Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          uanh4ihxNktvAiBgRES/NZEQErpUceufJchefDOkWd0=
Subject key identifier:   39:8B:74:E1:79:F0:8D:DB:D4:1B:90:95:1C:9B:5F:3A:DD:02:02:C3
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       0194BD4E69AB9CF054C5756320E55AA55FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          0C43
Signing time:             Fri 31 Jan 2025 17:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:20 +0000
Files and hashes:         1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: 6SdrnrnkWZ80stawebfSCeGqSSiYqdYbtEiERB+bhII=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:69:ab:9c:f0:54:c5:75:63:20:e5:5a:a5:5f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Jan 31 17:00:20 2025 GMT
            Not After : Feb  1 17:00:20 2025 GMT
        Subject: CN=398b74e179f08ddbd41b90951c9b5f3add0202c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:a5:e9:86:b6:08:e1:b3:eb:ba:21:84:44:
                    9c:ae:d4:30:80:b6:e4:ae:17:a8:95:38:93:c5:fe:
                    ef:01:8f:71:63:cd:98:a8:44:11:0f:f2:cc:a9:37:
                    ad:7b:80:ea:5a:3f:cd:68:63:35:b5:1e:62:db:e3:
                    3f:3e:b1:4b:11:09:ef:a3:2e:e9:cb:a2:5f:65:96:
                    55:fa:67:98:38:0d:e1:1d:17:72:53:b0:8b:8f:22:
                    5c:7a:93:3a:fa:59:46:0f:90:ac:ee:e8:18:9a:4c:
                    71:c6:3c:1a:62:dc:6c:41:d9:ae:08:67:d0:42:45:
                    fd:98:62:26:52:3d:fe:9b:c8:63:23:43:3b:27:50:
                    45:4d:40:fd:aa:7c:89:39:bd:61:09:e3:c5:2b:b0:
                    f9:d5:63:5f:5e:1f:b3:9e:3e:b8:4e:36:8c:d0:75:
                    89:0e:3e:cf:9f:41:76:e6:e2:cd:0c:01:f9:05:0f:
                    5e:20:fd:9e:d3:aa:a8:a2:39:a0:c4:cb:65:3b:54:
                    69:76:7b:6d:41:fb:9f:c5:06:dc:aa:9f:55:b5:40:
                    98:ff:c3:25:cb:04:7b:f2:53:de:5f:2b:94:fd:d2:
                    03:ad:f9:f8:fa:88:ba:94:20:2c:3c:47:4c:c2:e5:
                    d2:d1:11:f2:a7:81:1d:c2:66:e5:00:ea:ee:b4:41:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8B:74:E1:79:F0:8D:DB:D4:1B:90:95:1C:9B:5F:3A:DD:02:02:C3
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:73:9e:0a:6b:fd:00:c9:8e:f9:97:c6:a6:a3:25:66:90:51:
         57:83:7a:dd:95:73:d5:a7:43:d9:2e:bd:25:fd:c2:67:0b:a9:
         c4:78:7b:3a:34:2b:3b:7e:70:b9:af:ef:2a:0c:19:e0:dd:31:
         7a:f6:f1:93:35:0c:e0:9a:50:17:3d:78:62:58:18:38:f2:5b:
         48:b4:78:94:c9:98:3e:6d:73:13:0c:48:c6:db:fa:27:24:1d:
         c8:98:2c:55:c6:61:b1:e2:3b:85:03:e7:4d:2e:91:dc:82:4b:
         f8:5c:96:05:c4:1f:b8:23:22:b2:01:2c:ad:2c:cf:c1:d2:2a:
         22:15:4c:41:65:c1:d9:44:b2:ac:25:fd:01:81:1c:1b:f8:bc:
         8d:bb:c5:7b:08:d9:30:8d:0a:72:9f:78:61:82:09:9e:43:cc:
         a6:db:70:2c:59:b4:cb:8f:91:49:2f:8f:e1:c5:94:5b:3f:af:
         96:9d:31:b6:59:80:b9:90:84:7c:f1:37:7c:86:a7:38:b1:99:
         cb:eb:36:3c:67:1e:73:0e:34:66:05:eb:92:cc:c1:8d:77:0d:
         6a:5b:f3:a1:52:dd:c8:74:5f:77:e6:b8:8f:33:26:f7:49:ba:
         07:54:59:bb:52:28:a0:63:01:47:f2:b0:62:d5:25:23:2e:d5:
         93:fc:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:36 2025 by rpki-client