Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
File:                     UnrRl4bdVLNaS5atP7xXkyeORHQ.mft (raw, json)
Hash identifier:          vaQkUbdgz0/OEMcLFZZ+KVX77e6YOPKn7x6rkzAMmQM=
Subject key identifier:   6C:98:7F:90:59:2C:BB:06:E3:3A:48:78:29:38:98:4B:77:04:FD:D2
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Certificate issuer:       /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial:       0194BCE0BE41D6787D31289E682D15DDBF19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
Manifest number:          12C7
Signing time:             Fri 31 Jan 2025 15:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:32 +0000
Files and hashes:         1: KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa (hash: AJw2YCH/VuTSNYo91kTytnKXtEZrdqVQkspms9NQoho=)
                          2: UnrRl4bdVLNaS5atP7xXkyeORHQ.crl (hash: kcGd5y3FW8n80OTLPEnVNJztslaF5286WX3ols8J/n8=)
                          3: bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa (hash: 7MucZNPxoy6xDKGVNK0X6Z3pxNOoq8ocl4uzKyv0GQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:be:41:d6:78:7d:31:28:9e:68:2d:15:dd:bf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
        Validity
            Not Before: Jan 31 15:00:32 2025 GMT
            Not After : Feb  1 15:00:32 2025 GMT
        Subject: CN=6c987f90592cbb06e33a48782938984b7704fdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:c2:5f:01:bc:82:05:37:66:41:26:d8:f6:
                    99:5e:c4:1e:f3:4d:96:c2:3c:d6:e5:e4:a0:3e:d7:
                    b8:4d:aa:b6:3a:4f:bb:d5:80:a2:a0:2a:5a:92:a7:
                    4e:77:90:8f:ec:47:14:2b:63:6c:7c:fb:ab:8b:5c:
                    cf:54:ae:48:5e:2d:96:22:47:51:80:05:d7:6c:db:
                    8b:9e:25:ad:de:cf:40:cc:f9:c9:0d:c6:68:29:6f:
                    50:b1:e9:a6:40:87:ae:1c:50:1b:08:46:49:1e:76:
                    08:9c:12:60:ea:4e:04:c2:43:8d:7e:5a:a4:86:e7:
                    f8:68:59:38:2b:75:ba:07:84:bd:dd:62:64:d0:42:
                    aa:42:11:59:b4:79:5d:9c:14:75:c3:08:13:92:7b:
                    f0:35:b1:5c:68:57:6e:9d:c9:c1:ac:e5:45:5d:e5:
                    4f:35:0a:d4:81:8d:eb:f3:54:6b:87:7f:a0:db:a2:
                    c3:03:7e:93:28:89:b8:e6:1a:01:f8:84:aa:ff:fd:
                    32:a1:d8:a8:aa:7b:c4:50:fe:56:6c:1c:a3:31:ed:
                    a4:9c:b0:54:42:02:b3:6d:19:3a:30:42:d5:76:66:
                    22:e9:8c:b8:7c:fc:b8:f6:c7:0f:e6:0b:95:1b:83:
                    72:a9:79:f3:fa:19:55:54:48:d2:09:e0:07:c0:ff:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:7F:90:59:2C:BB:06:E3:3A:48:78:29:38:98:4B:77:04:FD:D2
            X509v3 Authority Key Identifier:
                keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:04:07:3d:56:5c:66:e6:a3:7e:ce:60:11:e9:00:29:e6:49:
         e2:4d:07:ad:a8:39:38:07:c4:d9:3a:b5:16:96:e3:b9:9b:df:
         d5:3e:95:66:bf:da:de:33:64:d7:6f:c6:d4:3f:2c:b1:94:8d:
         2d:76:01:5e:e8:81:dc:ba:86:8f:34:a6:69:81:3e:79:cb:35:
         fe:29:41:91:ac:d6:4c:f5:91:b5:9c:2d:3a:f0:29:3a:91:20:
         b6:34:4c:a0:c6:38:f1:fc:55:86:89:b4:b5:76:8b:dd:bd:19:
         8a:28:d5:ad:a1:e5:20:4b:5b:69:a2:ee:44:70:60:8f:55:29:
         a1:51:23:81:74:fb:9b:0c:c5:ac:07:c8:86:c1:0e:60:e1:c4:
         a2:46:c0:7d:4e:6e:d5:a4:6a:2d:12:b6:bd:64:a5:9a:f6:96:
         85:41:d7:ba:55:68:2d:c3:ff:81:5a:63:f2:76:65:68:c7:de:
         ec:e4:c9:3f:a3:22:1d:da:52:44:ee:87:82:72:4b:51:58:f5:
         98:41:d2:d5:89:5e:0d:12:bc:33:df:68:ab:4e:8d:b9:fc:30:
         85:52:c9:3d:3e:6e:05:7f:24:04:ac:97:a5:9e:f5:b3:ab:c5:
         ba:d3:35:bd:66:de:f4:b9:db:69:89:d2:32:fa:78:36:64:e1:
         a3:9b:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:21 2025 by rpki-client