Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
File:                     umwdlY_wlMrxNGzGb3FszrbcUAk.mft (raw, json)
Hash identifier:          qAE28jDFZLJ1p3GdcfWEPet0sJ17sov1asArIaD8oqI=
Subject key identifier:   70:8C:1E:B5:17:02:3A:0B:BC:87:27:6E:28:F8:A6:0A:5E:9E:B1:1B
Authority key identifier: BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
Certificate issuer:       /CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Certificate serial:       0194BBCDCE5DB06A857FCC7AE58AFAEEE8E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
Manifest number:          10EC
Signing time:             Fri 31 Jan 2025 10:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:14 +0000
Files and hashes:         1: qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa (hash: gz7wbf7RuIAjOfumVR0HGG8azx+yCAuEY5X4YlBO90Q=)
                          2: umwdlY_wlMrxNGzGb3FszrbcUAk.crl (hash: MxB36oMqul5YymsHFJ7j2sE2z1fJVLKmJSvprbUmshU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:ce:5d:b0:6a:85:7f:cc:7a:e5:8a:fa:ee:e8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
        Validity
            Not Before: Jan 31 10:00:14 2025 GMT
            Not After : Feb  1 10:00:14 2025 GMT
        Subject: CN=708c1eb517023a0bbc87276e28f8a60a5e9eb11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:48:88:e6:a1:75:07:86:b2:40:71:7b:9f:
                    e6:10:e7:43:f4:99:13:98:04:f0:f6:a8:b2:6a:42:
                    07:d9:ec:f1:f1:01:05:95:dc:21:1b:b5:e9:72:6a:
                    3a:9a:4b:69:d4:86:21:12:6c:77:a1:ef:64:af:e7:
                    ab:e2:7a:9c:b4:df:b1:8a:c5:59:17:84:90:d2:d8:
                    ea:48:38:46:ef:82:dd:7b:61:f2:ff:1a:43:6f:cf:
                    df:11:ff:af:9c:ae:d0:c3:51:c2:ee:6d:b1:36:6e:
                    78:ec:6e:c4:b2:66:41:88:df:02:be:f4:40:a3:e8:
                    eb:c8:2d:49:f3:16:eb:73:98:e5:1e:2c:07:09:c9:
                    44:aa:06:71:73:29:f6:7c:8b:7f:f7:58:2f:9c:bd:
                    06:49:9e:19:b3:27:99:0b:fe:a5:59:da:c5:30:30:
                    b7:6c:37:3a:b0:55:b9:de:28:9a:21:6b:79:b5:a0:
                    f3:f7:8b:a1:d4:e7:48:cf:36:b3:6d:a3:f0:2b:23:
                    10:ac:b2:07:3e:c4:3c:f2:12:05:2f:81:1e:9c:aa:
                    1c:2f:da:df:0b:a8:ef:e4:e5:0d:62:af:96:72:98:
                    dd:fb:d5:b0:03:f8:46:1d:d9:93:c3:87:94:94:74:
                    e9:17:dc:ce:2a:eb:2b:f6:82:2e:f3:df:64:bf:d0:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8C:1E:B5:17:02:3A:0B:BC:87:27:6E:28:F8:A6:0A:5E:9E:B1:1B
            X509v3 Authority Key Identifier:
                keyid:BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:51:64:b8:dc:a0:f4:e9:2d:5b:f6:c5:d2:67:50:c3:03:
         45:22:46:83:fe:82:e6:a9:61:7f:cb:de:3a:44:54:f8:40:e8:
         df:8b:3d:09:5a:ba:05:22:f6:50:ee:d5:7a:aa:b0:93:14:36:
         9a:bb:16:2d:cf:15:28:fe:53:1e:d7:8b:0f:2b:25:01:5f:a0:
         6b:d2:c1:1f:20:4f:e7:2d:4e:b7:6c:ef:a9:7d:7a:d2:77:db:
         6f:1f:0c:ac:2f:7e:f5:7a:44:cc:5a:01:13:64:ea:b3:bd:3a:
         c5:98:00:ae:04:fd:5d:c6:3c:45:28:20:6e:40:0a:a2:72:89:
         ed:7d:c4:1b:84:53:97:b0:81:c9:96:f8:27:76:d5:3d:ee:11:
         3a:31:34:08:01:09:09:92:d6:49:56:4a:3f:bf:ce:3f:64:61:
         c3:e3:54:16:b8:71:b3:1c:6a:21:5f:07:d2:28:bf:a3:65:e0:
         d3:31:82:9a:cc:59:87:90:19:6d:8f:4b:d4:05:0c:29:9c:81:
         0c:78:e1:6c:de:5f:f7:3b:bd:b9:b2:5c:92:a9:97:96:41:a3:
         c8:d3:f1:26:dd:48:56:90:58:7b:5a:bc:ff:21:d5:c1:ac:3b:
         34:a4:92:9e:b7:b2:aa:c0:3b:e6:f1:0b:5b:fe:11:35:28:28:
         32:6b:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:18 2025 by rpki-client