Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
File:                     UW2UBk9zhVXozjZaGVfWnnaICcQ.mft (raw, json)
Hash identifier:          ObXiqAtsdqujRzbmuW+ywM1GUQgm+bWZe5+fAWm3E8o=
Subject key identifier:   13:E0:A8:66:81:20:AC:57:07:84:16:A2:6B:85:32:92:3B:05:DA:D9
Authority key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Certificate issuer:       /CN=516d94064f738555e8ce365a1957d69e768809c4
Certificate serial:       0194BBCE826717A3EF7652223A741234FC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
Manifest number:          040B
Signing time:             Fri 31 Jan 2025 10:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:00 +0000
Files and hashes:         1: UW2UBk9zhVXozjZaGVfWnnaICcQ.crl (hash: Z/SVgnBnIt8nOC6mx0vDvp0D/4it1xCM+MRMKycnMDs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:82:67:17:a3:ef:76:52:22:3a:74:12:34:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516d94064f738555e8ce365a1957d69e768809c4
        Validity
            Not Before: Jan 31 10:01:00 2025 GMT
            Not After : Feb  1 10:01:00 2025 GMT
        Subject: CN=13e0a8668120ac57078416a26b8532923b05dad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f6:92:9c:62:60:4c:9f:39:2c:8d:f0:03:07:
                    53:c1:9f:ed:b4:6b:55:d7:22:06:06:31:74:21:a2:
                    18:a5:bc:8e:fe:3a:55:ac:f7:4e:76:f7:8f:cd:8a:
                    87:46:3a:09:95:4b:c7:2b:88:e5:13:1e:fb:96:56:
                    9e:0c:2b:da:78:af:4a:11:cc:1b:cd:d8:11:d7:5d:
                    4f:2d:a8:91:12:bb:e2:3c:8f:67:59:92:64:55:5c:
                    70:73:ed:eb:49:7e:01:f3:ff:35:4e:48:ad:c8:8b:
                    d1:be:19:70:47:98:ef:41:0c:eb:e9:d8:be:67:ff:
                    a8:1a:b6:11:33:f6:72:2f:16:d6:ab:a0:0a:38:9f:
                    44:07:37:ce:84:c1:51:a3:77:28:7b:47:96:4a:fe:
                    31:8e:26:0f:1c:f4:4b:c2:6d:78:55:03:7c:83:39:
                    fd:e8:40:de:80:34:39:59:d9:d8:cf:6b:e3:9d:33:
                    19:85:d3:74:a8:33:10:94:9c:ce:74:34:6a:84:1a:
                    e1:cd:b7:51:ea:4e:29:aa:7c:51:9c:03:b6:c6:b4:
                    61:ec:67:3d:5b:08:05:6f:84:b7:35:a4:0a:34:24:
                    79:ed:a0:3f:e6:f2:8f:d2:ed:06:e8:90:92:2a:dd:
                    95:bc:0e:b2:3c:f1:4b:4e:82:98:fc:30:9b:cd:2b:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:A8:66:81:20:AC:57:07:84:16:A2:6B:85:32:92:3B:05:DA:D9
            X509v3 Authority Key Identifier:
                keyid:51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:69:b7:04:10:77:51:f2:ff:de:bc:ed:44:d2:9b:9d:97:94:
         c8:3d:f6:05:55:70:a8:b7:4f:f4:fb:56:85:17:f9:18:6f:eb:
         69:38:4f:52:0b:f2:d3:4d:f1:df:09:d5:9d:d2:ee:38:9b:2c:
         2c:1c:13:f9:08:0d:2b:64:24:24:87:f6:e7:57:ca:2b:3d:5b:
         b5:20:3d:dc:ce:bc:18:75:9a:07:be:19:f7:ee:4f:63:db:c1:
         2a:6f:fe:50:45:ba:de:d5:f9:54:ea:be:37:21:38:b1:d9:74:
         37:04:61:2a:b2:d0:d6:dd:29:0a:f0:8e:11:c6:cd:f6:19:5f:
         e3:4a:87:53:c0:d7:fb:d7:4c:25:6e:d0:b2:0a:f0:46:11:f6:
         d9:d4:2e:1a:de:ee:1f:4f:09:e6:de:53:a8:50:c5:fb:44:09:
         5e:af:95:f0:cb:1b:9d:1b:be:70:d9:30:9e:7a:74:ac:a4:b9:
         d4:94:ed:bd:e7:af:72:8e:79:a1:08:97:05:3e:93:1d:c4:16:
         15:9b:54:86:37:98:e8:da:b5:83:14:0d:2e:cd:d0:1a:df:3f:
         24:8c:53:75:d8:6c:5a:df:27:d1:c6:09:25:9a:d9:81:f7:7e:
         ab:0b:bc:e4:85:88:00:3a:df:ca:4d:e2:b9:0f:0e:58:7f:78:
         16:f7:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:10 2025 by rpki-client