Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft
File:                     UCEgVRzt4dQIwdliiazjv-K9QKE.mft (raw, json)
Hash identifier:          Ad0dg27ZBl3jnqf4FUlyPR+C0aaoz2ippCuWzr/siiU=
Subject key identifier:   18:C6:1F:18:5E:8B:E0:94:20:23:03:CB:4F:A4:22:63:A2:65:15:08
Authority key identifier: 50:21:20:55:1C:ED:E1:D4:08:C1:D9:62:89:AC:E3:BF:E2:BD:40:A1
Certificate issuer:       /CN=502120551cede1d408c1d96289ace3bfe2bd40a1
Certificate serial:       0194BBCE6F44CC7E06B6D19F0BAA9E0D1BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCEgVRzt4dQIwdliiazjv-K9QKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft
Manifest number:          04A6
Signing time:             Fri 31 Jan 2025 10:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:55 +0000
Files and hashes:         1: UCEgVRzt4dQIwdliiazjv-K9QKE.crl (hash: 2oD24e3HkY7jpwUzX+HtzoHqF1cAfz8MviydgpYLNoA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:6f:44:cc:7e:06:b6:d1:9f:0b:aa:9e:0d:1b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502120551cede1d408c1d96289ace3bfe2bd40a1
        Validity
            Not Before: Jan 31 10:00:55 2025 GMT
            Not After : Feb  1 10:00:55 2025 GMT
        Subject: CN=18c61f185e8be094202303cb4fa42263a2651508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:c8:e7:18:50:3e:be:50:7f:65:f5:e8:ed:
                    23:de:aa:9a:3a:89:04:d2:2a:e1:9f:61:be:0f:a2:
                    19:f2:47:79:6d:c0:b5:2d:4d:04:6d:10:15:68:35:
                    38:7a:41:d4:60:94:0a:1b:55:9f:9b:ae:7a:e5:d7:
                    c3:2d:da:2c:87:32:19:4e:75:07:bf:2b:05:2f:e9:
                    56:1d:10:8c:3a:f4:64:f7:7b:cd:55:b2:2a:69:bd:
                    b6:6d:99:9f:d9:f7:63:90:92:31:09:77:88:bf:83:
                    52:22:b2:3c:30:26:de:64:a2:88:95:68:d8:e4:f6:
                    c6:4c:ef:99:77:f2:e4:1a:01:fb:9c:f9:45:3e:5f:
                    7d:6c:28:32:d1:82:65:1b:27:5f:7c:8d:c1:2b:13:
                    ef:4e:de:7d:b7:1a:29:ad:80:e0:e6:e1:40:89:b6:
                    2d:77:a2:07:c9:24:13:f6:c1:5f:96:e2:22:ef:40:
                    92:00:b6:d6:82:c6:22:a6:68:28:5d:c5:ae:7d:ed:
                    69:01:bf:db:78:e9:8d:91:8f:4e:e8:10:04:07:33:
                    6f:35:35:a6:e8:95:df:df:e0:80:6c:36:2a:66:ca:
                    f8:df:85:86:e0:32:8f:90:e0:5e:88:ea:ed:56:8c:
                    e5:5d:93:a2:79:10:0c:e5:b1:f8:71:f5:83:58:29:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:1F:18:5E:8B:E0:94:20:23:03:CB:4F:A4:22:63:A2:65:15:08
            X509v3 Authority Key Identifier:
                keyid:50:21:20:55:1C:ED:E1:D4:08:C1:D9:62:89:AC:E3:BF:E2:BD:40:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCEgVRzt4dQIwdliiazjv-K9QKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:61:98:c5:41:a4:b9:ab:5f:3a:28:fb:4c:0a:74:fb:5d:
         bb:f0:63:b3:f8:33:8d:85:6f:6d:d4:b9:71:6f:4c:9b:83:6b:
         62:6f:1b:11:9d:43:90:ef:aa:1a:39:60:5c:2a:6a:a4:e6:c5:
         50:92:36:c3:ac:6c:c8:ad:96:00:8e:c6:1d:1d:8e:f2:3d:97:
         23:44:02:f5:c4:1d:51:51:b7:64:a5:b7:2e:e5:c4:91:66:4b:
         3c:71:66:33:95:fb:d1:18:2f:59:a6:5a:53:b2:02:34:51:d3:
         6a:aa:67:5a:38:42:25:66:19:33:9c:4d:ce:ab:d4:18:2b:88:
         03:38:d5:57:51:b2:5e:91:11:d7:f1:e3:d6:8f:96:a1:2a:6a:
         0d:ea:a3:21:a8:eb:ef:35:91:ab:5b:7d:08:7f:33:89:db:43:
         6d:3e:7d:8d:71:68:99:45:7b:88:fb:51:8c:61:57:fc:66:46:
         aa:32:3b:24:d7:75:a5:05:53:b1:6c:8a:63:09:69:0b:59:5a:
         70:40:5f:af:f6:4f:cb:21:db:d7:3b:36:73:b1:f2:94:36:1c:
         8a:c7:11:d3:33:bf:39:49:a6:73:0b:ec:3e:71:29:12:ea:4c:
         d7:b1:9f:12:11:eb:b1:f9:58:77:09:36:d1:a3:08:98:0a:46:
         7f:9e:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:10 2025 by rpki-client