Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File:                     Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier:          tZ9stdnW84DUkVUPjWOk4AMS6saSCu/8CIKoyT2SXS8=
Subject key identifier:   26:AC:8E:E2:36:30:0C:1E:58:F5:47:2F:0C:6C:B2:26:D5:98:44:49
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer:       /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial:       0194BC3BC179A9C073B414C9D76B2827D238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number:          0856
Signing time:             Fri 31 Jan 2025 12:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:20 +0000
Files and hashes:         1: R2wMoqdkLDHB1BCsXc7koujD71w.roa (hash: FmALC+nsf+pUttlOP2g4qVc5yZKYgI7dAbntzXZ0Nqk=)
                          2: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: 0JuRFAYF6gT0l/2l750hOqgxlfh/RSwBASJ7bkSuylc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c1:79:a9:c0:73:b4:14:c9:d7:6b:28:27:d2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
        Validity
            Not Before: Jan 31 12:00:20 2025 GMT
            Not After : Feb  1 12:00:20 2025 GMT
        Subject: CN=26ac8ee236300c1e58f5472f0c6cb226d5984449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:4b:35:6c:62:e8:51:61:11:34:2c:7b:6f:
                    4c:bf:a3:c4:f6:da:f9:c8:f5:06:7c:02:42:bb:e7:
                    27:00:d6:20:a0:53:a2:a6:36:69:62:a8:35:4c:e4:
                    15:05:83:06:03:0e:19:c3:81:36:3b:8c:3a:8d:4b:
                    24:08:8c:2d:37:c4:c6:67:26:01:1d:76:f4:72:bb:
                    57:1b:8d:71:34:ef:3c:06:2c:fb:7b:8e:49:f4:a2:
                    72:90:33:ba:eb:f1:0d:e8:41:e7:a4:a7:14:54:e2:
                    c5:c7:4b:93:5f:e0:d0:8e:88:9c:48:da:63:7f:b5:
                    d4:9b:b8:6c:c0:a6:6d:e8:35:54:d3:bb:f5:ff:53:
                    f3:b1:6d:c2:7a:bd:47:f6:a9:e1:52:78:5d:b7:dd:
                    43:a6:dc:62:27:fa:7c:4b:7d:fd:04:1a:e9:72:77:
                    55:6e:b6:3f:4f:b8:83:b4:c6:db:f5:28:86:f8:04:
                    92:7d:97:96:fb:49:23:f7:d1:60:c3:aa:b9:87:dc:
                    3c:5d:55:6d:53:c2:4b:d3:ed:9e:66:ff:0c:c0:f4:
                    ca:4a:16:8e:84:06:36:d4:69:42:61:68:4a:78:79:
                    33:e3:96:7a:92:6e:f0:55:72:73:87:22:37:2b:ea:
                    5d:4d:d1:e7:aa:d5:e5:a5:fd:11:b9:65:14:59:3f:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AC:8E:E2:36:30:0C:1E:58:F5:47:2F:0C:6C:B2:26:D5:98:44:49
            X509v3 Authority Key Identifier:
                keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:2b:ca:5a:bf:30:ea:ee:4a:19:03:6c:20:7e:59:04:5f:
         04:f3:90:aa:f9:d2:b1:17:f9:cf:7c:ff:8d:b6:06:18:cc:42:
         28:b5:7a:57:0e:4f:84:aa:0a:44:ce:2e:75:23:f3:08:a7:f8:
         cd:2e:01:db:c4:47:5a:9e:69:c2:5d:f6:6d:34:a3:63:51:d5:
         45:82:72:76:34:99:13:c3:9d:0d:4b:73:71:cf:29:fe:2a:fb:
         02:ca:4f:d2:31:c8:ee:bc:87:75:26:9d:37:8f:83:0f:59:d5:
         86:d4:48:52:49:00:cf:52:fb:c1:87:df:34:0c:6f:ae:cb:36:
         df:89:3d:ec:75:9b:de:32:21:be:23:68:a0:78:51:8d:54:bf:
         23:a7:7c:d1:5a:3a:26:92:ac:0b:c0:3d:67:46:c0:32:41:62:
         73:b0:3e:ce:cd:ec:a6:bb:6a:76:cb:ec:92:43:fc:7b:e4:9d:
         67:b5:00:e3:8e:c9:1a:78:41:49:3a:e0:bf:68:3a:2b:80:a6:
         55:ac:53:b7:34:7b:20:7b:98:c6:24:c9:61:8c:e2:41:45:71:
         da:4e:75:79:3f:be:5d:6f:3a:ff:95:5e:b5:ef:c7:d8:64:ad:
         58:70:cc:f2:04:ab:8f:18:2c:a4:d5:4f:7d:e2:78:8e:9d:35:
         e3:b2:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:10 2025 by rpki-client