Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
File:                     Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json)
Hash identifier:          BZb6+v7oqopbH8cLCWNHf6JhYRbrDrZSUmH1PxmSKZ0=
Subject key identifier:   41:CF:92:7B:10:A8:E9:4D:4C:D5:3C:2D:EC:27:DC:B1:B0:8C:6E:C1
Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
Certificate issuer:       /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Certificate serial:       0194BBCED9F9A8DD1407DA763AB3C2E6DDBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:23 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:23 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:23 +0000
Files and hashes:         1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: iS4aIt0xiYD/E7YS1A2WppsRscaqnkNdvErxWpjagt4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d9:f9:a8:dd:14:07:da:76:3a:b3:c2:e6:dd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
        Validity
            Not Before: Jan 31 10:01:23 2025 GMT
            Not After : Feb  1 10:01:23 2025 GMT
        Subject: CN=41cf927b10a8e94d4cd53c2dec27dcb1b08c6ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:74:72:f0:b5:26:a5:e4:7b:57:bd:d2:7b:4d:
                    dc:1f:ba:7b:63:f3:8a:31:f2:f9:78:91:bb:50:31:
                    96:00:8b:a7:43:bd:50:63:e2:c3:29:5b:cb:74:52:
                    53:6e:fe:19:5e:b5:8c:5a:f9:9e:bc:88:fa:04:1b:
                    98:ec:5f:18:a6:33:dc:48:d0:27:57:f9:c9:7e:12:
                    59:a7:8e:1b:fa:ac:a6:37:91:32:84:54:68:27:62:
                    29:96:e4:22:d7:28:5d:e0:c6:e0:fd:4b:0e:18:51:
                    25:1d:da:b7:cd:43:2c:5f:6d:0f:6e:bc:3d:c8:46:
                    97:f0:4c:fd:66:42:56:b5:0d:ae:4b:be:76:c9:32:
                    c5:ff:34:d7:7c:7e:9b:ac:1d:89:19:5b:cd:5c:ad:
                    c5:4c:1b:84:cb:e6:f7:ea:5f:82:12:40:6f:ef:dc:
                    3b:21:1e:d4:f1:f6:c8:63:2f:c1:0f:e6:9d:5c:44:
                    8b:6b:03:24:5e:67:27:13:69:bc:33:ae:bd:f8:c1:
                    da:03:ed:4d:9d:b6:a5:0f:17:4d:42:29:b9:29:e7:
                    2d:70:dd:b8:3c:47:a2:34:5b:26:99:96:ab:93:be:
                    e3:23:36:42:56:62:9c:92:9a:74:5c:81:c4:f0:c4:
                    58:8f:95:f8:48:5e:b1:e3:b4:83:27:25:2e:79:78:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:92:7B:10:A8:E9:4D:4C:D5:3C:2D:EC:27:DC:B1:B0:8C:6E:C1
            X509v3 Authority Key Identifier:
                keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e7:9f:b7:8a:a2:96:f9:e1:16:e3:13:ae:cb:82:a7:f9:fe:
         17:0b:a0:cd:b2:46:38:1d:59:97:a0:fb:58:4c:52:85:54:b9:
         65:ed:64:e4:02:a7:11:da:de:f2:cc:e1:4e:99:54:2b:7d:b4:
         8c:8f:25:5f:6b:86:5f:3a:ea:19:8c:8d:f9:c5:3f:91:03:eb:
         ed:98:54:bc:3c:05:82:8f:0c:d0:54:15:e2:a1:46:58:d7:4c:
         4d:52:c0:0c:3b:f4:27:82:f0:4a:63:d4:96:5b:d5:55:f6:19:
         8a:e7:44:d9:8b:ee:2a:16:0b:d5:09:ea:7f:fe:c1:68:0e:40:
         91:29:8d:00:cb:2d:9f:1b:ac:15:4b:a8:a5:3b:5d:02:89:6e:
         9d:2d:70:5e:62:69:78:fd:ca:d5:67:86:20:c0:c1:26:57:85:
         36:f3:64:b1:54:3c:e6:c7:3a:c8:d7:23:45:36:8f:1b:a3:12:
         4e:d2:ea:eb:c2:cd:4f:7c:9e:f6:39:67:4c:cb:a0:a5:3d:e3:
         b0:a3:01:9a:ac:39:b4:a4:21:b4:af:15:4c:18:34:b2:43:55:
         de:cd:cb:4e:13:1d:cb:84:28:a6:85:f9:42:df:e5:aa:1e:6d:
         d8:92:d7:98:75:87:6f:39:05:ba:fc:b2:8a:63:2c:7b:2a:ee:
         99:db:75:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztn5qN0UB9p2OrPC5t26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmUyMWM5ZGY2ZDUyZmRhYzRhZTNiMGM4NzM5NjhlZjA5
ZWIyN2MwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
Eyg0MWNmOTI3YjEwYThlOTRkNGNkNTNjMmRlYzI3ZGNiMWIwOGM2ZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXRy8LUmpeR7V73Se03cH7p7Y/OK
MfL5eJG7UDGWAIunQ71QY+LDKVvLdFJTbv4ZXrWMWvmevIj6BBuY7F8YpjPcSNAn
V/nJfhJZp44b+qymN5EyhFRoJ2IpluQi1yhd4Mbg/UsOGFElHdq3zUMsX20Pbrw9
yEaX8Ez9ZkJWtQ2uS752yTLF/zTXfH6brB2JGVvNXK3FTBuEy+b36l+CEkBv79w7
IR7U8fbIYy/BD+adXESLawMkXmcnE2m8M669+MHaA+1NnbalDxdNQim5KectcN24
PEeiNFsmmZark77jIzZCVmKckpp0XIHE8MRYj5X4SF6x47SDJyUueXgnsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHPknsQqOlNTNU8Lewn3LGwjG7BMB8GA1UdIwQY
MBaAFFMuIcnfbVL9rErjsMhzlo7wnrJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zZTZkMzUtZGY5NC00MzBiLWE2Y2It
MDY0ZTBiMGVhYzNhLzEvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zZTZkMzUtZGY5NC00MzBiLWE2Y2ItMDY0ZTBiMGVhYzNh
LzEvVXk0aHlkOXRVdjJzU3VPd3lIT1dqdkNlc253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOeft4qi
lvnhFuMTrsuCp/n+FwugzbJGOB1Zl6D7WExShVS5Ze1k5AKnEdre8szhTplUK320
jI8lX2uGXzrqGYyN+cU/kQPr7ZhUvDwFgo8M0FQV4qFGWNdMTVLADDv0J4LwSmPU
llvVVfYZiudE2YvuKhYL1Qnqf/7BaA5AkSmNAMstnxusFUuopTtdAolunS1wXmJp
eP3K1WeGIMDBJleFNvNksVQ85sc6yNcjRTaPG6MSTtLq68LNT3ye9jlnTMugpT3j
sKMBmqw5tKQhtK8VTBg0skNV3s3LThMdy4QopoX5Qt/lqh5t2JLXmHWHbzkFuvyy
imMseyrumdt1lg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client