:5d:1a:21:48:13:10:00:e2:39:61:7a:89:24:55:73:ad:
         50:3f:9f:bc:69:fb:a0:6c:ed:48:32:84:a3:2c:be:3d:80:e9:
         aa:fc:14:6f:5c:69:37:00:fa:65:fc:bc:37:bf:a7:e2:92:c4:
         25:a8:e3:1e:72:dd:ac:f4:70:da:b0:bd:ef:45:e9:87:7e:9e:
         fd:6b:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:05 2025 by rpki-client