Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File:                     ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier:          8L44eSckgtHgXgm25QUKPdfGAjl1PjwRh2QTBBRNzdA=
Subject key identifier:   B0:CD:99:9B:56:FF:46:E4:DE:1F:4D:7B:18:D5:25:63:99:0A:F0:2F
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer:       /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial:       0194BC72E21AF6691E85826A9943ADFBC56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number:          11A3
Signing time:             Fri 31 Jan 2025 13:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:33 +0000
Files and hashes:         1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
                          2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: c07ssspxbliXlIaNMNiJCo7abyicoLWx0reUKGuUIgQ=)
                          3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e2:1a:f6:69:1e:85:82:6a:99:43:ad:fb:c5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
        Validity
            Not Before: Jan 31 13:00:33 2025 GMT
            Not After : Feb  1 13:00:33 2025 GMT
        Subject: CN=b0cd999b56ff46e4de1f4d7b18d52563990af02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:96:ed:59:8b:6a:48:a0:5f:b9:5c:ab:c6:
                    77:74:ed:64:2c:d3:92:21:ff:52:33:3d:c2:e7:ae:
                    f2:86:00:8f:99:e4:96:18:59:a4:e9:9b:bc:c1:c0:
                    78:63:0f:c5:c4:e9:a2:47:fd:2b:8a:15:2c:dc:31:
                    4b:6f:cd:c8:2d:c5:32:7a:f1:bb:ff:95:57:1b:19:
                    13:53:1d:6b:9d:c8:30:ed:89:70:d8:aa:05:23:c7:
                    c0:d0:c4:c2:01:f5:3d:0d:59:dc:3f:c3:e6:a4:33:
                    8c:6e:94:08:39:aa:cb:85:6e:2d:51:88:b9:7c:84:
                    f6:93:a0:8b:03:71:8d:95:b6:ea:0e:ca:b1:34:e6:
                    eb:e3:4b:2e:85:99:01:93:7f:55:b0:83:3b:ec:17:
                    44:71:ea:3c:84:f0:40:16:3b:ac:1c:0e:38:dc:59:
                    72:fb:f5:9a:7b:5d:13:c4:9a:f1:10:84:f5:8e:b7:
                    eb:ea:dc:03:7f:e3:d1:dd:5b:af:80:ea:1a:c8:f8:
                    ca:f5:04:bc:9b:44:f0:e5:33:fd:99:1e:8d:ac:5c:
                    84:88:d8:c0:45:d4:c7:7a:39:a3:88:68:a6:ff:68:
                    fb:c5:70:95:17:a6:5d:a9:cc:85:81:e0:33:2b:08:
                    eb:e2:bc:00:11:28:27:76:72:af:3b:a3:6a:6f:0a:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:99:9B:56:FF:46:E4:DE:1F:4D:7B:18:D5:25:63:99:0A:F0:2F
            X509v3 Authority Key Identifier:
                keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7f:09:75:a3:6b:5b:84:35:07:5a:1c:3a:c2:ba:66:a8:d4:
         0e:48:c1:d6:c7:49:1c:6f:bb:7e:92:2d:39:ef:5a:db:67:56:
         cc:81:52:51:c2:7c:df:c7:c7:0d:63:cc:86:72:27:4e:91:ed:
         ae:4e:8d:ba:d4:fa:91:eb:cf:ec:4b:c4:fe:f3:4e:c2:d2:52:
         4f:70:42:d4:11:10:7f:77:52:2c:39:3b:d1:20:f6:9d:00:22:
         34:e8:1d:43:fb:b0:0f:45:1f:36:2f:b8:6c:57:80:26:a2:9b:
         12:28:d9:16:1d:13:84:3e:20:32:94:f0:3c:d9:ad:f8:1a:bb:
         0c:3d:76:70:82:a4:79:1d:4a:9d:b0:11:62:13:bf:91:bc:53:
         5f:50:a9:36:8f:c3:45:51:c3:2d:e3:14:e4:69:2e:9d:a4:e1:
         cc:89:b8:08:7b:27:ce:81:93:89:99:3e:f0:50:bd:50:f1:f8:
         4f:73:01:62:68:df:1b:ea:c7:77:8b:f6:f0:a9:b4:75:9a:5d:
         ee:56:38:7f:ff:bd:9c:6f:69:6e:1e:87:f0:4f:1c:95:9b:96:
         d4:66:72:be:13:b3:d3:cf:10:8b:a4:3c:6f:c6:a0:8f:fd:07:
         90:18:4d:a5:0d:70:b9:0a:6e:b0:6c:ba:55:da:88:ca:c0:93:
         3a:59:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:06 2025 by rpki-client