Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File:                     UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier:          3iKcomDuNazO28thTn3/KC8monikPeS4E5mcfa3YJRc=
Subject key identifier:   EB:93:BA:54:51:C9:01:48:A9:89:87:11:AC:D4:1D:D8:AC:06:4F:98
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer:       /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial:       0194BD17E354766902821D4E702533FD40F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 16:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:46 +0000
Files and hashes:         1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: Toy4BcHCOPdyOyIwJYnPoLF9EDKKNSFNgunQGoFaasI=)
                          2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e3:54:76:69:02:82:1d:4e:70:25:33:fd:40:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
        Validity
            Not Before: Jan 31 16:00:46 2025 GMT
            Not After : Feb  1 16:00:46 2025 GMT
        Subject: CN=eb93ba5451c90148a9898711acd41dd8ac064f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:a5:e0:3d:8f:65:0f:46:de:cc:f7:94:2d:
                    f4:34:72:ea:e1:37:20:1b:4a:2f:1f:7c:61:e4:2e:
                    cf:ca:86:19:56:d7:95:1b:a3:da:a3:fa:e5:aa:63:
                    5d:be:b9:30:71:cc:29:0a:8f:f8:6b:f2:52:e2:8b:
                    c6:1b:a9:d8:11:17:c4:99:d9:47:86:6e:97:93:2f:
                    4a:2d:a8:1d:47:c0:28:14:80:9b:05:ec:27:9e:84:
                    14:dd:2f:0d:a1:1f:8e:2c:b3:4f:6a:07:06:8e:84:
                    98:6f:b0:30:54:62:9e:3e:8c:56:63:8e:09:a4:79:
                    06:0e:56:c9:64:95:79:e1:5f:3a:6f:1c:a7:3a:5b:
                    c4:53:21:82:cb:73:b1:18:b7:4f:81:68:30:b3:bd:
                    9a:3a:be:45:9c:33:d2:32:03:a6:d7:b5:51:69:02:
                    89:ec:aa:a0:3c:7d:4e:c6:91:c4:da:c8:10:e1:ee:
                    85:00:13:d4:38:e5:90:88:a1:95:6b:30:02:07:61:
                    7a:72:73:34:b6:0a:c4:bd:ec:1d:bb:02:9b:63:b3:
                    79:ee:bf:8e:b2:1e:24:87:5a:18:bb:95:07:16:72:
                    91:35:12:cc:c9:0c:c9:2d:5c:f9:0a:58:5d:d3:06:
                    2f:3c:77:37:f5:4a:7c:c1:0c:1a:ea:e1:77:4f:9b:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:93:BA:54:51:C9:01:48:A9:89:87:11:AC:D4:1D:D8:AC:06:4F:98
            X509v3 Authority Key Identifier:
                keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:b7:96:85:ce:ac:74:1e:c2:6f:ab:ef:9a:9d:5b:bc:9a:
         8b:8e:78:2b:d8:3d:a3:2a:8f:fa:67:65:47:c4:a3:f7:fa:75:
         06:34:40:9a:d1:17:13:97:7a:2f:42:b0:a6:c5:1b:24:8b:39:
         53:9e:ec:b8:26:88:89:1a:38:ce:fd:88:42:47:21:7f:ca:4b:
         71:98:fe:48:b0:94:f1:b6:a8:86:96:b8:d0:b3:a2:8a:31:4a:
         29:c1:67:47:04:7e:06:49:dc:96:71:d0:e0:62:57:db:40:0a:
         d9:b3:a7:2e:cb:23:ce:2a:2c:ea:b6:35:e9:5a:b9:34:25:ef:
         f5:36:75:d5:4c:77:63:35:89:a6:ab:7e:f5:ec:a3:c3:2c:57:
         0f:d4:67:d4:85:88:2c:3b:02:bf:43:98:50:bd:8b:0f:f1:a3:
         ad:68:e9:c7:02:89:41:a0:7d:2f:ba:63:d4:44:d8:12:89:2b:
         94:f8:48:2b:d0:4b:9b:61:66:34:c4:c2:a2:9d:4b:3a:ee:46:
         ef:5e:c1:bc:45:08:30:e2:f2:6b:61:bd:19:4c:a4:1b:b8:f8:
         f9:f6:44:e1:80:5f:11:34:aa:f3:db:4e:eb:a5:5d:f5:40:1e:
         ef:29:f8:b5:a4:f5:75:ae:87:45:24:23:c2:af:27:3b:3a:d9:
         74:30:c4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:22 2025 by rpki-client