Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          fRruxq3bcV8RyAlS/FWh5dUxRqRfGLHYJBUPXEP8FCM=
Subject key identifier:   D2:3F:69:92:54:D8:E1:70:DF:34:A8:71:18:FC:A2:91:A6:01:3A:5B
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       0194BD178C288E277F75D3B7DEAF7151F083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          0AA6
Signing time:             Fri 31 Jan 2025 16:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:24 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: c/c+uPKcWYj0mCpiuNKESeGztPVica3ZFVzrSjdPESg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:8c:28:8e:27:7f:75:d3:b7:de:af:71:51:f0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: Jan 31 16:00:24 2025 GMT
            Not After : Feb  1 16:00:24 2025 GMT
        Subject: CN=d23f699254d8e170df34a87118fca291a6013a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:a2:36:c5:70:0f:e7:56:47:1d:9e:ec:08:
                    cf:a3:54:34:da:0d:f8:8b:59:4e:bd:9f:ff:98:2b:
                    6c:cf:bb:83:e7:6c:97:32:c0:0e:c7:b8:a4:82:04:
                    a1:3a:01:e3:a1:3d:8e:a4:a8:b8:51:06:e7:60:81:
                    f3:c2:17:9c:b1:b5:52:94:17:2f:4b:bc:dc:d7:c1:
                    0a:78:fd:a9:da:c7:cc:1b:04:5e:d8:17:81:ba:7f:
                    c6:23:54:4a:f2:9d:8f:27:a2:ad:a7:4c:c5:32:20:
                    04:55:a3:90:4b:85:0a:bf:a5:10:75:76:b7:49:59:
                    66:f5:69:91:c5:4e:7e:30:b1:06:33:40:44:5a:05:
                    ab:7b:0f:cf:47:14:e8:b5:2f:a6:0b:b7:2a:d6:de:
                    1e:5a:0a:90:73:ad:4d:ac:2a:30:0c:4c:eb:d4:1d:
                    1a:f9:b5:a4:51:95:f6:a5:13:e1:68:8e:27:3a:8d:
                    d0:3f:01:f8:20:f1:6f:7b:3f:70:bf:12:9a:d8:39:
                    ea:44:6f:b3:2a:09:c0:f8:ae:ee:28:9c:ac:eb:51:
                    7b:26:85:59:0e:5d:e8:b7:7e:9d:ef:6f:cb:6a:21:
                    a9:4d:fe:64:fc:da:41:40:7f:88:cb:24:48:41:37:
                    64:7b:95:0c:46:56:4c:ee:18:0a:e7:2f:99:dd:38:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3F:69:92:54:D8:E1:70:DF:34:A8:71:18:FC:A2:91:A6:01:3A:5B
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:39:91:06:1f:31:ac:60:64:b5:34:8f:1e:bf:33:7a:18:67:
         46:e9:d8:a8:a1:eb:69:79:2e:dc:20:c1:36:c0:11:47:e3:c2:
         bf:71:8a:bf:88:a3:02:56:e6:ae:a8:08:ea:6d:ff:ea:95:5c:
         85:63:22:2d:87:b2:5e:2b:8e:b4:dd:37:58:48:fe:14:fd:22:
         5c:8c:0e:0b:c3:d4:27:e1:69:00:e8:46:aa:8d:fe:c4:0d:ce:
         b4:18:68:68:86:7b:db:81:d0:49:cc:b7:a2:dd:71:90:b6:de:
         e9:42:59:70:50:f6:e4:1f:71:d6:fc:3a:2d:16:74:db:eb:eb:
         ab:0d:1e:44:98:07:34:42:94:fd:e6:d1:dc:27:18:c9:75:17:
         c3:7b:cb:3e:8c:25:71:a3:b4:3e:06:bf:bd:c1:00:52:d3:e6:
         3a:2e:dc:b3:82:c5:09:8b:a4:06:1c:9a:da:0d:5a:08:a0:5a:
         ed:7a:49:73:5c:73:6d:8a:97:77:49:fd:73:4e:13:8e:36:67:
         1e:b8:b5:f6:64:06:91:b6:0a:4d:19:af:00:52:7d:c6:67:bf:
         6e:e9:2a:7e:4d:f9:a8:99:73:e2:cd:2e:a7:83:f6:fd:1c:a2:
         e9:39:a8:97:3f:87:6e:c1:05:e7:67:99:88:3a:cc:76:e7:30:
         96:73:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:13 2025 by rpki-client