Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
File:                     uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft (raw, json)
Hash identifier:          th+7RsLPW+5dL54QGEfWaaHPKfn+jllRtwBU8mgx4ho=
Subject key identifier:   4B:CF:3B:03:9E:C3:90:9D:5F:30:AA:6E:4A:26:D8:9D:E3:0D:90:DF
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Certificate issuer:       /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial:       0194BD85314AE6584F551925E605FD4AE3B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
Manifest number:          0D98
Signing time:             Fri 31 Jan 2025 18:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:10 +0000
Files and hashes:         1: Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa (hash: JIMzy59RHLraK6rhor2VUFRVzGxoje0mc5nW26VOt9E=)
                          2: uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl (hash: USzx5ibVFlXhyDTbAWeXHji95g64z5x6SHDTi3ITU70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:31:4a:e6:58:4f:55:19:25:e6:05:fd:4a:e3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
        Validity
            Not Before: Jan 31 18:00:10 2025 GMT
            Not After : Feb  1 18:00:10 2025 GMT
        Subject: CN=4bcf3b039ec3909d5f30aa6e4a26d89de30d90df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:d7:8e:5c:4f:3f:a2:a3:e7:64:46:6f:e9:
                    a2:2b:db:3c:04:a8:08:2f:43:2e:9f:b2:5d:51:64:
                    ee:d7:4e:dc:6b:f4:fb:a9:37:3c:ea:a8:d2:01:08:
                    ee:0c:4c:00:11:25:81:dc:16:02:20:70:5a:38:73:
                    0d:ad:0c:0e:bc:62:ff:7e:10:ff:69:85:f1:c9:e6:
                    ab:bd:03:69:ca:bc:6f:0d:2b:d1:7c:f3:ba:75:19:
                    9d:58:72:4e:8d:2d:5f:67:75:4b:83:27:3d:b3:3f:
                    34:83:87:69:fe:8e:cf:3e:01:09:56:72:38:54:61:
                    c9:d4:25:12:54:4d:52:7a:18:ac:9b:ea:a6:fb:09:
                    77:04:4d:31:8f:af:66:1d:ef:bf:e9:5c:7b:a6:ce:
                    79:33:71:25:6d:28:10:d0:45:1a:69:9d:1c:85:a5:
                    66:0a:73:95:b4:30:86:50:b4:aa:82:bb:21:6f:08:
                    cd:1a:31:4f:b8:21:5d:e0:03:d8:99:ab:f9:1b:fb:
                    37:a9:15:12:12:20:31:0c:d2:5a:66:ac:ae:1e:98:
                    8a:4b:1e:ec:ea:4c:3d:08:ce:6b:a9:77:17:24:0c:
                    ab:d2:3c:1f:20:48:c4:39:60:ee:67:b4:62:d2:90:
                    f1:1c:52:ec:b3:7f:fd:83:11:0d:08:5c:ad:d1:f6:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:3B:03:9E:C3:90:9D:5F:30:AA:6E:4A:26:D8:9D:E3:0D:90:DF
            X509v3 Authority Key Identifier:
                keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:34:26:e9:6c:4b:44:7d:58:7b:7a:08:7d:b0:6c:0b:48:ca:
         01:02:19:b0:ef:84:b9:95:3a:91:31:fb:22:24:50:7c:7a:68:
         70:fe:af:cb:2f:6b:d2:9d:37:78:72:84:33:fe:62:c9:f2:4f:
         1a:9d:7e:a1:b8:dc:25:3f:5e:90:33:30:44:63:db:b5:4b:6a:
         9a:e1:66:4b:8f:de:2a:de:27:30:67:54:db:5a:d3:b2:ce:13:
         3f:c5:e8:e9:09:fb:96:a1:84:ad:69:21:31:12:2a:be:be:9a:
         cb:40:7b:8a:a6:dc:f9:66:6b:f5:a9:53:c8:2d:eb:95:ee:36:
         93:7b:54:29:72:f8:a7:20:eb:0f:54:10:47:95:8f:ff:75:92:
         65:a7:7b:46:7a:b7:ac:0b:44:a9:74:83:0c:e6:29:80:fe:9c:
         7b:43:42:99:35:d9:69:96:eb:8b:40:7a:7d:a1:b4:9a:39:94:
         1f:50:20:3d:7e:87:71:d5:9d:fe:58:c3:0d:35:74:16:3b:f2:
         ec:13:99:61:09:4d:8c:c8:56:96:ab:94:41:e1:22:76:8f:f5:
         6c:dd:0c:9f:e8:ba:55:cd:ce:59:ea:ce:24:76:8f:98:f1:a2:
         75:bb:ea:e6:a3:f8:3e:7b:88:a7:4e:b8:9d:85:27:8a:e3:24:
         88:9e:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:41 2025 by rpki-client